Question

Hi. I have the application which communicate with some server. I want to know what is the IP of this server. How can I capture all the traffic from specific application and not just all the traffic like wireshrk do?

Answer 1

Use Wireshark. It allows you to capture all the network traffic on your computer and you can setup custom filters including to or from an IP address, port, etc.

Answer 2

On windows, TCPView should do what you need: it can show you all the TCP and UDP connections that a particular program has open.

However, I think this is only going to be helpful if the program is opening a connection and leaving it open; they're not going to show you all network traffic by a particular program. It's possible, for instance, that it makes a very brief phone-home call as it loads, but the connection is gone by the time you run TCPView.

Process Monitor may help with getting more detail, but I haven't used it so I'm not sure how much it captures about network sockets.