Copyright (c) 2013 - 2016 Nir Sofer
- NetworkTrafficView - Monitor the traffic on your network adapter.
- NK2Edit - Edit, merge and repair the AutoComplete files (.NK2) of Microsoft Outlook.
TcpLogView is a simple utility that monitors the opened TCP connections on your system, and adds a new log line every time that a
TCP connection is opened or closed.
For every log line, the following information is displayed:
Even Time, Event Type (Open, Close, Listen), Local Address, Remote Address, Remote Host Name, Local Port, Remote Port, Process ID,
Process Name, and the country information of the Remote IP (Requires to download IP to country file separately.)
System Requirements & Limitations
- This utility works on any version of Windows, starting from Windows 2000 and up to Windows 10.
On 64-bit systems, you should use the x64 build of TcpLogView.
- This utility creates the TCP log by taking a snapshot of currently open TCP connections, and comparing it to the previous snapshot.
This means that if a TCP connection is opened for a very short time, then TcpLogView will not be able to capture it.
- On Windows Vista/7/8 with UAC turned on, you should run TcpLogView as administrator if you want to get full process information.
- Versions 1.27:
- When the log file is created in the first time ('Write To Log File' option), TcpLogView now adds header line to the file.
- Versions 1.26:
- Versions 1.25:
- TcpLogView now displays the process names (Some of them without the full path) for most processes when you run it without elevation ('Run As Administrator').
Also, the 32-bit version of TcpLogView now detects 64-bit processes properly.
- Versions 1.20:
- Added 'Run As Administrator' option (Ctrl+F11), which allows you to easily run TcpLogView as administrator on Windows Vista/7/8/2008.
It's needed in order to view the information of other processes running as admin.
- Versions 1.16:
- Added 'Start As Hidden' option. (This option is available when the tray icon is enabled)
- Versions 1.15:
- Added 'Write To Log File' option. When it's turned on, all log lines are automatically written to TcpLogView.csv located in the same folder of TcpLogView.exe
- Versions 1.12:
- Versions 1.11:
- 'No Local-Host Connections' option now also works with IPv6 loopback address.
- Versions 1.10:
- Added 'No Local-Host Connections' option. When it's turned on, connections with 127.0.0.1 in both 'Local Address' and 'Remote Address' will not be added.
- Versions 1.06:
- Fixed bug: The 'Resolve IP Addresses' feature failed to work on some versions of Windows. (Ooops... I forgot to initialize the Winsock DLL...)
- Versions 1.05:
- Added 'Scroll Down On New Line' option. If it's turned on, TcpLogView automatically scrolls to the bottom when a new line is added.
- Versions 1.00 - First release.
Start Using TcpLogView
TcpLogView doesn't require any installation process or additional dll files. In order to start using it, simply run the executable file - TcpLogView.exe
After running TcpLogView, it starts logging the TCP connections, and adds a new line every time that TCP connection is opened or closed.
You can clear the current log by using the Clear Log option (Ctrl+X)
Download IP to country file
In order to get country information of the remote IP address ('Remote IP Country' column), you should download one of the following files, and put the file
in the same folder of TcpLogView.exe:
You should save the file as IpToCountry.csv in the same folder of TcpLogView.exe
- GeoLite City database
Simply download the GeoLite City in Binary / gzip (GeoLiteCity.dat.gz) and put it in the same folder of TcpLogView.exe
Integration with IPNetInfo utility
If you want to get more information about the remote IP address displayed in TcpLogView utility,
you can use the Integration with IPNetInfo utility in order to easily view the IP address information loaded directly from WHOIS servers:
- Download and run the latest version of IPNetInfo utility.
- Select the desired connections, and then choose "IPNetInfo - Remote Address" from the File menu (or simply click Ctrl+I).
- IPNetInfo will retrieve the information about remote IP addresses of the selected items.
Translating TcpLogView to other languages
In order to translate TcpLogView to other language, follow the instructions below:
- Run TcpLogView with /savelangfile parameter:
A file named TcpLogView_lng.ini will be created in the folder of TcpLogView utility.
- Open the created language file in Notepad or in any other text editor.
- Translate all string entries to the desired language.
Optionally, you can also add your name and/or a link to your Web site.
(TranslatorName and TranslatorURL values) If you add this information, it'll be
used in the 'About' window.
- After you finish the translation, Run TcpLogView, and all translated
strings will be loaded from the language file.
If you want to run TcpLogView without the translation, simply rename the language file, or move
it to another folder.
This utility is released as freeware.
You are allowed to freely distribute this utility via floppy disk, CD-ROM,
Internet, or in any other way, as long as you don't charge anything for this and you don't
sell it or distribute it as a part of commercial product.
If you distribute this utility, you must include all files in
the distribution package, without any modification !
The software is provided "AS IS" without any warranty, either expressed or implied,
including, but not limited to, the implied warranties of merchantability and fitness
for a particular purpose. The author will not be liable for any special, incidental,
consequential or indirect damages due to loss of data or any other reason.
If you have any problem, suggestion, comment, or you found a bug in my utility,
you can send a message to firstname.lastname@example.org
TcpLogView is also available in other languages. In order to change the language of
TcpLogView, download the appropriate language zip file, extract the 'tcplogview_lng.ini',
and put it in the same folder that you Installed TcpLogView utility.