ns command written in powershell to include lifetime of established connections - TCP version

ns-t.ps1

# Full credit for this goes to a SANS ICS diary by Rob Vandenbrink
# https://isc.sans.edu/diary/30532?n

$now = get-date
Get-NetTCPConnection |
select-object LocalAddress,LocalPort,RemoteAddress,RemotePort,State,@{Name="LifetimeSec";Expression={($now-$_.CreationTime).seconds}},OwningProcess, @{Name="Process";Expression={(Get-Process -Id $_.OwningProcess).ProcessName}} |
sort-object -property LifetimeSec |
select-object -last 10 |
ft -auto