OS: Windows XP
Is there any tool that can do packet sniffing by processes? I use Wireshark before, but that's too wide. I need just to look into a certain process.
Microsoft Network Monitor can display the process for each traffic "stream" captured.
Little Snitch can do this.
If the process doesn't change its ports too often, you can get a list of the process' ports with
Then use tcpdump.
Where en1 is your interface.
to get a list.
$ man -t lsof | open -f -a /Applications/Preview.app