0

I'm trying to monitor incoming connections for processing. I tried GetExtendedTCPTable (UDP too), but some connections that are listed by perfmon.exe (Perfomance Monitor), are not displayed in my app. Can anyone explain why this happens and how to monitor all network activity for a process. I need: RemoteIP, LocalPort.

pushpraj
  • 13,458
  • 3
  • 33
  • 50
Max Podolskiy
  • 81
  • 9
  • Welcome to stackoverflow. Please post the code you have written so we can see what you have done so far and can help you from there. – Sim Sep 27 '14 at 12:03
  • also sould be helpful if you can let know what is working and what i s not.. like tcp is working but udp you are not getting etc.. Also did you check out http://stackoverflow.com/questions/15573504/getextendedtcptable-donesnt-return-the-same-result-as-netstat-ano – asb Sep 27 '14 at 13:48
  • yeah i tried all of this. Working: TCP works, UDP too. BUT. When i check permon, i see additional connections, i assume this is incomming connections to open UDP port. And those connections doesn't appear in extended tables. Also i've finished an solution by using sniffer and filtering it's information by PID opened ports. afterwards i'm adding ip 1 by 1 to another table with no duplication of IP addresses, so at finis i've got tables of IP connected to PID. – Max Podolskiy Sep 28 '14 at 08:57

1 Answers1

0

Answer found. MJSNiffer can help you with. You can get PID opened ports, and track all connections to exacts ports by filtering Sniffered data.

Max Podolskiy
  • 81
  • 9