Re: RE: How to find process behing TCP connection ?

[deabimakgi () btconnect com]

Have you tried netstat -anob

 -o            Displays the owning process ID associated with each connection.

 -b            Displays the executable involved in creating each connection or listening port. In some cases well-known 
executables host multiple independent components, and in these cases the sequence of components involved in creating 
the connection or listening port is displayed. In this case the executable
name is in [] at the bottom, on top is the component it called, and so forth until TCP/IP was reached. Note that this 
option             can be time-consuming and will fail unless you have sufficient permissions.

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------