<div>
<div class="content wysiwyg-content">
I can packet sniff and I love Sysinternals tcpview.exe, but I wonder if more insight can be shared, what I want to do is run a small footprint utility on a Windows box and log TCP sessions, need to know which client &nbsp;IP/Hostnames are connecting to which server TCP ports (and even the windows process on that TCP port) and log over a period of time to understand usage patterns, perhaps windows has built in tools for this but if something could dump it to a slick report or graph that would be great
</div>
</div>


I can packet sniff and I love Sysinternals tcpview.exe, but I wonder if more insight can be shared, what I want to do is run a small footprint utility on a Windows box and log TCP sessions, need to know which client  IP/Hostnames are connecting to which server TCP ports (and even the windows process on that TCP port) and log over a period of time to understand usage patterns, perhaps windows has built in tools for this but if something could dump it to a slick report or graph that would be great

TCP session logging over time

The Internet Protocol (IP) is the principal communications protocol in the Internet protocol suite for relaying datagrams across network boundaries, organized in abstraction layers, traditionally called "Link," "Internet," "Transport" and "Application”. Its routing function enables internetworking, and essentially establishes the Internet. IP defines packet structures that encapsulate the data to be delivered. It also defines addressing methods that are used to label the datagram with source and destination information.

Internet Protocols

Transmission Control Protocol/Internet Protocol (TCP/IP) is the set of networking protocols that define end-to-end connectivity specifying how data should be packeted, addressed, transmitted, routed and received at the destination. This functionality is organized into four abstraction layers which are used to sort all related protocols according to the scope of networking involved.