Wireshark · Ethereal-users: Re: [Ethereal-users] Discovering the process that generated a packet

[Andrew Hood <ajhood@xxxxxxxxx>]

Keith French wrote:
> If you issue a
> 
> netstat -o

In the version I have (net-tools 1.60 - netstat 1.42) it is "netstat -p"

> at the same time as the trace you are taking, this will list port
> numbers & Process IDs (PID) for each session. Then check the PIDs in
> task manager & netstat against the netstat port numbers and the Ethereal
> trace & you should get what you are after. OK it's a bit messy, but I
> can't think of any other way of doing it.
> 
> Keith French.
> 
> ----- Original Message ----- From: "Guy Harris" <gharris@xxxxxxxxx>
> To: "Ethereal user support" <ethereal-users@xxxxxxxxxxxx>
> Sent: Wednesday, January 11, 2006 10:47 PM
> Subject: Re: [Ethereal-users] Discovering the process that generated a
> packet
> 
> 
>> secjunky wrote:
>>
>>> So this is my question, is there a way to configure ethereal to display
>>> the process that generated the packet in question?
>>
>>
>> No.  There is no such feature in Ethereal.  Somebody would have to write
>> code to implement it.

-- 
There's no point in being grown up if you can't be childish sometimes.
                -- Dr. Who