Jump to content
Strawberry Orange Banana Lime Leaf Slate Sky Blueberry Grape Watermelon Chocolate Marble
Strawberry Orange Banana Lime Leaf Slate Sky Blueberry Grape Watermelon Chocolate Marble

MSFN is made available via donations, subscriptions and advertising revenue. The use of ad-blocking software hurts the site. Please disable ad-blocking software or set an exception for MSFN. Alternatively, register and become a site sponsor/subscriber and ads will be disabled automatically. 


Sign in to follow this  
RAGGATIP

How to establish which service is connecting to an IP address

Recommended Posts

Hi all,

I would like to know how to establish which service is connecting to an IP address address. I can see in Comodo that svchost.exe has established a connection but cannot find out exactly which service it is that's connecting.

Thanks in advance

Share this post


Link to post
Share on other sites

You may be able to find out more info using Process Explorer and Process Monitor. You can set ProcMon to use filters and enable extra information.

Share this post


Link to post
Share on other sites

+1 - Process Monitor can give you the Process ID (PID) and the callstack of the svchost making the request (just use the network filter in procmon), and Process Explorer can give you more information about that PID and what is running in it (if the stack from procmon doesn't already make it incredibly obvious).

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...