The connections command lists active connections at that point in time, displaying local and remote IP addresses with ports and PID. The connections command is used only for Windows XP and 2003 Server (both 32- and 64-bit). The connections command is used as follows:
volatility --profile=WinXPSP3x86 -f cridex.vmem connections