What does "Can not obtain ownership information" in Netstat -ab mean?

(Windows 7 x86)

If I run netstat -ab, I get a list of active connections, along with the names of the applications which have opened t开发者_运维问答he connections.

However, some connections (including the one opened by my app) are listed as:

Can not obtain ownership information

Why?

Thanks,

Darren.

Run netstat -ano and look at the PID that it is under.

If you add the '-o' option, you'll see the PID values, and likely it will be PID 4, which is the System PID. This means it is probably a Service. (Note that Windows 7 will report "PID 4", while Windows XP will report "System").

This link gives some ideas of what it might be: https://superuser.com/questions/43307/whys-is-system-process-listening-on-port-80?rq=1

It's probably NETBIOS, if the port used is 137, 138, or 139. On my Win7 system, disabling NETBIOS on all my network adapters from the Network and Sharing Center made the connections disappear from netstat.

I'm posting this as a new answer because the other questions linked above are protected, and I can't reply to those answers as a guest. Hopefully this will help people like me who stumble onto this question.

Just went through this lately, just to add to the answers already. Running a .NET webserver, it often happens with incoming web connections. They seem to get PID 0 (System Idle) which is just a holding place for connections. It says "Can not obtain ownership information" for these.

Good description of why its on PID 0, TCP connection owned by pid zero