I'm not trying to find established TCP connections. I have a Windows 2008 R2 server and my host-based L3 firewall is showing one TCP connection ATTEMPT to a remote address. The connection is not established as the servers are not allowed to communicate on the gateway firewall. What's the easiest and non-obtrusive way to find out this process? I cannot install sniffing tools like Wireshark on this server due to security reasons.