Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Using netstat -a -o -n I can get the list of ports and PID

then I need to go to task manager and add the PID and see who is it. (pretty frustrating)

enter image description here

I was wonder if there is a CMD command which does it all ( using find , for , powershell)

so that I could get the process name

share|improve this question

2 Answers 2

up vote 11 down vote accepted


Use the -b parameter:

  -b            Displays the executable involved in creating each connection or
                listening port. In some cases well-known executables host
                multiple independent components, and in these cases the
                sequence of components involved in creating the connection
                or listening port is displayed. In this case the executable
                name is in [] at the bottom, on top is the component it called,
                and so forth until TCP/IP was reached. Note that this option
                can be time-consuming and will fail unless you have sufficient

Note The netstat -b command will fail unless run from an elevated command prompt.


Filter the process list and find the PID you're interested in:

tasklist | findstr /c:"PID"  

Alternate solution

You can use Tcpvcon.exe instead. No admin rights required.

Tcpvcon usage is similar to that of the built-in Windows netstat utility.

Usage: tcpvcon [-a] [-c] [-n] [process name or PID]

 -a Show all endpoints (default is to show established TCP connections).
 -c Print output as CSV.
 -n Don't resolve addresses.
share|improve this answer
you're the man. –  Royi Namir Jan 26 '14 at 19:14

I think you are looking for TCPView from SysInternals.

share|improve this answer
I was wonder if there is a CMD command which does it all –  Royi Namir Jan 26 '14 at 16:13
Keep going - There is a command-line component of TCPView.. –  Leptonator Jan 26 '14 at 16:14
oh ok. thought maybe someone already done it using for,find etc. –  Royi Namir Jan 26 '14 at 16:15
It should not be too hard to do.. I would bet robvanderwoude.com has something on it. Per the TCPView Page - "The TCPView download includes Tcpvcon, a command-line version with the same functionality." –  Leptonator Jan 26 '14 at 16:16
Very good tool suite.. if it wasn't for msys and sis I'd be using a nix box. :) –  Eddie B Aug 7 at 18:38

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.