wireshark

Filter by process/PID in Wireshark


Is there a way to filter or follow a TCP/SSL stream based on a particular process ID using Wireshark?


Solution

  • I don't see how. The PID doesn't make it onto the wire (generally speaking), plus Wireshark allows you to look at what's on the wire - potentially all machines which are communicating over the wire. Process IDs aren't unique across different machines, anyway.