flowtrack.exe always shows PID 4 for ICMP flows

basil00 / Divert

WinDivert: Windows Packet Divert

https://reqrypt.org/windivert.html

Other

2.32k stars 491 forks source link

flowtrack.exe always shows PID 4 for ICMP flows #349

Closed emanuele-f closed 3 months ago

emanuele-f commented 7 months ago

Hi, seems like flowtrack.exe always reports PID 4 and program "Windows" for ICMP flows. Tested with cmd.exe and git bash. Is it possible to retrieve the actual pid of the application?

basil00 commented 3 months ago

This is a known Windows quirk. ICMP flows belong to the system process (pid=4) for some reason.