Get-NetTCPConnection

Get TCP connections.

Syntax
      Get-NetTCPConnection [[-LocalAddress] String[]] [[-LocalPort] UInt16[]] [-AppliedSetting AppliedSetting[]]
         [-CimSession CimSession[]] [-CreationTime DateTime[]] [-OffloadState <OffloadState[]>]
            [-OwningProcess UInt32[]>] [-RemoteAddress String[]] [-RemotePort UInt16[]]
               [-State State[]] [-ThrottleLimit Int32] [CommonParameters]

Key
   -AppliedSetting [AppliedSetting[]]
        Specifies an array of values of applied settings. The cmdlet gets connections that match the settings that you 
        specify. The acceptable values for this parameter are:

        -- Internet
        -- Datacenter
        -- Compat
        -- Custom

    -CimSession [CimSession[]]
        Runs the cmdlet in a remote session or on a remote computer. Enter a computer name or a session object, such 
        as the output of a New-CimSession or Get-CimSession cmdlet. The default is the current session on the local 
        computer.

    -CreationTime [DateTime[]]
        Specifies an array of DateTime objects. To get a DateTime object, use the Get-Date cmdlet.

    -LocalAddress [String[]]
        Specifies an array of local IP addresses. The cmdlet gets connections for the addresses that you specify.

    -LocalPort  [UInt16[]]
        Specifies an array of local ports. The cmdlet gets connections for the ports that you specify.

    -OffloadState [OffloadState[]]
        Specifies the offload state of a TCP connection.

    -OwningProcess [UInt32[]]
        Specifies the PID of the owning process of a TCP connection.

    -RemoteAddress [String[]]
        Specifies an array of remote IP addresses. The cmdlet gets connections for the addresses that you specify.

    -RemotePort [UInt16[]]
        Specifies an array of remote ports. The cmdlet gets connections for the ports that you specify.

    -State [State[]]
        Get connections that match the states that you specify. Specifies an array of TCP states. 
        The acceptable values are:
          -- Closed
          -- CloseWait
          -- Closing
          -- DeleteTCB
          -- Established
          -- FinWait1
          -- FinWait2
          -- LastAck
          -- Listen
          -- SynReceived
          -- SynSent
          -- TimeWait

    -ThrottleLimit
        The maximum number of concurrent operations that can be established to run the cmdlet. If this 
        parameter is omitted or a value of 0 is entered, then PowerShell will calculate an optimum throttle limit 
        for the cmdlet based on the number of CIM cmdlets that are running on the computer.
        The throttle limit applies only to the current cmdlet, not to the session or to the computer.

Standard Aliases for Get-NetTCPConnection: group

The Get-NetTCPConnection cmdlet gets current TCP connections. Use this cmdlet to view TCP connection properties such as local or remote IP address, local or remote port, and connection state.

Examples

Get all connections:

PS C:\> Get-NetTCPConnection

Get only established connections:

PS C:\> Get-NetTCPConnection –State Established

Get Internet TCP connections:

PS C:\> Get-NetTCPConnection –AppliedSetting Internet

Get all HTTPS connections on port 443:

PS C:\> Get-NetTCPConnection -RemotePort 443 -State Established

“You may say I'm a dreamer, but I'm not the only one. I hope someday you'll join us...” ~ John Lennon

Related PowerShell Cmdlets:

Script to resolve IP addresses and the program maintaining each connection - Idera.com
Set-NetTCPConnection - Set TCP connections.
NETSTAT - Display current TCP/IP network connections and protocol statistics.