TCPView
TCPView is a lightweight Windows utility developed by Sysinternals (Microsoft) that provides real-time monitoring of active TCP and UDP network connections. It details the local and remote addresses, state of TCP connections, and the specific executable process linked to each endpoint.
download.sysinternals.com · Official website
- ✓ Official source (winget)
- ✓ SHA256 taken from the official repository
- ✓ Last checked: Nov. 4, 2026
- This is not a virus scan. Check on VirusTotal
- Version
- 4.19
- Release date
- April 11, 2023
- License
- Proprietary
- Installer type
- zip
How do I use this?
Type Terminal in the Start menu and open it, paste the command (Ctrl+V or right-click) and press Enter. It uses winget, Windows' own package manager, to install the program from its official source.
winget install --id Microsoft.Sysinternals.TCPView -eSHA256 (file verification)
4fc5ceba3e1b27ad95a24df35d094b454ec5f9478e12a8ca2b1b222705b9683bWe couldn't find a macOS version of TCPView in the official repositories; check the publisher's website.
You can try these instead:
We couldn't find a Linux version of TCPView in the official repositories; check the publisher's website.
You can try these instead:
We couldn't find a Android version of TCPView in the official repositories; check the publisher's website.
Highlights
- Displays active TCP and UDP connections in real time
- Maps network connections directly to running Windows processes
- Highlights state changes and endpoint activity with color coding
- Allows closing open TCP connections and terminating associated processes
Who is it for?
System administrators, security analysts, and advanced Windows users who need to inspect active network connections and identify communicating applications.
Good to know before installing
- Available exclusively for Windows operating systems.
- Requires administrative privileges to display complete process ownership for all network sockets.
- Does not capture or inspect raw packet payloads like full network protocol analyzers.
How to install
Windows
- Download TCPView using the official link or install via winget command.
- Extract the downloaded ZIP archive to a folder of your choice.
- Run TCPView.exe or TCPView64.exe as Administrator to monitor all active network sockets.
Alternatives
- CurrPorts
- Wireshark
- GlassWire
Frequently asked questions
Does TCPView require installation?
No, TCPView is a portable application that can be run directly from an extracted folder without standard installation.
Is TCPView free for commercial use?
Yes, TCPView is provided completely free of charge by Microsoft Sysinternals for both personal and business use.
Why are some process names shown as Unknown?
Processes may show as Unknown if TCPView is not executed with administrative privileges.