When you start TCPView it will enumerate all active TCP and UDP endpoints, resolving all IP addresses to their domain name versions. You can use a toolbar button or menu item to toggle the display of resolved names. On Windows XP systems, TCPView shows the name of the process that owns each endpoint.
TCPView works with all versions of Windows and as I said it is a useful tool when trying to know more about your TCP and UDP connections. New endpoints are shown in green color, closings are shown in red and yellow means endpoint is changing.
You can close established TCP/IP connections (those labeled with a state of established) by selecting File|Close Connections, or by right-clicking on a connection and choosing Close Connections from the resulting context menu.
If you want to see who owns the domain registered for a remote address, select the item containing the name and choose Whois from the context menu or the File menu. You can also end a process by right clicking on it. If you want you can save TCPView's output window to a file using the Save menu item for future analysis.