Get-NetTCPConnection

Module:

NetTCPIP

Gets TCP connections.

Syntax

Get-NetTCPConnection
   [[-LocalAddress] <String[]>]
   [[-LocalPort] <UInt16[]>]
   [-RemoteAddress <String[]>]
   [-RemotePort <UInt16[]>]
   [-State <State[]>]
   [-AppliedSetting <AppliedSetting[]>]
   [-OwningProcess <UInt32[]>]
   [-CreationTime <DateTime[]>]
   [-OffloadState <OffloadState[]>]
   [-CimSession <CimSession[]>]
   [-ThrottleLimit <Int32>]
   [-AsJob]
   [<CommonParameters>]

Description

The Get-NetTCPConnection cmdlet gets current TCP connections. Use this cmdlet to view TCP connection properties such as local or remote IP address, local or remote port, and connection state.

Examples

Example 1: Get all connections

PS C:\>Get-NetTCPConnection

This command gets all current TCP connections.

Example 2: Get established connections

PS C:\>Get-NetTCPConnection -State Established

This command gets all TCP connections that have an Established state.

Example 3: Get Internet TCP connections

PS C:\>Get-NetTCPConnection -AppliedSetting Internet

This command gets all TCP connections that use a TCP applied setting of Internet.

Example 4: Get Owning Process

PS C:\>Get-NetTcpConnection -OwningProcess 18948

This command gets all Owning Process with PID 18948

Parameters

-AppliedSetting

Specifies an array of values of applied settings. The cmdlet gets connections that match the settings that you specify. The acceptable values for this parameter are:

• Internet
• Datacenter
• Compat
• Custom

Type:	AppliedSetting[]
Accepted values:	Internet, Datacenter, Compat, DatacenterCustom, InternetCustom
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-AsJob

Runs the cmdlet as a background job. Use this parameter to run commands that take a long time to complete.

Type:	SwitchParameter
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-CimSession

Runs the cmdlet in a remote session or on a remote computer. Enter a computer name or a session object, such as the output of a New-CimSession or Get-CimSession cmdlet. The default is the current session on the local computer.

Type:	CimSession[]
Aliases:	Session
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-CreationTime

Specifies an array of DateTime objects. To get a DateTime object, use the Get-Date cmdlet.

Type:	DateTime[]
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-LocalAddress

Specifies an array of local IP addresses. The cmdlet gets connections for the addresses that you specify.

Type:	String[]
Aliases:	IPAddress
Position:	0
Default value:	None
Required:	False
Accept pipeline input:	True
Accept wildcard characters:	False

-LocalPort

Specifies an array of local ports. The cmdlet gets connections for the ports that you specify.

Type:	UInt16[]
Position:	1
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-OffloadState

Specifies the offload state of a TCP connection.

Type:	OffloadState[]
Accepted values:	InHost, Offloading, Offloaded, Uploading
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-OwningProcess

Specifies the PID of the owning process of a TCP connection.

Type:	UInt32[]
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-RemoteAddress

Specifies an array of remote IP addresses. The cmdlet gets connections for the addresses that you specify.

Type:	String[]
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-RemotePort

Specifies an array of remote ports. The cmdlet gets connections for the ports that you specify.

Type:	UInt16[]
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-State

Specifies an array of TCP states. The cmdlet gets connections that match the states that you specify. The acceptable values for this parameter are:

• Bound
• Closed
• CloseWait
• Closing
• DeleteTCB
• Established
• FinWait1
• FinWait2
• LastAck
• Listen
• SynReceived
• SynSent
• TimeWait

Type:	State[]
Accepted values:	Closed, Listen, SynSent, SynReceived, Established, FinWait1, FinWait2, CloseWait, Closing, LastAck, TimeWait, DeleteTCB, Bound
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-ThrottleLimit

Specifies the maximum number of concurrent operations that can be established to run the cmdlet. If this parameter is omitted or a value of 0 is entered, then Windows PowerShell® calculates an optimum throttle limit for the cmdlet based on the number of CIM cmdlets that are running on the computer. The throttle limit applies only to the current cmdlet, not to the session or to the computer.

Type:	Int32
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

Inputs

None

Outputs

CimInstance

The Microsoft.Management.Infrastructure.CimInstance object is a wrapper class that displays Windows Management Instrumentation (WMI) objects. The path after the pound sign (#) provides the namespace and class name for the underlying WMI object.