TCPView
TCPView connects network connections on your Windows PC to the processes they use.
Developer Microsoft
Version 4.19 · Freeware · Windows
Looking for an alternative to TCPView?Compare Portmaster.Compare alternativesTCPView displays TCP and UDP endpoints with local and external addresses, ports and process names. You can have names fixed or IP-addressed. The list refreshes and uses colors to distinguish new, changed and disappeared connections. This helps if you want to know which app connects to a server. The app does not display full content of network traffic and does not replace firewall. An unknown address can also belong to a normal cloud service; assess the combination of process, path and destination.
Compare TCPView with alternatives
In network research, the difference is whether you only want to see active connections or apply rules. Check if you can recognize local addresses, external addresses and the associated process. A process name alone does not yet tell whether a connection is undesirable.
| Software | What can it do? | Platform and licence |
|---|---|---|
| TCPViewYou are viewing this app | You are viewing active TCP and UDP connections to the Windows processes they use. The app is aimed at direct connection overview. | WindowsFreeware |
| PortmasterView this alternative | You can view network activity per app and limit traffic with rules. That combines observation with a wider security device. | Windows, LinuxFreemium |
Choose an alternative to explore its features, system requirements and download options.
Who is it for?
You use TCPView when you want to connect network activity to an app. For extensive package research or structural blockades you need other tools.
Getting started
Unpack the official Sysinternals package and start TCPView. Choose in the options whether you want names to be fixed and how often the list needs to be updated.
Privacy
DNS requests may arise when solving host names. Exports may contain internal IP addresses and server names. Check those records before you share an overview with anyone.
Good to know
TCPView shows connections and processes involved, but not the full content of encrypted traffic. Closing a connection does not create a permanent blocking rule.
Please note
Do not break connections without knowing what process she is using. You can interrupt downloads, synchronization or an active work session; an app can immediately reconnect.
Advantages
- You can see what process a connection uses.
- You can compare IP addresses and host names.
- Colors make changes in the list visible.
Things to consider
- You don't see the full content of traffic.
- A destination requires further interpretation.
- Closing connections is not a permanent firewall rule.
Download TCPView
The download page opens in a new tab.
Provider’s website · learn.microsoft.com
Version history
4.19
This release shows TCP and UDP endpoints with the associated processes and also includes Tcpvcon.
You can adjust name resolution and refresh speed. Closing connections breaks a session, but does not create a permanent firewall rule.
Report a new version
More from Microsoft
Autoruns 14.3
With Autoruns you can see which programs, services and extensions start automatically on your Windows PC.
Microsoft Edge 154.0.4258.37
With Microsoft Edge, you combine Internets with documents and tab management tools.
Microsoft OneDrive 26.163.0823.0004
With OneDrive, sync files between your computer and your Microsoft account.
Microsoft OneNote 2609 build 20430.20092 (Windows)
With OneNote you collect text, images and handwritten notes in notepads with sections and pages.
Microsoft PowerToys 0.101.2362.0
With PowerToys, add practical tools to Windows.
Microsoft Teams 26246.1604.5133.838 (Windows)
Teams combine chat, online meetings and file collaboration.
Our verdict
TCPView is suitable for a first focused view of network activity. The app provides context for connections, but does not take over the assessment of reliable or unwanted traffic.
The app helps especially if you want to know which process is part of a network connection. Compare the list when opening and closing a known app. That makes the data more understandable than just looking at many addresses. An unknown address does not prove abuse; the function of the process and context count. For substantive analysis of all network traffic, you need different information than just this connection overview.
Ratings
No ratings yet. Share your experience.
Log in to rate this software.
Comments
Share your experience. Comments appear after approval.
No comments yet.