Thursday, August 8, 2013

What is running on port 80


You can use netstat to see the process id of what is running on port 80 (or any other port for that matter). Here is the command you would use.

netstat -p tcp -ano

You can then start Task Manager and find the process that has that PID.

If you don't have a PID column you can add it.
  1. In Task Manager go to the Processes tab
  2. Go to the View menu | Select Columns... menu item.
  3. Select PID (Process Identifier)
  4. Click OK
That may or may not be useful. In my case the PID is 4 which is the System process and has the description NT Kernel & System. The problem is that lots of applications can use the kernel to open a port. Unfortunately, that was a deadend for me. I guess this exercise is sort of useful :)

No comments: