What it does
TCPView lists local and remote endpoints, TCP states and the owning processes, with a command-line companion called Tcpvcon.
Start TCPView to enumerate active TCP and UDP endpoints with their process and service names. Toggle address resolution or change the default one-second refresh when following a live issue; colors show new, changed and deleted entries. Save captures the output window, while closing an established TCP connection is a separate action. For scripts, Tcpvcon accepts a process name or PID and can emit CSV without resolving addresses. Its default is established TCP connections; select its all-endpoints option when you need the broader list. Microsoft lists Windows 8.1 or later and Windows Server 2012 or later for this version.
Strengths
- Graphical and command-line endpoint views
Sources
- TCPView for Windows - Sysinternals | Microsoft Learn (Oct 26, 2026)