up vote 3 down vote favorite
1
share [g+] share [fb]

I was wondering, if the TCP/IP stack is part of the kernel or running as a service? Where do I find the TCP/IP stack in sysinternals ProcExp?

link|improve this question
72% accept rate
I belive the TCP/IP stack is part of the kernel - why, do you want to be able to shut it down? – Nate Koppenhaver Oct 25 '11 at 17:17
for example yes, but I was just curious where to find it? – Ian Oct 25 '11 at 17:20
2  
tcpip.sys is IPv4 and tcpip6.sys is IPv6. They're in the /WINDOWS/SYSTEM32/drivers dir. Since they are .sys drivers they will run in the kernel and probably not show up in ProcExp – Nate Koppenhaver Oct 25 '11 at 17:22
feedback

1 Answer

up vote 0 down vote accepted

The TCP/IP stack is implemented as a driver (tcpip.sys for IPv4 and tcpip6.sys for IPv6), which means that it runs in the kernel and will not be listed as a process with ProcExp, though if it has a services viewer you will be able to find it there.

I don't have ProcExp but I do use Process Hacker (which is pretty much the same) so here is a screenshow of Process Hacker's running services viewer with the TCPIP service highlighted:

Process Hacker with tcpip service highlighted

From there you should be able to stop, start, and disable the service (you can also do that with msconfig under the 'Services' tab -- for WinXP it's listed as 'TCP/IP NetBIOS Helper')

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.