进程与网络（TCP） GetExtendedTcpTable

最新推荐文章于 2024-10-13 19:16:54 发布

原创

最新推荐文章于 2024-10-13 19:16:54 发布 · 2.4k 阅读

3 ·

CC 4.0 BY-SA版权

文章标签：

#网络

本文展示了如何使用Windows API函数GetExtendedTcpTable获取TCP连接信息，包括本地和远程地址、状态以及关联的进程ID。代码示例中包含了处理缓冲区大小不足和无效参数的情况。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

// TcpPid.cpp : Defines the entry point for the console application.
//

#include "stdafx.h"
#include <winsock2.h>
#include <ws2tcpip.h>
#include <iphlpapi.h>
#include <iostream>
#include <iomanip>
using namespace std;

#pragma comment(lib, "iphlpapi.lib")
#pragma comment(lib, "ws2_32.lib")

#define MALLOC(x) HeapAlloc(GetProcessHeap(), 0, (x))
#define FREE(x) HeapFree(GetProcessHeap(), 0, (x))

int _tmain(int argc, _TCHAR* argv[])
{
	PMIB_TCPTABLE_OWNER_PID ptTable;
	DWORD dwSize = { 0 };
	DWORD dwRetValue = { 0 };
	struct in_addr inAddr;

	static char TcpState[][32] = 
	{
		"???",
		"CLOSED",
		"LISTENING",
		"SYN_SENT",
		"SEN_RECEIVED",
		"ESTABLISHED",
		"FIN_WAIT",
		"FIN_WAIT2",
		"CLOSE_WAIT",
		"CLOSING",
		"LAST_ACK",
		"TIME_WAIT"
	};

	ptTable= (MIB_TCPTABLE_OWNER_PID*)MALLOC(sizeof(MIB_TCPTABLE_OWNER_PID));
	dwSize = sizeof(MIB_TCPTABLE);

	if ((dwRetValue = GetExtendedTcpTable(ptTable, &dwSize, TRUE, AF_INE