Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

How can I monitor an EXE file when it is running to see what URL it is connecting to? I assume there must be free software out there that can do this fairly easily?

share|improve this question
    
Any firewall that monitors outgoing traffic should tell you. Set the firewall running, then start the program. It's request should be logged and then you can find the URL. –  ChrisF Jan 26 '10 at 20:06
add comment

5 Answers

up vote 10 down vote accepted

For in depth analysis, Wireshark is your best bet as Phoshi has already mentioned. For a quick look at the URL, you can use netstat from the command line, or TCPView.

alt text

C:\Documents and Settings\Administrator>netstat -b

Active Connections

  Proto  Local Address          Foreign Address        State           PID
  TCP    john:1969              85.65.97.58.dynamic.barak-online.net:27645
  [deluged.exe]

  TCP    john:1604              vx-in-f100.1e100.net:http  ESTABLISHED  2904
  [firefox.exe]

  TCP    john:1716              79-114-229-43:60126  ESTABLISHED        732
  [deluged.exe]
share|improve this answer
    
+1 didn't know about console netstat –  whitequark Jan 26 '10 at 19:30
add comment

Try Wireshark - it's just about the best out there.

share|improve this answer
    
+1 for Wireshark as well :) –  Glen Y. Jan 26 '10 at 19:47
add comment

If you want just the "URL" part, SmartSniff is one of the easiest tools. It can be used as a generic packet sniffer too.

share|improve this answer
add comment

Out of the box I believe you can also find this out with netstat command. But I don't know for sure anymore because I am not running windows(only when really necessary) anymore.

share|improve this answer
add comment

Try Fiddler. It's a proxy for doze, which registers itself as the system proxy. If your application uses the system proxy (it might bypass it) then its requests will be intercepted by Fiddler when it's running.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.