SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/aplus-netstat-pid

Which netstat option adds the process ID (PID) for each active connection?

netstat -o shows the owning process ID for each connection.

Start playing free

  1. -e
  2. -r
  3. -o ✔

Why: With the PID from netstat -o you can look up the program in Task Manager. That helps you find which application opened a suspicious connection.

Huh, didn't know that: netstat -a displays all active TCP connections and the TCP and UDP ports the computer is listening on.

The dad joke
There are 10 types of people: those who understand binary and those who don't.
Like this card?
Play the game

References

Answer: -o. With the PID from netstat -o you can look up the program in Task Manager. That helps you find which application opened a suspicious connection.

  1. netstat command reference, Microsoft Learn learn.microsoft.com/en-us/windows-server/administration/windows-commands/netstat
    -o Displays active TCP connections and includes the process ID (PID) for each connection.
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Tech & GadgetsWhich TCP port does Secure Shell (SSH) use by default?Tech & GadgetsWhich port does SMTP use by default to send and relay email?Tech & GadgetsWhich port does POP3 use by default to download email?

That's stuff everyone should know.