TCPView 4.19

Overview

TCPView is a Microsoft program that is not much publicized as it is more of a programmers' and technicians' tool.

The software displays in real-time which applications are accessing TCP or UDP ports and connecting via a list of those with active TCP or UDP endpoints. IP addresses being accessed by programs can be switched to their domain name equivalent by using the appropriate toggle button on the toolbar.

The level of information is more detailed than is supplied with the NetStat information program which comes with Windows.

There is also a program called TCPVCON which is a command line equivalent of the TCPView GUI version. This makes it possible to use this program via scripts in an automated fashion for occurrences when a particular program only calls out at certain times of the day (or night).

The refresh rate is initially once a second but this can be altered using the program settings.

Installation

This is a portable application that does not need to be installed.

There was no adware, toolbars, spyware or malware included with the setup package.

TCPView requires Windows OS.

Interface

The interface is modern enough to be quite useable and provides all the information that could be required.

There is a menu system with top-level menu options for File, Options, Process, View, and Help. Below this are four toolbar buttons providing access to key features.

The list of applications accessing a TCP port is shown in real-time in the main viewer. There are columns for Process, PID, Protocol, Local Address, Local Port, Remote Address, Remote Port, State, Sent Packets, Sent Bytes, Received Packets, and Received Bytes.

In the footer there is a readout showing the number of endpoints, established, listening, time wait, and close wait statistics.

Pros

• View the applications using TCP port communications
• See all the ports that an application may use to communicate
• See how many packets and bytes have been sent or received by an application over a given port number
• Review detailed statistics about each port access including Process, PID, Protocol, Local Address, Local Port, Remote Address, Remote Port, State, Sent Packets, Sent Bytes, Received Packets, and Received Bytes
• Real-time updates
• See IP addresses and domain names for IP addresses being accessed by programs

Cons

• Too complex for amateur users to understand and make use of the software

Alternatives

CurrPorts will show the open TCP and UDP ports for users to examine.

Conclusion

TCPView is a good real-time viewer of which applications are opening TCP/UDP ports to communicate.