Ask Your Question

Revision history [back]

Wireshark (on Windows) does not capture any direct information on which process is making connections. You would user other tools for that such as Process Monitor from SysInternals.

You may find further information in your capture such as the server name from the certificate sent as part of the TLS handshake.