Desktop Functions:

   Smart Device Functions:

Show Recent Changes
Subscribe (RSS)
Misc. Pages
Helpful Tools
Suggested Reading
Website TODO List
Support Forum
Download Visual Studio Add-In

Terms of Use
Privacy Policy
GetExtendedTcpTable (iphlpapi)
The GetExtendedTcpTable function retrieves a table that contains a list of TCP endpoints available to the application.

C# Signature:

[DllImport("iphlpapi.dll", SetLastError=true)]
static extern uint GetExtendedTcpTable(IntPtr pTcpTable, ref int dwOutBufLen, bool sort, int ipVersion, TCP_TABLE_CLASS tblClass,uint reserved = 0);

VB Signature:

<DllImport("iphlpapi.dll", SetLastError:=True)> _
Public Shared Function GetExtendedTcpTable(ByVal pTcpTable As IntPtr, ByRef dwOutBufLen As Integer, ByVal sort As Boolean, ByVal ipVersion As  Integer, ByVal tblClass As TCP_TABLE_CLASS, ByVal reserved As Integer) As UInteger
End Function

User-Defined Types:


Alternative Managed API:

Do you know one? Please contribute it!

When yu do not need the PID information look at: IPGlobalProperties.GetActiveTcpListeners Method from the System.Net.NetworkInformation namespace



Tips & Tricks:

Please add some!

Sample Code:

    public struct MIB_TCPROW_OWNER_PID
        // DWORD is System.UInt32 in C#
        public System.UInt32 state;
        public System.UInt32 localAddr;
        [MarshalAs(UnmanagedType.ByValArray, SizeConst = 4)]
        public byte[] localPort;
        public System.UInt32 remoteAddr;
        [MarshalAs(UnmanagedType.ByValArray, SizeConst = 4)]
        public byte[] remotePort;
        public System.UInt32 owningPid;

        public System.Net.IPAddress LocalAddress
            return new System.Net.IPAddress(localAddr);

        public ushort LocalPort
            return BitConverter.ToUInt16(
            new byte[2] { localPort[1], localPort[0] }, 0);

        public System.Net.IPAddress RemoteAddress
            return new System.Net.IPAddress(remoteAddr);

        public ushort RemotePort
            return BitConverter.ToUInt16(
            new byte[2] { remotePort[1], remotePort[0] }, 0);

    public struct MIB_TCPTABLE_OWNER_PID
        public uint dwNumEntries;
        MIB_TCPROW_OWNER_PID table;


    //public TcpRow[] GetAllTcpConnections()
    public MIB_TCPROW_OWNER_PID[] GetAllTcpConnections()
    //  TcpRow is my own class to display returned rows in a nice manner.
    //    TcpRow[] tTable;
        MIB_TCPROW_OWNER_PID[] tTable;
        int AF_INET = 2;    // IP_v4
        int buffSize = 0;

        // how much memory do we need?
        uint ret = GetExtendedTcpTable(IntPtr.Zero, ref buffSize, true, AF_INET, TCP_TABLE_CLASS.TCP_TABLE_OWNER_PID_ALL);        
        IntPtr buffTable = Marshal.AllocHGlobal(buffSize);

        ret = GetExtendedTcpTable(buffTable, ref buffSize, true, AF_INET, TCP_TABLE_CLASS.TCP_TABLE_OWNER_PID_ALL);
        if (ret != 0)
            return null;

        // get the number of entries in the table
        //MibTcpTable tab = (MibTcpTable)Marshal.PtrToStructure(buffTable, typeof(MibTcpTable));
        MIB_TCPTABLE_OWNER_PID tab = (MIB_TCPTABLE_OWNER_PID)Marshal.PtrToStructure(buffTable, typeof(MIB_TCPTABLE_OWNER_PID));
        //IntPtr rowPtr = (IntPtr)((long)buffTable + Marshal.SizeOf(tab.numberOfEntries) );
        IntPtr rowPtr = (IntPtr)((long)buffTable + Marshal.SizeOf(tab.dwNumEntries));
        // buffer we will be returning
        //tTable = new TcpRow[tab.numberOfEntries];
        tTable = new MIB_TCPROW_OWNER_PID[tab.dwNumEntries];

        //for (int i = 0; i < tab.numberOfEntries; i++)        
        for (int i = 0; i < tab.dwNumEntries; i++)
            //MibTcpRow_Owner_Pid tcpRow = (MibTcpRow_Owner_Pid)Marshal.PtrToStructure(rowPtr, typeof(MibTcpRow_Owner_Pid));
            MIB_TCPROW_OWNER_PID tcpRow = (MIB_TCPROW_OWNER_PID)Marshal.PtrToStructure(rowPtr, typeof(MIB_TCPROW_OWNER_PID));
            //tTable[i] = new TcpRow(tcpRow);
            tTable[i] = tcpRow;
            rowPtr = (IntPtr)((long)rowPtr + Marshal.SizeOf(tcpRow));   // next entry

        // Free the Memory

        return tTable;

    // Usage:
    // MIB_TCPROW_OWNER_PID[] tcpState = GetAllTcpConnections();
    // Console.WriteLine("Local\tRemote\tState\tPID");
    // foreach (MIB_TCPROW_OWNER_PID mib in tcpState)
    // {
    //   Console.WriteLine("{0}:{1}\t{2}:{3}\t{4}\t{5}",mib.LocalAddress,mib.LocalPort,mib.RemoteAddress,mib.RemotePort,mib.state,mib,owningPid);
    // }

Updated 02202014 by KalD - correctly calculate port values, added usage


Please edit this page!

Do you have...

  • helpful tips or sample code to share for using this API in managed code?
  • corrections to the existing content?
  • variations of the signature you want to share?
  • additional languages you want to include?

Select "Edit This Page" on the right hand toolbar and edit it! Or add new pages containing supporting types needed for this API (structures, delegates, and more).

Access directly from VS:
Terms of Use
Find References
Show Printable Version