Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Looking at TCPView I can see over 25 svchost processes using TCP and UDP ports. If these svchost processes are the various services required by Windows, then why would so many be using the network?

share|improve this question
+1. Good question. Windows is chatty. svchosts obscures what is really going on. – RedGrittyBrick May 25 '12 at 9:44
Each svchost process is a different service. You can use Process Explorer to check which services are using which ports – golimar May 25 '12 at 9:50
a good question is why can't the one process listen on the various ports? I think openssh's sshd.exe may do that one process but able to listen on many ports. Perhaps it's because the programs are all different e.g. different DLL files and using svchost to communicate through – barlop May 25 '12 at 12:37
up vote 4 down vote accepted

According to wikipedia:

In the Windows NT family of operating systems, svchost.exe (Service Host, or SvcHost) is a system process which hosts multiple Windows services. Its executable image, %SystemRoot%\System32\Svchost.exe or %SystemRoot%\SysWOW64\Svchost.exe (for 32-bit services running on 64-bit systems) runs in multiple instances, each hosting one or more services. It is essential in the implementation of so-called shared service processes, where a number of services can share a process in order to reduce resource consumption.

So, is expected that you have a lot of Windows processes running over a svhost.exe. Many of them just use TCP/IP ports(sockets) to inter-processes comunication over localhost. That's why you can see a lot of network traffic over svhost.exe.

Additionally you could also find which Windows Service is running over svhost. I run "tasklist /svc" command on my computer and it returned me the dependencies between svhost and some running Windows Services:

enter image description here

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .