<@U8Z3X1Q8J> process_open_sockets works on Windows...
# general
t
@Kemal process_open_sockets works on Windows, and is what
listening_ports
is built upon. PLEASE stop answering questions you are not sure about:
Copy code
C:\Users\thor\work\repos\osquery [master ≡]
λ  .\build\windows10\osquery\RelWithDebInfo\osqueryi.exe
Using a virtual database. Need help, type '.help'
osquery> select * from process_open_sockets limit 1;
+-----+----+--------+--------+----------+---------------+----------------+------------+-------------+------+
| pid | fd | socket | family | protocol | local_address | remote_address | local_port | remote_port | path |
+-----+----+--------+--------+----------+---------------+----------------+------------+-------------+------+
| 512 |    |        | 2      | 6        | 0.0.0.0       | 0.0.0.0        | 135        | 0           |      |
+-----+----+--------+--------+----------+---------------+----------------+------------+-------------+------+
osquery>