Search code examples
powershellnetstat

How can i show only local address and PID in powershell?


 (netstat -ano) -replace '0\.0\.0\.0:(\d+)','$1        '

what i want is to show only local address and pid using above code

  Proto  Local Address          Foreign Address        State           PID
  TCP    135                    0                      LISTENING       1172
  TCP    445                    0                      LISTENING       4
  TCP    5040                   0                      LISTENING       7300
  TCP    5357                   0                      LISTENING       4
  TCP    7680                   0                      LISTENING       14100
  TCP    49664                  0                      LISTENING       988
  TCP    49665                  0                      LISTENING       896
  TCP    49666                  0                      LISTENING       1724
  TCP    49667                  0                      LISTENING       1472
  TCP    49668                  0                      LISTENING       3520
  TCP    49728                  0                      LISTENING       968

but what i want

Local Address             PID
135                       1172
445                       4
5040                      7300
.                         .
.                         .
.                         .

Solution

  • To just get the output you're requesting by column headers in Powershell, you can use:

    Get-NetTCPConnection | 
      Select-Object LocalAddress, OwningProcess | 
      Sort-Object LocalAddress, OwningProcess
    

    Your example data seems to show ports rather than addresses, so:

    Get-NetTCPConnection | 
      Select-Object LocalPort, OwningProcess | 
      Sort-Object LocalPort, OwningProcess
    

    If you also need UDP connections, substitute Get-NetUDPEndpoint for Get-NetTCPConnection above.

    Finally, if you want it all together:

    (Get-NetUDPEndpoint |
        Select-Object @{L="Proto"; E={"TCP"}}, LocalAddress, LocalPort, OwningProcess
    ) + (Get-NetTCPConnection |
        Select-Object @{L="Proto"; E={"UDP"}}, LocalAddress, LocalPort, OwningProcess
    ) |
        Sort-Object Proto, LocalPort, LocalAddress