Sysinternals Homepage
Forum Home Forum Home > Sysinternals Utilities > Process Explorer
  New Posts New Posts RSS Feed - Determine DLL (plugin) that initiates TCP Session
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

Determine DLL (plugin) that initiates TCP Session

 Post Reply Post Reply
poundonu View Drop Down

Joined: 19 April 2017
Status: Offline
Points: 2
Post Options Post Options   Thanks (0) Thanks(0)   Quote poundonu Quote  Post ReplyReply Direct Link To This Post Topic: Determine DLL (plugin) that initiates TCP Session
    Posted: 19 April 2017 at 4:16pm
Hi, folks.

I am trying to determine the DLL or Plugin file in a host application that is responsible for the code that creates TCP sessions to servers. Here is the situation: I have plugins to Microsoft Word and Adobe Acrobat that talk communicate across the network to other servers (or sometimes locally listening services on the same machine). I want to determine from the source port (if possible) which DLL/Plugin initiated the connection. When you look in Process Explorer you can easily see the Word is the source (or Acrobat). But which DLL/plugin was the source? You can see the DLLs loaded by the host app, but there is no TCP data associated with them (at least that I can find within Process Explorer).

Is there a way to discover which plugin or DLL within a host application is the source of the code that initiates a TCP session?

If not with Process Explorer, then is there a programmatic way (system call, process table, etc.) to determine this?

Thanks in advance for any help.

Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 11.06
Copyright ©2001-2016 Web Wiz Ltd.