analysis tool for statistics about active connections, open sockets, routing tables; in general the networking subsystem.

learn more… | top users | synonyms

1
vote
0answers
36 views

Unknown network connections in nethogs (is it safe?)

It's about a month that I see some unknown connections in nethogs and I tried to understand what program is responsible for them but I failed. I'm not sure but it seems that my Internet connection ...
0
votes
1answer
33 views

nmap does not report all open ports?

An excerpt from the output of netstat: tcp4 0 0 192.168.2.48.49620 stackoverflow.co.https ESTABLISHED tcp4 0 0 192.168.2.48.49554 stackoverflow.co.https ESTABLISHED ...
1
vote
0answers
31 views

What does TCPRcvCoalesce, TCPAutoCorking and TCPHystartTrainCwnd in netstat mean?

We have some RHEL7 Apache reverse proxies that experienced a performance degradation event. After a few hours, restarting Apache restored performance to normal levels. We are trying to determine the ...
1
vote
1answer
66 views

Why is netstat deprecated?

I've heard many times now that it is, and I'm mostly using ss now. But I sometimes get frustrated with differences between the two, and I would love some insight. Also, I can't be the only one who ...
1
vote
4answers
108 views

Bash: How to print additional column matching IP Address to Name

I'm using netstat to collect information about connected IP's. And I have the following format: netstat -tn 2>/dev/null | awk '/:80 / {print $5}' | sed 's/.*::ffff://' | sed 's/:.*//' | sor t | ...
1
vote
1answer
28 views

How do I get active unix domain sockets for a specific pid if I can't use lsof command?

If I have no permission to use lsof, how do I get them for a process with pid already known? Thanks I know netstat -l -p command print out active unix domain sockets, but it seems it's not updating ? ...
0
votes
1answer
50 views

Monitoring Server Connections - Netstat formatting issue

I have had a few issues with a server recently. So i just wanted to leave a window showing the unique and IP's of connected devices. I have been using: watch -n 5 "netstat -tn 2>/dev/null | grep :...
0
votes
1answer
51 views

reading the output of netstat for tcp

If I ssh root@server -R 5901:localhost:5900 and netstat -an I get: Active Internet connections (servers and established) │ Proto Recv-Q Send-Q Local Address ...
1
vote
0answers
43 views

Arch Linux - Cronie is not working and nestat does not output logs?

I added a cronjob via crontab -e which is to be executed every minute. I enabled and started cronie on systemctl. Set editor $ export EDITOR=vim Add cront tasks $ crontab -e * * * * * Rscript /...
1
vote
0answers
40 views

List services with port numbers

I would like to list all installed services (especially running) with their port numbers, where they are assigned. Could you be so glad and help me with this command?
1
vote
1answer
45 views

ss not showing all ports being listened on

After doing a ssh -fND 1080 localhost, ssh will listen on port 1080 to provide the SOCKS service: box:~$ netstat -ln|grep 1080 tcp 0 0 127.0.0.1:1080 0.0.0.0:* ...
0
votes
1answer
101 views

netstat shows over 44K connections without ip address, what's that?

I have a question about linux netstat usage and output results. I'm trying to solve a dilema about why my server is facing communications delays and bottle neck issues, So I started digging and ...
6
votes
3answers
577 views

alternative to “netstat -s”

netstat -s prints out a lot of very detailed protocol statistics like number of TCP reset messages received or number of ICMP "echo request" messages sent or number of packets dropped because of a ...
0
votes
0answers
64 views

nginx server never resolves

I have set up an nginx server which is a proxy for port 80 to http://127.0.0.1:3000, but the request never gets through. It just infinitely loads. I have tried sudo /sbin/iptables -I INPUT -p tcp -m ...
0
votes
0answers
53 views

Netstat : Get connected 'real' IPs behind the Load balancer?

I'm using AWS ELB (load balancer) in front of my Linux Instance. But because of the ELB, i think all the real remote IPs are not visible. I used this article as the example: http://www.mkyong.com/...
1
vote
1answer
133 views

Netstat Listen Queues

What information can I gather from netstat listen queues? Looking at the man page I can see that using "-L" in netstat it shows me the size of listen queues. It tells me information about each ...
1
vote
0answers
44 views

What does “incoming packets delivered” mean in “netstat -s” output on Linux?

While running netstat -s on Linux, I got below statistics for IP protocol (information for other protocols are omitted), Ip: 322937 total packets received 0 forwarded 0 incoming packets ...
1
vote
0answers
137 views

why i can see ipv6 socket with ipv6 stack disable?

I try to disable complety ipv6 on a Linux Debian 7 (wheezy) However , things escape me. In my case, i test with grafana process (I have same issue with munin, rpcbind etc) Method 1 : with sysctl ...
0
votes
0answers
35 views

Connection refused, but only on one specific port

I have two service daemons. One responds; the other does not. The command netstat -pln returns, among others, Proto Recv-Q Send-Q Local Address Foreign Address State PID/...
1
vote
1answer
68 views

How to check which user is responsible for a utilizing a particular port?

I wanted to know which user is running a particular port no. For e.g. netstat -an | grep ':6016' which user is resposible for "6016" port no.
5
votes
2answers
242 views

Language in netstat output

I have a program here, that depends on the output of netstat. More concrete: netstat -apn. Here is an example of a normal output. Proto Recv-Q Send-Q Local Address Foreign Address ...
2
votes
2answers
90 views

What Port is Squid Running on in OS X/BSD

I've recently starting playing around with the Squid caching server on my OS X based computer. I'm curious if there's a way to tell which port Squid is running on using netstat or other standard unix ...
0
votes
1answer
273 views

TigerVNC is running, but not listening on any port?

I'm on CentOS 7 with TigerVNC installed. I have started it up (I think), but I can't connect to it. Here's what leads me to think it's running: $ vncserver -list TigerVNC server sessions: X ...
0
votes
0answers
58 views

Issue with netstat script

I am trying to run the following script to capture the netstat data and put it in to log file. But this is giving error while running the netstat command, however if i directly run the netstat ...
0
votes
1answer
39 views

How to monitor all the connections?

I have a server with several users, one of them has a script to connect to an external server. How can I see the external connection to the server (I know the IP address), so the program used and the ...
0
votes
0answers
61 views

Linux SAR vs SS commnad to fetch network information

In one of my tool I need to collect network information from system, in present I am using command ss -pant just now I came to know ss -n DEV OR ss -n EDEV can also serve something similar, having ...
2
votes
1answer
538 views

Why do I have Established TCP connections with no owner PID?

Both ss --processes and netstat --program (with sudo) list some ESTABLISHED TCP connections to local port 6514 with non-zero Recv-Q values and no owner process (netstat output shows - where PID/...
1
vote
0answers
135 views

Reverse AutoSSH working, but the proxied LISTEN ports fail randomly

I'm having a hard time describing the error, sorry for the lengthy explanation: I have a successful, working, stable reverse AutoSSH solution nailed up between a client beagle board and a server. The ...
1
vote
1answer
27 views

installed application keeps open port

I installed an application (a text editor) and it keeps a connection alive. I blocked the IP with iptables, but the port stays open. netstat shows: tcp 0 0 127.0.0.1:<port> 0.0.0.0:* ...
3
votes
2answers
349 views

Distinguish TCP server from client within netstat output

I have a socket connection between a client process and a server process, both running on my machine. There are two entries shown for the connection as, sudo netstat -ntp | grep 56442 tcp 1 ...
0
votes
1answer
42 views

Open ports with no associated PIDs

I have some open ports on my laptop but netstat is not reporting which PID/Program is associated with them: $ netstat -tulpn (Not all processes could be identified, non-owned process info will not ...
0
votes
1answer
106 views

netstat pipe count host

Unix pipe problem: how to process multiline input to output the line and insert some piped processes. echo "111 22222222" | awk '{print $1 " " $2 " " piped_processes_using_2nd_argument}' A bit of ...
0
votes
1answer
227 views

kstat in Solaris 11+

I'm writing a kernel-level program in Solaris that monitors the workload of the system and reports the stats --something similar to netstats in linux and kstat in Solaris. Where the source code for ...
0
votes
1answer
341 views

Netstat output line width limit

When executing netstat, I find that the command's output width is limited regardless of the console size, in contrast with other commands such as ps that seem to get adjusted. So for example: $ sudo ...
2
votes
2answers
795 views

How to use lsof to identify incoming TCP connections?

I want to know if my server establishes a connection to a remote server or if the remote server tries to reach my server. I tried to read the output of lsof and obtain this information: lsof -i TCP:...
0
votes
4answers
65 views

how to show port numbers that are listening for the incoming connections under TCPv4?

I want to use command line to show only the port numbers after ":" only This is what I'm trying to do sudo netstat -ant |grep LISTEN|grep :|sort -n|cut -c 45- It shouldn't list any tcp6 info
0
votes
1answer
33 views

Connections without Virtualhost

I saw tons of connections on port 80. But no requests from these IP addresses were logged in Apache access/error logs. I deleted all the virtual hosts, stopped Apache, and restarted it after there are ...
3
votes
3answers
134 views

How can I list every port serving a web page

I have a number of servers, all with various HTTP(S) services accessible on a variety of ports. It's incredibly difficult to keep track of which service is available under which host and what port. ...
0
votes
2answers
283 views

Routing Configuration sending some traffic over VPN

I have a DD-WRT router with an OpenVPN service configured. I'd like to send only certain source IP's over the vpn connection. I believe my current routing table (as seen with netstat -rn) sends all ...
1
vote
1answer
91 views

Unexpected netstat output in DNAT conditions

So, here I have a basic setup with SOCKS5 proxy listening on, oh, say 8123 I redirect TCP to the proxy via iptables From iptables perspective everything looks peachy, iptables -t nat -v -L shows ...
1
vote
2answers
86 views

Asymmetric ESTABLISHED session in netstat

On the first host, root@xxx:~# netstat -natup | grep xxx tcp 0 0 10.2.5.3:40740 xxx:10051 ESTABLISHED 1482/zabbix_proxy: we can see that a connection has been established with ...
0
votes
1answer
1k views

Why doesn't Tomcat show up when I grep netstat's output for 8080?

I am doing the following to determine if Tomcat is running: $ whoami voops voops@esavo00:~/apache-tomcat-7.0.57/bin# $ ps -ef | grep -i tomcat | grep -v grep voops 8973 1 0 Apr22 ? 00:...
0
votes
0answers
76 views

how do I disable the firewall through YaST?

The fine manual states: The Start-Up section defines how your firewall will start. You can either have the firewall start automatically when booting (recommended), or you can set the firewall ...
0
votes
0answers
282 views

can't connect to remote host with MySQL…firewall problem?

I've granted privileges to thufir for remote access through the shell (correct?), but cannot seem to actually connect. The router firewall has SPI to off. I've disable the IPv6 firewall on the ...
0
votes
2answers
418 views

/proc/net/tcp: permission denied

When I type "netstat" into my SSH console as a non root user, I get "/proc/net/tcp: permission denied", but it works fine as root. I was wondering if it's possible how I would allow non root users to ...
0
votes
1answer
159 views

Why can `lsof -i` not show an open connection which `netstat -n` lists?

A strange situation. I started telnet 0 8081 and lsof -i (run under root) doesn't list this connection, but netstat -n does. Why can this be?
1
vote
0answers
155 views

why do I have so many open socket handlers and netstat DGRAM entries?

I run on a RPi (Raspbian 3.12.35+ #730 PREEMPT Fri Dec 19 18:31:24 GMT 2014 armv6l GNU/Linux) a daemon in Python 2.7.8 which queries various APIs via requests and provides itself an API for another ...
1
vote
0answers
59 views

Count all network requests to a specific host

I have a mock server running on my localhost that mocks out a back end service that I need for my app. One thing that I want to do is count the number of requests [GET, POST, PUT, DELETE,...] that my ...
0
votes
3answers
145 views

Get Any Interface's Router Address

How can I know what the router's address is when I am on multiple interface? I know by using netstat -rn I can have the dominating interface's gateway, which is the router's address. But what about ...
8
votes
3answers
1k views

chromium browser (pepperflashplugin) opening listening ports on 0.0.0.0:5353

I am using chromium browser (chrome) with pepperflashplugin in Debian. I have noticed, chromium/pepperflashplugin opens a listening port on my public interface 0.0.0.0:5353 as seen with netstat: ...