TcpView是一个免费的端口和进程监视工具，能够列出目前所有TCP、UDP端口的进程清单，本机和远程的TCP连接，类似DOS命令netstat的图形版，操作轻松，可方便查看有无可疑进程在偷偷访问网络。

　　TCPView是微软提供的一款免费软件，可列出本机计算机的全部对外连接情况。假使你想知道某个软件有无偷偷对外送出或接收数据，用TCPView来检查最合适了。

　　当执行了TCPView软件后，会列出当前计算机的全部联网进程状态，并自动将IP位址变成网站域名，方便我们获悉其目的。

　　我们也可以按保存按钮，将当前的进程连接情况存成txt文档，亦可用鼠标左键选取几个项目，右键菜单Copy复制。

　　下载：TcpView.zip

　　TCPView is a Windows program that will show you detailed listings of all TCP and UDP endpoints on your system, including the local and remote addresses and state of TCP connections. On Windows Server 2008, Vista, NT, 2000 and XP TCPView also reports the name of the process that owns the endpoint. TCPView provides a more informative and conveniently presented subset of the Netstat program that ships with Windows. The TCPView download includes Tcpvcon, a command-line version with the same functionality.

　　When you start TCPView it will enumerate all active TCP and UDP endpoints, resolving all IP addresses to their domain name versions. You can use a toolbar button or menu item to toggle the display of resolved names. On Windows XP systems, TCPView shows the name of the process that owns each endpoint.

　　By default, TCPView updates every second, but you can use the Options|Refresh Rate menu item to change the rate. Endpoints that change state from one update to the next are highlighted in yellow; those that are deleted are shown in red, and new endpoints are shown in green.

　　You can close established TCP/IP connections (those labeled with a state of ESTABLISHED) by selecting File|Close Connections, or by right-clicking on a connection and choosing Close Connections from the resulting context menu.

　　You can save TCPView’s output window to a file using the Save menu item.