Wireshark · Ethereal-users: Re: [Ethereal-users] Discovering the process that generated a packet

[Guy Harris <gharris@xxxxxxxxx>]

Andrew Hood wrote:
> Keith French wrote:
> > If you issue a
> >
> > netstat -o
>
> In the version I have (net-tools 1.60 - netstat 1.42) it is "netstat -p"

In the version I tried, it was built into the OS, not part of an add-on 
package.

You *were* running this on Windows, right? :-)

I.e., as per my earlier mail, finding out what process has a given 
socket open is platform-dependent.  The "netstat" in Windows XP uses 
"-o", presumably; I guess it's "-p" in some Linux package, and the OS X 
(and possibly at least some other BSD) "netstat" doesn't seem to have 
any option for that.