Determine DLL (plugin) that initiates TCP Session
Joined: 19 April 2017
Posted: 19 April 2017 at 4:16pm
I am trying to determine the DLL or Plugin file in a host application that is responsible for the code that creates TCP sessions to servers. Here is the situation: I have plugins to Microsoft Word and Adobe Acrobat that talk communicate across the network to other servers (or sometimes locally listening services on the same machine). I want to determine from the source port (if possible) which DLL/Plugin initiated the connection. When you look in Process Explorer you can easily see the Word is the source (or Acrobat). But which DLL/plugin was the source? You can see the DLLs loaded by the host app, but there is no TCP data associated with them (at least that I can find within Process Explorer).
Is there a way to discover which plugin or DLL within a host application is the source of the code that initiates a TCP session?
If not with Process Explorer, then is there a programmatic way (system call, process table, etc.) to determine this?
Thanks in advance for any help.
|Forum Jump||Forum Permissions
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot delete your posts in this forum
You cannot edit your posts in this forum
You cannot create polls in this forum
You cannot vote in polls in this forum