Determine which ports a specific process on Windows is using

Question:

Answer:

1. Find out the process ID (PID) associated with your running application. You can use the task manager for that or from the command line:
   [c:\] tasklist | findstr YPager*
   
   This will show you the PID in the second column. (Try tasklist /fi "IMAGENAME eq YPager.exe" as an alternative; it will include the column headers.
   
   
2. Now use the PID (in our example, it was 7200) and the NETSTAT tool.
   [c:\] netstat -ano | findstr 7200

      TCP    0.0.0.0:4161           0.0.0.0:0              LISTENING     7200
      TCP    0.0.0.0:5101           0.0.0.0:0              LISTENING     7200
      TCP    192.168.0.9:4161       216.155.193.165:5050   ESTABLISHED   7200
      UDP    127.0.0.1:4172         *:*                                  7200
    

3. This means Yahoo Messenger is listening on ports 4161 and 5101 for all addresses of this machine. It has an established connection with 216.155.193.165. To find out who is behind this 216.155.193.165, use NSLOOKUP:
   nslookup 216.155.193.165
   

   Name:    cs38.msg.dcn.yahoo.com
    Address:  216.155.193.165

   I guess that is ok. You could also have tried netstat -a which shows you all connections, and with the IP numbers already resolved to names. Don't try this on a PC where Peer-to-Peer software (P2P) like edonkey, Kazaa or WinMX is running. You'll have to wait *very* long if your P2P system works as designed. :-)

http://www.sysinternals.com/ntw2k/source/tcpview.shtml