Wireshark-users: Re: [Wireshark-users] PID as column on Wireshark
: Martin Visser <martinvisser99@xxxxxxxxx
: Mon, 28 Sep 2009 10:00:29 +1000
I'm afraid not. Wireshark works on a network interface level, analysing packets that as they pass by. It has no knowledge of the process sending and receiving packets.
The only program that I that can do this is Microsoft Network Monitor, which of course only runs on Windows (and obviously has hooks into the host operating system)