Powershell to view the program's tcp network connection, powershelltcp

Powershell to view the program's tcp network connection, powershelltcp

During O & M, you often view the network connection status of a service. Here, you can use netstat to find connections and use the hash feature to avoid duplication.

$ Add =@{} while (1) {ps |? {$ _. Path-match 'e: \ games \ dream XX} | % {$ id = $ _. idnetstat-ano | ForEach-Object {$ I =$ _ | Select-Object-Property Protocol, Source, Destination, Mode, pid $ null, $ I. protocol, $ I. source, $ I. destination, $ I. mode, $ I. pid = ($ _-split '\ s {2,}') $ I} |? {$ _. Pid-eq $ id} | % {try {$ add + ={ $ _. destination = $ _. source }$ _} catch {}} sleep 1} $ add

Which software can be used to view the network connection status of the system, that is, what program is accessing the network?

This is a lot of things. The simplest method is not to use any software. Enter netstat-nao at the CMD command prompt.
You can view all the current TCP and UDP connections on the local machine, and view the corresponding process PID. In WINDOWS, software such as 360 security guard and WINDOWS optimization master all come with a network viewer, professional users can use various firewalls and various network monitors.

After the instance is started, you can use 360 to view the network connection. There will be many TCP connections with no processes ''''

360 the reason for increasing the TCP connection is that some programs are used or some websites are accessed. In addition, the system service items are also related. Check whether the project is too many.

In addition, it is estimated that the number of TCP connections for people playing SF is the most.
------------------------------------
The kill software will be automatically updated, including 360 and, and even the sogou input method will be automatically updated, so a TCP connection will appear.

In fact, you don't have to worry too much. You just need to check which path corresponding to the TCP connection to know which software is generated, and then you can remedy the problem.

In addition, the 127.0.0.xxx mentioned by the landlord is a local connection. The connection generated by the locally opened service is generated as long as a program is enabled. It is indispensable and you do not need to care about it. If you select "360", the hidden local connection disappears.