Is it possible to sniff TCP traffic for a specific process using Wireshark, even through a plugin to filter TCP traffic based on process ID?I'm working on Windows 7, but I would like to hear about solution for Linux as well.
Sniffing TCP traffic for specific process using Wireshark
sniffing;wireshark
Process Attribution In Network Traffic (PAINT)/Wireshark from DigitalOperatives might be what you're looking for. It's based on Wireshark 1.6.5, and it works with Windows Vista and above. It has been released to the public in December 2012 for research purposes, and I've been using it since then. Not only does it work - you can filter the traffic through the columns - but it's quite fast.The blog post Process Attribution In Network Traffic from their developers explains it in detail.