How does Windows "netstat -b" determine the name of the process to which each socket belongs?

Question

I am looking for the main API calls that netstat -b uses to define ownership processes for each socket. Any ideas?

+6

windows api sockets

Stabledog Apr 23 '10 at 22:32

source share

1 answer

Stewart · Accepted Answer · 2010-04-24T03:00:53+0000

You need to look at the IPHelper APIs, in this case specifically GetExtendedTcpTable and GetOwnerModuleFromTcpEntry