Owlglass

Network Traffic per Process

Examine network traffic based on PID

Use netsh trace:

1
2
3
netsh trace start capture=yes traceFile=c:\tracefolder\traceName.etl
...
netsh trace stop

Then open the .etl file with NetMon