I have been using TCPview lately to see what connections are made by different processes on my PC. Would somebody please explain what the following situations mean? Thanks.
-
TCP
Local Address: PC1234567890:3883
Remote Address: PC1234567890:0
State: LISTENING -
TCP
Local Address: PC1234567890:4696
Remote Address: localhost:4697
State: ESTABLISHEDLocal Address: PC1234567890:4697
Remote Address: localhost:4696
State: ESTABLISHED -
UDP
Local Address: PC1234567890:1234
Remote Address: .
State:
Best Answer
In general, Local Address is the IP Address/hostname of the network interface on which the connection is made. Remote address is the IP Address/hostname of the remote computer to which the connection is connected. The state is the current state of the connection.
LISTENING
).ESTABLISHED
). The connection is actually between two sockets on your computer. One end of the connection is using the PC1234567890 interface on 4697 and the other end is using the loopback interface(localhost) on port 4696.Just as a note, if you would like to toggle between viewing IP Addresses and hostnames in TCPView you can uncheck the
Resolve Addresses
option from theOptions
Menu