TCPView Logo
Copyright © 1998 Mark Russinovich
Last Updated June 11, 1998, Version 1.0
Introduction TCPView is a Windows program that will show you detailed listings of all TCP and UDP endpoints on your system, including the remote address and state of TCP connections. TCPView provides a conveniently presented subset of the Netstat program that ships with Windows NT and Windows 98.

TCPView works on NT 4.0, Win2K and Windows 98. You an use TCPView on Windows 95 if you get the Windows 95 Winsock 2 Update from Microsoft.
Source Code to Netstatp Wonder how TCPView works? It relies on the same SNMP (Simple Network Management Protocol) interfaces that netstat uses to obtain TCP/IP information. The INETMIB1.DLL library exports the TCP/IP SNMP interface on NT, calling into the TCP/IP kernel-mode device driver (TCPIP.SYS) with IOCTL's that return endpoint information. The SNMP interfaces work similarly on Windows 98. There is some documentation on SNMP, which is a general information retrieval interface that is customized by individual information providers (like TCP/IP), in the Microsoft Developer Network Library. The complete sources for the command-line version of TCPView, netstatp, demonstrate the TCP/IP SNMP interface on NT and are available here for download.
Related Uility TDImon shows you TCP and UDP activity in real-time.
Winternals Product If you like TCPView, you'll love TCPView Pro. TCPView Pro, a Winternals Software product, has a number of features that make it much more powerful and useful than TCPView:
  • See what process has each endpoint opened
  • Watch the TCP and UDP activity processes perform in realtime
  • Transparent autorefresh keeps the display current
  • Used advanced filtering to narrow in on what you want to see
  • And much more...
For more information on TCPView Pro, visit its homepage at Winternals.

Download TCPView (35KB)

Download Netstatp with Source Code (23KB)

Download TCPView for Compaq Alpha (61KB)