Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

OS: Windows XP

Is there any tool that can do packet sniffing by processes? I use Wireshark before, but that's too wide. I need just to look into a certain process.

share|improve this question
    
For which OS do you want this functionality? – tbird Oct 26 '10 at 2:08
up vote 1 down vote accepted

Microsoft Network Monitor can display the process for each traffic "stream" captured.

share|improve this answer

Little Snitch can do this.

If the process doesn't change its ports too often, you can get a list of the process' ports with

$ lsof -i | grep <process name>

Then use tcpdump.

$ sudo tcpdump -i en1 port 80 > dump.txt

Where en1 is your interface.

$ ifconfig

to get a list.

$ man -t lsof | open -f -a /Applications/Preview.app
$ man -t tcpdump | open -f -a /Applications/Preview.app
$ man -t pcap-filter | open -f -a /Applications/Preview.app

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .