7

OS: Windows XP

Is there any tool that can do packet sniffing by processes? I use Wireshark before, but that's too wide. I need just to look into a certain process.

Improve this question
1
  • For which OS do you want this functionality?
    – tbird
    Oct 26, 2010 at 2:08

2 Answers 2

Reset to default
1

Microsoft Network Monitor can display the process for each traffic "stream" captured.

Improve this answer
4

Little Snitch can do this.

If the process doesn't change its ports too often, you can get a list of the process' ports with

$ lsof -i | grep <process name>

Then use tcpdump.

$ sudo tcpdump -i en1 port 80 > dump.txt

Where en1 is your interface.

$ ifconfig

to get a list.

$ man -t lsof | open -f -a /Applications/Preview.app
$ man -t tcpdump | open -f -a /Applications/Preview.app
$ man -t pcap-filter | open -f -a /Applications/Preview.app

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .