I have a few apps running, incl. Firefox, Outlook. I took down their PID and then exit those programs.
I run the following command:
netstat -a -o -b -p tcp
It will list many connections like below
TCP 192.168.83.2:57471 xx.xx.xx.xx:http ESTABLISHED 4184 [System]
TCP 192.168.83.2:57324 xx.xx.xx.xx:http ESTABLISHED 1245 [System]
The PID 4184 is the PID of Firefox. Yet it exited and no longer shows up in Task Manager. This remains true even after 30 min.
How long does Windows 7 keep the half-open the connection? I thought the timeout is 5 min.
The other group of PID never existed before and does not show up in TaskManager either. Since it shows System, I have no way to find out which process it belongs to. How can I find out?