Identifying PID source of DNS request (Windows XP)
问题 I wish to identify the process that is making DNS requests. Looking at the query gives me a clue, but doesn't help me identify the exact process. I can see the local port number in Wireshark, but the request is too transient to be picked up by TCPView. Is there a logging tool which will catch DNS requests and PID? 回答1: Process Monitor from Sysinternals will give you what you want. Limit the capture to just network activity and you'll see the activity along with the PID and process name. The