[Guy Harris <guy@xxxxxxxxxxxx>]

On Oct 12, 2009, at 6:33 AM, Mike Brandonisio wrote:

> Is it possible to include netstat as part of the trace with tshark?

TShark doesn't include any code to fetch any "what process has a  
socket bound to or connected to a given endpoint" information, so, no,  
netstat information isn't part of a Wireshark/TShark trace (not that  
there's any provision in pcap file format to store that anyway,  
although pcap-NG could do that).