Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I’m trying to determine which application or system program is using a particular port on a Windows 2008 R2 machine.
I’ve run
netstat -a -n -o
And have determined that PID is holding open port 445, which I’m interested in.
But when I run tasklist or Microsoft’s pslist program, it tells me that the process holding the port open is simply named ‘Sys’.
Is there another tool or approach I can use to find which is the real process holding it open?
PID 4 is the system process – if PID 4 is holding a port open, it means that some device driver has opened the port. Given that it’s port 445, my guess is that it’s the CIFS network filesystem or server. Try doing a “net stop srv” and “net stop rdr” from an elevated command prompt – that should shut down the service using the port.