Track internet usage on a windows box

#1

Hi Guys -
Tom’s video on tacking down traffic on his cell phone has gotten me interested in doing the same thing in Win10 as well as in Linux.

Specifically, I’d like to be able to track down IP addresses that get blocked leaving my home network via pfBlocker and be able to see what process generated that traffic.

New to wireshark but it doesn’t seem to have any PID data that I can find.

For windows I found “Resource Monitor” which shows app name, PID, port data as well as destination IP address, it just doesn’t seem to have a very big cache and it doesn’t keep data for very long, also, no ability to output data for further manipulation.

#2

You can try Glasswire.

#3

Thanks I’ll give it a try.
In the meantime, I found an old windows app called “windows network monitor” that MS abandoned, but, is still available for download. It is set up to scan all of the traffic over my network adapter and alert only when a specified address is found. Its scanning, but, so far no hits. I’ll let it run for a day or so and see what happens.