Display all TCP and UDP network activity on Windows
LiveTcpUdpWatch is a free software program by Nirsoft that displays information about the TCP and UDP activity of any Windows device it is run on.
Windows comes with a handful of tools that reveal network activity; you may open the network tab of the Resource Monitor, or use the command line tool netstat to display open network connections using netstat -an (also available for Linux).
LiveTcpUdpWatch is a portable program for Windows that displays live network activity. You may run the program from any location on Windows systems as it does not need to be installed and can be run right away.
The application is compatible with Windows XP and newer versions of Windows, and is provided as a 32-bit or 64-bit executable.
LiveTcpUdpWatch updates the network activity list automatically after you start the program. It lists detailed information about each network connection in its interface including the local program name and process ID, protocol, IP addresses and ports, remote IP address and domain name (if available), and sent and received bytes.
The network data is updated in realtime with new network connections added to the end of the table. You may tap on the F2 key to toggle the recording of the activity; useful if a lot of new connections are added and you need to look at some connections in detail.
The program captures TCP, UDP, IPv4 and IPv6 network data by default. A click on the Options menu at the top displays the capturing options and gives you control over them so that you may disable those that you don't require.
You find other customization options there as well: use it to have the program remove closed TCP connections automatically, auto-scroll to the newest entries, or hide localhost connections automatically.
The program comes with the usual options that all Nirsoft programs come with. You may generate HTML reports or export some or all of the data to several file formats including XML and CSV.
Nirsoft published similar tools in the past, specifically CurrPorts and NetworkTrafficView. CurrPorts displays active TCP connections and listening ports; it is an excellent program but it won't show some data, for instance when UDP packets are sent from the local computer to a remote address.
NetworkTrafficView is a network sniffer that catpures network traffic and displays summaries of that traffic in its interface.
LiveTcpUdpWatch is another handy program for Windows users and administrators. It is lightweight and portable, and works exactly as advertised. You may use it to display all TCP and UDP connections a Windows machine makes. The data may be useful to find data leaks, programs that phone home, or other network activity on the system; even if malicious actors download data from your PC to a remote address.
Now You: Do you monitor your network traffic?