Listing Current Network Sessions in Windows with Resource Monitor
Listing Current Network Sessions in Windows with Resource Monitor
“What is my computer doing on the internet?”
“What servers does this new software talk to?”
“Where are these cloud files kept?”
“Does {insert any software here} use the internet all the time or does it ask me first?”
I get these kinds of questions all the time. Many users and administrators want to know what their software is connecting to, both internet and intranet resources.
I’ve seen some very complex answers to this problem including packet analyzers, network sniffers, and even router-based logging. But there are much simpler and inexpensive tools that are already built in to Windows. One of my favorites is a GUI tool called Resource Monitor.
Using Resource Monitor to List Current Network Sessions
Resource Monitor is primarily used as a performance analysis and troubleshooting tool. Because it helps analyze network performance, it’s also handy in listing existing network sessions.
To launch Resource Monitor, you can simply click the pearl and type Resource Monitor. It is also in the Start menu under Accessories, System Tools.
When you run Resource Monitor for the first time it displays the Overview tab as shown in Figure 1.
Figure 1. The Resource Monitor main page.
There’s plenty of information right there about CPU, thread count, etc. But you’re looking for the list of existing sessions. First, click the Network tab. Then expand the Processes with Network Activity, Network Activity, and TCP Connections sections. You’ll end up with a view similar to Figure 2.
Figure 2. A dog’s breakfast of network connection data.
I’ve already sorted by Total Bytes per Second to see the processes sorted by network utilization. You can list them in any order that helps you to identify the sessions you’re looking for.
Enjoy!
Mike Danseglio -CISSP / MCSE / CEH
Interface Technical Training – Technical Director and Instructor
Mike Danseglio teaches Security classes at Interface Technical Training. His classes can be attended in Phoenix, Arizona or online from anywhere in the world with RemoteLive.
- CISSP (Certified Information Systems Security Professional)
- Certified Ethical Hacking and Countermeasures v8
- Computer Hacking Forensic Investigator – CHFI v8
- CompTIA Security + Certification Skills
You May Also Like
A Simple Introduction to Cisco CML2
0 3794 0Mark Jacob, Cisco Instructor, presents an introduction to Cisco Modeling Labs 2.0 or CML2.0, an upgrade to Cisco’s VIRL Personal Edition. Mark demonstrates Terminal Emulator access to console, as well as console access from within the CML2.0 product. Hello, I’m Mark Jacob, a Cisco Instructor and Network Instructor at Interface Technical Training. I’ve been using … Continue reading A Simple Introduction to Cisco CML2
Configuring Windows Mobility Center and How to Turn it On and Off
1 1434 1Video transcription Steve Fullmer: In our Windows training courses, we often share information about the Windows 8.1 Mobility Center. Mobility Center was introduced for mobile and laptop devices in Windows 7. It’s present and somewhat enhanced in Windows 8. Since we don’t have mobile devices in our classrooms, I decided to take a little bit … Continue reading Configuring Windows Mobility Center and How to Turn it On and Off
OSPF Adjacency Troubleshooting Solution – Getting Close to the OSPF adj
0 249 1In this video, Cisco CCNA & CCNP instructor Mark Jacob shows how to troubleshoot OSPF Adjacency issues by showing the distance between routers with the show ip ospf neighbor command.
See what people are saying...