analysis tool for statistics about active connections, open sockets, routing tables; in general the networking subsystem.

learn more… | top users | synonyms

-3
votes
0answers
37 views

Can anyone explain this command? [on hold]

netstat -nap | grep :80 | wc -l This command computes the number of connections. I do not understand netstat -nap -p supposedly show a particular protocol Yet no protocol is mentioned at all. ...
3
votes
3answers
43 views

How can I list every port serving a web page

I have a number of servers, all with various HTTP(S) services accessible on a variety of ports. It's incredibly difficult to keep track of which service is available under which host and what port. ...
0
votes
2answers
38 views

Routing Configuration sending some traffic over VPN

I have a DD-WRT router with an OpenVPN service configured. I'd like to send only certain source IP's over the vpn connection. I believe my current routing table (as seen with netstat -rn) sends all ...
1
vote
1answer
16 views

Unexpected netstat output in DNAT conditions

So, here I have a basic setup with SOCKS5 proxy listening on, oh, say 8123 I redirect TCP to the proxy via iptables From iptables perspective everything looks peachy, iptables -t nat -v -L shows ...
1
vote
2answers
24 views

Asymmetric ESTABLISHED session in netstat

On the first host, root@xxx:~# netstat -natup | grep xxx tcp 0 0 10.2.5.3:40740 xxx:10051 ESTABLISHED 1482/zabbix_proxy: we can see that a connection has been established with ...
0
votes
0answers
49 views

what doesn't Tomcat doesn't show up when I grep netstat's output for 8080

I am doing the following to determine if Tomcat is running: $ whoami voops voops@esavo00:~/apache-tomcat-7.0.57/bin# $ ps -ef | grep -i tomcat | grep -v grep voops 8973 1 0 Apr22 ? ...
0
votes
0answers
25 views

how do I disable the firewall through YaST?

The fine manual states: The Start-Up section defines how your firewall will start. You can either have the firewall start automatically when booting (recommended), or you can set the firewall ...
0
votes
0answers
89 views

can't connect to remote host with MySQL…firewall problem?

I've granted privileges to thufir for remote access through the shell (correct?), but cannot seem to actually connect. The router firewall has SPI to off. I've disable the IPv6 firewall on the ...
0
votes
2answers
84 views

/proc/net/tcp: permission denied

When I type "netstat" into my SSH console as a non root user, I get "/proc/net/tcp: permission denied", but it works fine as root. I was wondering if it's possible how I would allow non root users to ...
0
votes
1answer
37 views

Why can `lsof -i` not show an open connection which `netstat -n` lists?

A strange situation. I started telnet 0 8081 and lsof -i (run under root) doesn't list this connection, but netstat -n does. Why can this be?
0
votes
0answers
24 views

why do I have so many open socket handlers and netstat DGRAM entries?

I run on a RPi (Raspbian 3.12.35+ #730 PREEMPT Fri Dec 19 18:31:24 GMT 2014 armv6l GNU/Linux) a daemon in Python 2.7.8 which queries various APIs via requests and provides itself an API for another ...
1
vote
0answers
16 views

Count all network requests to a specific host

I have a mock server running on my localhost that mocks out a back end service that I need for my app. One thing that I want to do is count the number of requests [GET, POST, PUT, DELETE,...] that my ...
0
votes
2answers
32 views

Get Any Interface's Router Address

How can I know what the router's address is when I am on multiple interface? I know by using netstat -rn I can have the dominating interface's gateway, which is the router's address. But what about ...
4
votes
2answers
150 views

chromium browser (pepperflashplugin) opening listening ports on 0.0.0.0:5353

I am using chromium browser (chrome) with pepperflashplugin in Debian. I have noticed, chromium/pepperflashplugin opens a listening port on my public interface 0.0.0.0:5353 as seen with netstat: ...
3
votes
1answer
42 views

log PID of each connection attempt

Finding the PID of an established connection is trivial using netstat or lsof. However, I have a process which is creating a connection ever 60 seconds to our database and locking it up by maxing out ...
2
votes
1answer
52 views

How to report receive queue size for AF_UNIX sockets

netstat -a reports Recv-Q (amount of unread data pending for a reading application) for AF_INET sockets, but not AF_UNIX sockets (at least not for SOCK_DGRAM). Does anybody know a way to obtain this ...
1
vote
1answer
85 views

ss is replacing netstat, how can I get it to list ports similarly to what I am used to?

I've been trying to modernise my way with Linux by, for one thing, ditching netstat for ss. I looked up my favourite command line flag for netstat in the ss man pages, and was very glad to find that ...
1
vote
0answers
40 views

How can I log outgoing TCP traffic including the full path of URLs?

I use a program regularly on Linux that makes a TCP request when it starts up and updates a file with an access token before launching. I'd like to write a batch script that makes this request (using ...
1
vote
1answer
309 views

How to do a netstat that will only filter based on pid

How can I have the following command below just show/filter based on the PID's I'm looking for? sudo netstat -lp --inet The results come back as this Proto Recv-Q Send-Q Local Address ...
0
votes
0answers
83 views

Why doesn't syslog traffic show up in netstat and lsof output?

I've noticed on my CentOS 5.x system that outbound syslog traffic (UDP) doesn't show up in lsof or netstat results. I've even tried stuff like watch -n .1 'netstat -l -u -n --program' to make sure ...
1
vote
3answers
103 views

Status of network ports

I hope it is possible to get the necessary details of each network port from /etc/services. If I have to develop a C++ program to get the status of each port how should I start it? I am not allowed ...
0
votes
0answers
67 views

xfrm and xfrm gc stats

Are there any stats related to the XFRM and XFRM garbage collector? I am unfortunately running on a ubuntu 10.04 and cannot upgrade. /proc/net/xfrm_stat is not available. I am chasing some ipsec ...
3
votes
1answer
195 views

How does netstat command fit in various layers of TCP/IP model in the performance diagram?

netstat command is useful to, Print network connections, routing tables, interface statistics, masquerade connections, and multicast memberships. Now, I was reading about the Linux performance ...
2
votes
0answers
79 views

How do I find out how long a socket is in CLOSE_WAIT?

I have a server relatively with a high number of sockets in CLOSE_WAIT I want to know the age of each socket, to know if it's a real problem (sockets not getting closed) or that the sockets are ...
0
votes
0answers
21 views

Detailed protocol statistics with ss?

What replaces netstat -es? ss -s doesn't provide nearly enough protocol level statistics.
3
votes
1answer
144 views

Tons of unknown connections in nethogs

I am seeing hundreds of different connections to the same ip and port scrolling by when running nethogs. Occasionally the foreign IP and port will change (not always 80, but sometimes). I've noticed ...
2
votes
2answers
3k views

netstat — why are IPv4 daemons listening to ports listed only in -A inet6?

I have a computer with: Linux superhost 3.2.0-4-amd64 #1 SMP Debian 3.2.60-1+deb7u3 x86_64 GNU/Linux It runs Apache on port 80 on all interfaces, and it does not show up in netstat -planA inet, ...
-1
votes
1answer
154 views

how to close ports with no process attachedto it

how do you close ports if there are not processes attached to it? I used to run an application and they're using this ports previously for some reason the application crashed but if i restart the ...
1
vote
1answer
4k views

netstat shows an ESTABLISHED connection with no process

I am debugging some problems with postfix. When I establish a connection nothing happens and netstat shows: $ netstat -anp ... tcp 0 0 129.132.202.106:25 129.132.179.232:60154 ...
0
votes
0answers
58 views

Why SAMP is not listening to the port

I have forwarded 38474 port to internal port 7778. Then I launched San Andreas Multiplayer on my CentOS server. When I'm typing netstat -npl I see this: Proto: tcp Recv-Q: 0 Send-Q: 0 Local Address: ...
0
votes
3answers
113 views

Connectivity between 2 remote Linux machines

I have two remote machines, I'm running a script on one of them. There's some part of the script that should be running on the other one, then the script will continue in its further tasks/commands. ...
0
votes
0answers
750 views

port being in use not displayed in netstat output

In what scenarios port being used by a process don't show up in netstat -a output. I'm running jenkins on my machine. It's listening on port 8080. I'm trying to start another process that tries to ...
0
votes
1answer
84 views

Why is my Netstat not returning the desired output and just getting hung up?

My remote Linux machine is able to ping an IP address on an internet, but the same is unable to get the netstat report for that IP, please help through. ping a.b.c.d 64 bytes from a.b.c.d: icmp_seq=1 ...
5
votes
5answers
5k views

meaning of Netstat local address column

Local address on netstat output: When I do netstat -ntlp there is a column called Local Address: sometimes it would output IP address as 0.0.0.0:7180 and sometimes 127.0.0.1:9001 What's the ...
1
vote
2answers
168 views

what is 'smakynet' in the netstat result?

after logging into a server, I used netstat to check out the ports of this server and wanted to find which port was communicating with me My IP is 143.248.143.198 and my search results are like ...
2
votes
1answer
169 views

Why is the 'foreign address' not IP address but something like this?

I never learned network programming and this kind of stuff properly. Only know very basic stuff like IP address and just a vague concept of what ports and TCP/IP are. Here, I connected to my lab's ...
4
votes
3answers
777 views

Command similar to netstat -np but grouped by state and PID?

Is there a command similar to netstat -np but grouped by state and PID? I'd like to know the current count of server connections in a particular state grouped by Programs. similar to, 102 squid ...
3
votes
3answers
2k views

Why does SSH show protocol as tcp6 *and* tcp in netstat?

$ netstat -nat Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 0.0.0.0:80 ...
0
votes
2answers
3k views

How to determine eth0 gateway address when it is not the default gateway?

In my system I have eth0 (which may or may not be connected) and a modem on ppp0 (which always may be up or down). The the case where both interfaces are up and ppp0 is the default route, I'd like to ...
3
votes
3answers
7k views

tcp6 in the output netstat

What does column 'tcp6' mean on output netstat? Please anyone explain the follow output of netstat: tcp6 0 0 dmz.local.net:www 5.140.235.6%14631:49964 ESTABLISHED 21393/apache2 What does tcp6 mean? ...
1
vote
1answer
1k views

Iptables rule to allow only one port and block others

We have two apps running (on top of linux) and both communicates through port 42605. I wanted to quickly verify if this is the only port that's been used for communication between them. I tried below ...
0
votes
2answers
186 views

what process is listening on a given port

I have several problems: some process is attempting to send data and the firewall is rejecting it at the rate it is sending it out firewall logs flood the system (may need to rate-limit the logging) ...
4
votes
2answers
174 views

Find which ports a program access

I have a program that tries to connect to a server on start-up on a unknown port. I need to find out which port the program accesses to enable a ssh tunnel. I tried netstat but since the connection ...
2
votes
2answers
198 views

netstat command doesnt work anymore on the new dedicated server

I was using the following command on my previous dedicated server with the same version of the FreeBSD installation: # uname -a FreeBSD 9.2-RELEASE FreeBSD 9.2-RELEASE #0 r255898: Thu Sep 26 22:50:31 ...
3
votes
1answer
2k views

Accounting for /proc/net/dev reported traffic

I noticed that according to /proc/net/dev I am constantly receiving around 6Kb/s on my wireless usb interface. But I can't account for anything even close to that with the individual connections that ...
0
votes
2answers
387 views

Where are netstat's -t and -u flags documented?

I use the following command to find open ports on my servers: $ netstat -ntulp I've probably found that on some random website over the years. However, I cannot find where -t or -u are documented. ...
2
votes
1answer
980 views

Understand netstat -i flgs

Can anyone explain for me what each option in Flg means? [root@apple ~]# netstat -i Kernel Interface table Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg eth0 ...
2
votes
2answers
3k views

What does 0.0.0.0:* mean in netstat?

Could anyone explain the following output of netstat -plunt? udp 0 0 0.0.0.0:58262 **0.0.0.0:*** 1163/avahi-daemon: udp 0 0 0.0.0.0:17500 ...
1
vote
0answers
148 views

Command for finding open ports

On my linux servers I have this alias set: alias ns="sudo lsof -Pi|grep -v ESTABL|grep -v CLOSED|grep -v -e '->' | tr -s ' ' '\t' | awk '{print $3 "\t" $8 "\t" $5 "\t" $9 "\t" $1}'| column ...
10
votes
2answers
35k views

Finding the PID of the process using a specific port?

I am installing hadoop on my Ubuntu system. When I start it, it reports that port 9000 is busy. I used netstat -nlp|grep 9000 to see if such a port exists and I got this: tcp 0 0 ...