Windows has Performance Monitor and Data Collector Sets feature. Apparently, it can log all system information.

I want to know, how much data, per process name, per remote IP address, was received and sent by my windows box.

Unfortunately, there are numerous performance counters and unintuitive interface. So I can't deduce how collect data I want.


Microsoft Network Monitor lets you view the traffic in a tree view. Top is traffic versus other traffic. Next level is the processes, for each processes all IPs are listed and for each IP all connections are listed. See the image below how that looks like.

Unfortunately I did not see how to get the number of bytes sent per process or IP or connection.

Microsoft Network Monitor Screenshot


Good question.

Download the process explorer from Windows Sysinternals which is a free and a good tool that shows you which process make an IP connection on which port.

Also download Wireshark , which is a free utility and run it to obtain the statistic of the network traffic on network ports such as UDP, HTTP, SMTP etc..

You can connect this two statistics to see which application sends which traffic. If you have a second computer , you can also use a TAP to look in your network connection.

  • I don't see any network related features in Process Explorer from SysInternals. Maybe you meant TCPView from SysInternals. – user2518618 Sep 14 '16 at 22:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.