How can I check which process is using a specific port on my system?

Why Do You Need to Check Which Process Is Using a Port?

In development, server management, or cybersecurity, you may encounter an issue where a port is already in use—causing services to crash, fail to start, or behave unexpectedly. Whether it's a web server (like Apache or Nginx), a database, or a custom app, knowing which process is binding to a port helps resolve issues quickly.

This guide explains how to identify the process using a specific port in Windows, Linux, and macOS using command-line tools and built-in utilities.

What Is a Port in Networking?

A port is a virtual communication endpoint used by software applications to send or receive data over a network. Ports are numbered (0–65535), and each active network connection on a machine uses a unique combination of IP address + port.

Common examples:

• HTTP uses port 80

• HTTPS uses port 443

• SSH uses port 22

• MySQL uses port 3306

When two services attempt to use the same port, a port conflict occurs.

How to Check Which Process Is Using a Port in Windows?

Method 1: Using Command Prompt

Step 1: Open Command Prompt as Administrator
Step 2: Run the following command to list all active ports and associated process IDs (PIDs):

netstat -aon | findstr :

Example:

netstat -aon | findstr :8080

You'll get an output like:

TCP    0.0.0.0:8080     0.0.0.0:0       LISTENING       1234

Here, 1234 is the Process ID (PID).

Step 3: To find the name of the process using that PID:

tasklist | findstr 1234

Method 2: Using PowerShell

You can use this in PowerShell:

Get-Process -Id (Get-NetTCPConnection -LocalPort 8080).OwningProcess

How to Check Which Process Is Using a Port in Linux?

Method 1: Using lsof

Step 1: Open Terminal
Step 2: Run the command:

sudo lsof -i :

Example:

sudo lsof -i :8080

Sample output:

COMMAND   PID  USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
java     2345 user   67u  IPv6  12345      0t0  TCP *:http-alt (LISTEN)

This shows that a Java process with PID 2345 is using port 8080.

Method 2: Using netstat

If net-tools is installed:

sudo netstat -tulpn | grep :

Example:

sudo netstat -tulpn | grep :3306

You’ll see something like:

tcp   0  0 0.0.0.0:3306   0.0.0.0:*   LISTEN   4567/mysqld

Method 3: Using ss (modern alternative to netstat)

sudo ss -ltnp | grep :

How to Check Which Process Is Using a Port in macOS?

Method 1: Using lsof

Open Terminal and type:

sudo lsof -i :

Example:

sudo lsof -i :3000

You’ll get output similar to Linux.

Method 2: Using netstat

netstat -anv | grep 

How to Kill the Process Using a Port?

After identifying the PID, you can terminate it manually.

Windows:

taskkill /PID  /F

Example:

taskkill /PID 1234 /F

Linux/macOS:

kill -9 

Example:

sudo kill -9 2345

Use this cautiously—make sure it's safe to kill the process (e.g., not a system-critical service).

Common Use Cases for Port Inspection

Tools That Simplify Port Monitoring

Conclusion: Monitor Ports Proactively

Knowing how to check which process is using a port is a critical troubleshooting skill for developers, sysadmins, and cybersecurity professionals. Whether you're resolving server issues or identifying malicious applications, tools like lsof, netstat, and PowerShell give you the visibility you need.

Understanding and managing port usage not only prevents service failures—it strengthens your system’s overall security posture.