I am just wondering if it is possible to find what programmes are attempting to connect to the Internet. Is there any DOS command to do this or Is there any other programme available or will have to download a programme?

I have got Windows Vista. Thanks for your help.


You can use the command prompt and run netstat. Just open the command line, and type

netstat -ban

It will display every connection with the associated process.

You may also use a program called tcpview. Just run the executable and it will show you all of the current connections being made by your system.

You will need to be an administrator in order to see all of the connections being made but if you are infected with something serious or a rootkit, the connections may also be hidden. If you really wanted a fool proof way, you would need to setup a gateway or proxy of some sort for the machine.

  • 1
    If the OP has a router of some kind for his or her internet connection, it may have a connection monitor too. – afrazier Dec 15 '10 at 12:55
  • +1 for tcpview - it's hella easier than trying to read netstat, but it's better than simply checking resource monitor because you can see where the connections are going (some of them might be to localhost!). – Shinrai Dec 15 '10 at 15:19
  • Process Explorer is a great tool too. – qroberts Dec 15 '10 at 15:43

Wireshark - http://www.wireshark.org/ - if you want a bit deeper look at everything going out over the network. It gets pretty in depth, but I've found little that matches it.

  • How do you determine which process generated the traffic seen in Wireshark? – DougC Mar 5 '20 at 15:49

If you install a firewall that monitors outgoing network traffic - like Comodo it will pop up an alert when a program tries to make a connection.

At that point you can either allow it just that once, allow the application to connect any time or block the application.

The Windows-7 firewall has this functionality built in, but the Windows XP one doesn't (it only monitors inbound traffic). I don't know for certain about the Vista one - but I would guess it doesn't from your question.


You can use Window's built in Resource Monitor to take a look at all the tasks that are accessing your Network interfaces.

Open up your start menu and type in "Resource Monitor" and open it up. There, click on the Network tab and start going through your processes.


Use firewall log to check application logging for Windows Firewall The log mentioned above does not show what application generated the log entry, only IP/port information. If auditing for the Windows Filtering Platform is enabled this information can be logged. Run the following command from an administrative command prompt on the system you would like to enable the windows filtering platform logging on: auditpol /set /subcategory:"{0CCE9225-69AE-11D9-BED3-505054503030}" /failure:enable

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.