Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I try with netstat -ab -p tcp -n and among the results get:

  TCP              LISTENING
Can not obtain ownership information

I am running as administrator and get that message. I also downloaded a utility to show network activity for exe's but nothing open is listening on port 47001 according to the utility.

How can I find out what is listening?

share|improve this question
Did you try something like Wireshark? –  vvsraju Feb 15 '11 at 19:04
@vvsraju wireshark is notorious for (understandably) not showing you the EXE. It's simply not mentioned in the packet. –  barlop Jan 7 '13 at 22:17

3 Answers 3

up vote 7 down vote accepted

Try netstat with -o, it shows PID. and then use tasklist to see PID and process name. task manager also shows PID and process name

you can do your other switches with -o like -n is a good one and whatever else.

share|improve this answer

Since your talking about windows, you can use "netstat -b" to see which executable is using that port.

Alternatively, Sysinternal's TCPVIew does the same, but in a much better way.

share|improve this answer
+1 for Sysinternals ... great tools! –  tomjedrz Jul 13 at 23:35

http://www.iana.org/assignments/port-numbers lists this port as: winrm 47001/tcp Windows Remote Management Service Ryan Mack rmack&microsoft.com 29 April 2009

Now that doesn't prove that's what using it on your computer, but it's a pretty good guess.

share|improve this answer
I saw that as well, but I would like to be sure. If it is a windows service why can't netstat get the ownership info? –  Jay White Feb 15 '11 at 19:22

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.