Reply To: Which process sent the UDP packet?

Home Forums Discussions Support Portal Which process sent the UDP packet? Reply To: Which process sent the UDP packet?

#11031
Vadim Smirnov
Moderator

You can use GetExtendedUdpTable to find the dwLocalAddr:dwLocalPort to dwOwningPid association and then if necessary call GetOwnerModuleFromUdpEntry with TCPIP_OWNER_MODULE_INFO_BASIC to obtain pModuleName and pModulePath.