How does Windows "netstat -b" determine the name of the process that owns each socket? [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.

---

We don’t allow questions seeking recommendations for books, tools, software libraries, and more. You can edit the question so it can be answered with facts and citations.

Closed 4 years ago.

开发者_开发知识库 Improve this question

I'm looking for the underlying API calls that netstat -b is using to determine the owning processes for each socket. Any ideas?

---

You need to look at the IPHelper APIs, in this case specifically GetExtendedTcpTable and GetOwnerModuleFromTcpEntry