analysis tool for statistics about active connections, open sockets, routing tables; in general the networking subsystem.

learn more… | top users | synonyms

3
votes
1answer
229 views

Tons of unknown connections in nethogs

I am seeing hundreds of different connections to the same ip and port scrolling by when running nethogs. Occasionally the foreign IP and port will change (not always 80, but sometimes). I've noticed ...
3
votes
1answer
3k views

Accounting for /proc/net/dev reported traffic

I noticed that according to /proc/net/dev I am constantly receiving around 6Kb/s on my wireless usb interface. But I can't account for anything even close to that with the individual connections that ...
2
votes
1answer
324 views

Why do I have Established TCP connections with no owner PID?

Both ss --processes and netstat --program (with sudo) list some ESTABLISHED TCP connections to local port 6514 with non-zero Recv-Q values and no owner process (netstat output shows - where ...
1
vote
1answer
25 views

installed application keeps open port

I installed an application (a text editor) and it keeps a connection alive. I blocked the IP with iptables, but the port stays open. netstat shows: tcp 0 0 127.0.0.1:<port> 0.0.0.0:* ...
0
votes
1answer
166 views

Netstat output line width limit

When executing netstat, I find that the command's output width is limited regardless of the console size, in contrast with other commands such as ps that seem to get adjusted. So for example: $ sudo ...
2
votes
0answers
196 views

How do I find out how long a socket is in CLOSE_WAIT?

I have a server relatively with a high number of sockets in CLOSE_WAIT I want to know the age of each socket, to know if it's a real problem (sockets not getting closed) or that the sockets are ...
2
votes
0answers
368 views

Information about the 1630/master app

When I run $ sudo netstat -a --programs | grep LISTENING | grep 1630 I will get this output. Do you know what good are processes running under this app name? Why they I running on my system and if ...
1
vote
0answers
19 views

What does “incoming packets delivered” mean in “netstat -s” output on Linux?

While running netstat -s on Linux, I got below statistics for IP protocol (information for other protocols are omitted), Ip: 322937 total packets received 0 forwarded 0 incoming packets ...
1
vote
0answers
98 views

Reverse AutoSSH working, but the proxied LISTEN ports fail randomly

I'm having a hard time describing the error, sorry for the lengthy explanation: I have a successful, working, stable reverse AutoSSH solution nailed up between a client beagle board and a server. The ...
1
vote
0answers
104 views

why do I have so many open socket handlers and netstat DGRAM entries?

I run on a RPi (Raspbian 3.12.35+ #730 PREEMPT Fri Dec 19 18:31:24 GMT 2014 armv6l GNU/Linux) a daemon in Python 2.7.8 which queries various APIs via requests and provides itself an API for another ...
1
vote
0answers
53 views

Count all network requests to a specific host

I have a mock server running on my localhost that mocks out a back end service that I need for my app. One thing that I want to do is count the number of requests [GET, POST, PUT, DELETE,...] that my ...
1
vote
0answers
109 views

How can I log outgoing TCP traffic including the full path of URLs?

I use a program regularly on Linux that makes a TCP request when it starts up and updates a file with an access token before launching. I'd like to write a batch script that makes this request (using ...
1
vote
0answers
207 views

Why doesn't syslog traffic show up in netstat and lsof output?

I've noticed on my CentOS 5.x system that outbound syslog traffic (UDP) doesn't show up in lsof or netstat results. I've even tried stuff like watch -n .1 'netstat -l -u -n --program' to make sure ...
1
vote
0answers
364 views

Command for finding open ports

On my linux servers I have this alias set: alias ns="sudo lsof -Pi|grep -v ESTABL|grep -v CLOSED|grep -v -e '->' | tr -s ' ' '\t' | awk '{print $3 "\t" $8 "\t" $5 "\t" $9 "\t" $1}'| column ...
0
votes
0answers
34 views

nginx server never resolves

I have set up an nginx server which is a proxy for port 80 to http://127.0.0.1:3000, but the request never gets through. It just infinitely loads. I have tried sudo /sbin/iptables -I INPUT -p tcp -m ...
0
votes
0answers
22 views

Netstat : Get connected 'real' IPs behind the Load balancer?

I'm using AWS ELB (load balancer) in front of my Linux Instance. But because of the ELB, i think all the real remote IPs are not visible. I used this article as the example: ...
0
votes
0answers
40 views

why i can see ipv6 socket with ipv6 stack disable?

I try to disable complety ipv6 on a Linux Debian 7 (wheezy) However , things escape me. In my case, i test with grafana process (I have same issue with munin, rpcbind etc) Method 1 : with sysctl ...
0
votes
0answers
22 views

Connection refused, but only on one specific port

I have two service daemons. One responds; the other does not. The command netstat -pln returns, among others, Proto Recv-Q Send-Q Local Address Foreign Address State ...
0
votes
0answers
34 views

Issue with netstat script

I am trying to run the following script to capture the netstat data and put it in to log file. But this is giving error while running the netstat command, however if i directly run the netstat ...
0
votes
0answers
47 views

Linux SAR vs SS commnad to fetch network information

In one of my tool I need to collect network information from system, in present I am using command ss -pant just now I came to know ss -n DEV OR ss -n EDEV can also serve something similar, having ...
0
votes
0answers
90 views

Netstat command lists only 256 connections when I do SYN flood on my server

I have been trying to do SYN flood on one of my servers from an other machine. And I am sure that I causing a DOS on it, but it actually shows only few connection. That is when I type netstat -a | ...
0
votes
0answers
65 views

how do I disable the firewall through YaST?

The fine manual states: The Start-Up section defines how your firewall will start. You can either have the firewall start automatically when booting (recommended), or you can set the firewall ...
0
votes
0answers
205 views

can't connect to remote host with MySQL…firewall problem?

I've granted privileges to thufir for remote access through the shell (correct?), but cannot seem to actually connect. The router firewall has SPI to off. I've disable the IPv6 firewall on the ...
0
votes
0answers
31 views

Detailed protocol statistics with ss?

What replaces netstat -es? ss -s doesn't provide nearly enough protocol level statistics.
0
votes
0answers
2k views

port being in use not displayed in netstat output

In what scenarios port being used by a process don't show up in netstat -a output. I'm running jenkins on my machine. It's listening on port 8080. I'm trying to start another process that tries to ...