How to view and kill running process Windows terminal using netstat and taskkill, these are two powerful utility tool to view running processes and to kill running process on command terminal in windows.
1. Overview of View and kill running process Windows
netstat and taskkill are two powerfull utility tool to view running processes on command terminal in windows. In this post I tried to demonstrate following things:
- how to view running process in windows command terminal.
- how to kill any running process in window command terminal
At the end of reading this post , you can learnt how to find any running process on any specific port and how to kill those running process by using PID (Process ID). There are different tool which you need to install to view running process but this post is about root level using windows command line utility tool.
2. Prerequisite to kill running process in Windows
Open a terminal by typing cmd on run and type different command to view what are the processes running on which port. You can filter out any port number or any process running in your system.
3. How to view all running prcesses?
netstat is a command to view all running process in Windows.
netstat -ano
You can take help to view all available options in netstat command
netstat /Help
3. How to view running prcesses on specific port?
On my system , I run Tomcat on 8080 port so you can view process id where Tomcat running.
Syntax:
netstat -ano | find ":8080"
or you can use following command too.
netstat -ano | findstr :8080
Here, find and findstr used to filter out any specific string from the output of netstat command.
console output:
E:\Ranjeet>netstat -ano | find "8080" TCP 0.0.0.0:8080 0.0.0.0:0 LISTENING 3252 TCP [::]:8080 [::]:0 LISTENING 3252 E:\Ranjeet>netstat -ano | findstr :8080 TCP 0.0.0.0:8080 0.0.0.0:0 LISTENING 3252 TCP [::]:8080 [::]:0 LISTENING 3252
4. How to kill any process by pid?
Syntax
taskkill /F /PID
console output:
E:\Ranjeet>netstat -anof | find ":8080" TCP 0.0.0.0:8080 0.0.0.0:0 LISTENING 3252 TCP [::]:8080 [::]:0 LISTENING 3252 E:\Ranjeet>taskkill /F /PID 3252 SUCCESS: The process with PID 3252 has been terminated. E:\Ranjeet>
Now, you can check whether any process running on port 8080 or not, you can check again, as console output says nothing running on port 8080.
E:\Ranjeet>netstat -ano | find ":8080" E:\Ranjeet>
5. netstat complete Help
syntax to view complete help as:
netstat /Help
complete terminal output:
E:\Ranjeet>netstat /Help
Displays protocol statistics and current TCP/IP network connections.
NETSTAT [-a] [-b] [-e] [-f] [-n] [-o] [-p proto] [-r] [-s] [-x] [-t] [interval]
-a Displays all connections and listening ports.
-b Displays the executable involved in creating each connection or
listening port. In some cases well-known executables host
multiple independent components, and in these cases the
sequence of components involved in creating the connection
or listening port is displayed. In this case the executable
name is in [] at the bottom, on top is the component it called,
and so forth until TCP/IP was reached. Note that this option
can be time-consuming and will fail unless you have sufficient
permissions.
-e Displays Ethernet statistics. This may be combined with the -s
option.
-f Displays Fully Qualified Domain Names (FQDN) for foreign
addresses.
-n Displays addresses and port numbers in numerical form.
-o Displays the owning process ID associated with each connection.
-p proto Shows connections for the protocol specified by proto; proto
may be any of: TCP, UDP, TCPv6, or UDPv6. If used with the -s
option to display per-protocol statistics, proto may be any of:
IP, IPv6, ICMP, ICMPv6, TCP, TCPv6, UDP, or UDPv6.
-q Displays all connections, listening ports, and bound
nonlistening TCP ports. Bound nonlistening ports may or may not
be associated with an active connection.
-r Displays the routing table.
-s Displays per-protocol statistics. By default, statistics are
shown for IP, IPv6, ICMP, ICMPv6, TCP, TCPv6, UDP, and UDPv6;
the -p option may be used to specify a subset of the default.
-t Displays the current connection offload state.
-x Displays NetworkDirect connections, listeners, and shared
endpoints.
-y Displays the TCP connection template for all connections.
Cannot be combined with the other options.
interval Redisplays selected statistics, pausing interval seconds
between each display. Press CTRL+C to stop redisplaying
statistics. If omitted, netstat will print the current
configuration information once.
Your comments are welcome to improve this post. Happy Learning 🙂
