The -a
switch documentation says the following:
-a With the default display, show the state of all sockets; normally sockets used by server processes are not shown. With the routing table display (option -r, as described below), show protocol-cloned routes (routes generated by a RTF_PRCLONING parent route); normally these routes are not shown.
What is meant by "server processes", is it processes that use server/listening sockets?
listening
on a socket, that is, waiting for connections. Without this switch,netstat
shows only connected sockets. – AlexP Nov 28 '17 at 19:40