Questions tagged [netstat]
analysis tool for statistics about active connections, open sockets, routing tables; in general the networking subsystem.
211
questions
-1
votes
1answer
25 views
Port 3000 is always being hogged by grafana-server
I need port 3000 free for my dev work. But it's being used by grafana-server, that I don't remember ever installing. We do use it within our company so perhaps at some point it has been added to ...
0
votes
0answers
23 views
ss showing socket stuck in SYN-SENT with no traceable PID
On a client I see the following:
[root@redacted_local ~]# ss | grep -i syn
SYN-SENT 0 1 redacted_local_ip:792 redacted_server_ip:nfs
...
-1
votes
1answer
34 views
what are the options to close manual the port correctly or release the port on rhel machines?
we have redhat 7.5 server
we are suspect that port 50070 not closed correctly by the service , ( we check by netstat and PID not found ) but from the log we can see that port is in use
so we try to do ...
-2
votes
1answer
35 views
linux + port in use + but no PID return from netstat to kill the PID
we have Hadoop cluster - the linux are rhel 7.5 machines
and namenode is using the port 50070
we can see from the log that port 50070 is in use
but the interesting thing is that when we do netstat -...
1
vote
1answer
32 views
Configure static routing for the virbr0 using local interface as next hop
Having the following topology:
hostA(virbr0: 192.168.122.1) -- TAP interface -- (eth0: 192.168.122.85) gw (eth1: 192.168.3.51) --- (LAN: 192.168.3.0/24)
gw : QEMU VM Guest, that is acting as a gateway ...
0
votes
2answers
30 views
Does netstat -l include anything that netstat -a does not have?
I am using Ubuntu 16.04, but I believe my question applies to many distros, such as Debian, CentOS, and Red Hat.
The manpage for netstat -l is:
Show only listening sockets. (These are omitted by ...
0
votes
0answers
31 views
How to refresh IP address after changing from Ethernet to Wifi or vice versa
I need your help to find out how I can make the new IP address configured to be the one seen in netstat.
My box is connected to eth1 dynamically. Everything is working fine.
I switched to WiFi with ...
0
votes
2answers
20 views
How can I confirm which process is connect to remote port?
My loacl server IP is 192.168.122.100, and remote server IP is 192.168.122.50. I need to kill all processes which connect to 192.168.122.50:56666. By executing ss comand, I found there are three TCP ...
1
vote
2answers
59 views
'ss' shows multiple listening pids for same port
We have sh scripts using 'netstat' in our production code. We use command 'netstat -lntup' to retrieve all the pids which are listening to some port. I replaced the command with 'ss -lntup. Now, for ...
0
votes
1answer
37 views
How do I parse information from netstat?
How do I extract the following from the output of netstat -anp?
remove ip address
remote port
local application name
local port
PID
I need this information to run in my conky. It shows everything, ...
4
votes
2answers
104 views
What is the alternative of netstat in linux? [duplicate]
'netstat' is deprecated for Linux os. So I am looking for the right alternative of the 'netstat', So what will be right alternative for netstat?
I found out one 'SS' command but it is not sufficient ...
1
vote
0answers
37 views
How to monitor a UDP specific port/socket?
I have an application that receives UDP packets at port 5000.
In order to be 100% sure that the application is receiving all packets (for example the RX buffer could be full and some packets could be ...
0
votes
1answer
52 views
what does mean 0.0.0.0:22 under the column local address of netstat command?
Under the column "local address" of netstat:
0.0.0.0:22 means that access to port 22 is allowed from any ip addresses.
which ip addresses? ip addresses within my local network or outside my local ...
1
vote
1answer
27 views
How to block a service (xrdp) from using a specific port?
I'm admin for some devs and they requested that a port on a machine be clear for a specific purpose. When one of the devs went to use that port, it was in use. An netstat -p showed that xrdp/Xnvc was ...
0
votes
0answers
30 views
Running netstat on 2 servers checking connections to the other one shows mismatch in number of connections
If I check how many connections serverA (192.168.1.1) has open to serverB (192.168.2.1), I get the following response:
[username@serverA ~] $ netstat -n | grep 192.168.2.1
tcp 0 0 192.168....
0
votes
2answers
39 views
Closing a port listening on a local host
How do i close a port listening on a local host in CentOS7?
So far I have used the below command to find the process id
sudo netstat -tlpn | grep 5601
Then, used the below command to kill the ...
0
votes
0answers
30 views
The output of netstat -an show several lines twice
Why the output of "netstat -an" shows several lines twice (48035 and 48036)?
netstan -an
udp 0 0 0.0.0.0:48120 0.0.0.0:*
udp 0 0 0.0.0.0:...
0
votes
0answers
57 views
SSH through multiple servers (to access visdom server)
I am hosting a visdom server (essentially I need to access a website hosted locally) on my home computer. I am running code on a server (private_server) that I cannot access directly from my home ...
1
vote
1answer
42 views
How to not show localhost in ss output?
When I type ss -atur I get lots of connections, but most are destined for localhost and I don't really care about those.
How can I filter the output to not show connections with destination localhost?...
0
votes
0answers
55 views
reset netstat values
Is it possible to reset(to zero) the following nestat values without restarting the server?
[root@myPC myfolder]# netstat -suna
IcmpMsg:
InType3: 1915261
InType8: 297
OutType0: 297
...
0
votes
0answers
14 views
Is there a way to increase the 'Foreign Address' Field in 'netstat -tup'
OK, my question is completely in the title.
Is there a way to increase the 'Foreign Address' Field in 'netstat -tup' ?
(for those who never used -tup, it is the same like -tupn but resolving the ...
1
vote
1answer
198 views
What is this : ^[3;J^[H^[2J?
I am on a Debian system fresh installed, logged in via ssh on /dev/pts/0, and have entered the following command
watch -n 10 clear > /dev/pts/0 ; netstat -tupn 2>/dev/null | grep -v 3306 > /...
0
votes
1answer
26 views
is it possible to check the time that l application start to using port and established
From the following netsta we can see that Air_metal application is using port 50070 and established
# netstat -anp | grep :50070 | grep ESTABLISHED
tcp6 0 0 100.14.74.11:48148 100.14....
0
votes
0answers
50 views
Show ports in hexadecimal for netstat or ss command
I am trying to format the output of netstat or ss command in bash terminal. I need to convert the port numbers to hexadecimal. Currently they are shown in decimal by default. Is there any option in ...
0
votes
1answer
55 views
AIX netstat -a proto column
Greetings everyone,
I am looking at the output of the "netstat -an" output on an AIX 7 server and the proto column has confused me a little bit. First, the output:
Active Internet connections (...
0
votes
0answers
81 views
Get listening ports of Bluetooth
I’m trying to get all sockets connected or listening on a system. However, I saw that, for example, Bluetooth is not appearing.
I tried to use the commands ss and netstat but without success. Netstat ...
0
votes
0answers
16 views
Uhttpd requests stucks my device
I have a Web Server running on a devices under uhttpd.
I have N devices ( N could be 25 ) that send request to the main devices.
Everything works correctly when the main devices is running, but during ...
0
votes
1answer
102 views
Many Send-Q have packets TCP connections, is this abnormality? what caused this?
The 125.193.242.25 is a CDN node, and when I analyze the TCP connect, there shows below information:
[root@hkk10 ~]# netstat -na
Active Internet connections (servers and established)
Proto Recv-Q ...
2
votes
0answers
43 views
ss is slow when process option (-p) used
When checking for process listening on port using ss command, it's slow when compared with (obsolete) netstat command.
$ time ss -nlp | grep -E ':8081|:8007|:8010'
LISTEN 0 100 ...
1
vote
1answer
134 views
What does the reordering field of ss --info mean?
ss --info returns information about tcp connections. It produces a line simliar to the following (some fields removed for formatting)
tcp ESTAB 0 0 192.168.1.177:60236 54.70.141.88:...
0
votes
2answers
50 views
Find the short-lived process that is polling my port?
I've noticed one of the headless computers in my network is constantly polling the VNC port on another computer. My problem is, that when I see the port from which it has connected (with tcpdump) and ...
2
votes
1answer
137 views
IGMPv3 Source Filtering Configuration
I know that multicast addresses are being kept in /proc/net/igmp. Where is the configuration for v3 source filter being kept? Please note that I do not wish to inspect actual IGMP packets, I wish to ...
-7
votes
1answer
75 views
Strange logs in Linux [closed]
I ran sudo lsof -i :80 on port 80 to check what is port 80 listening to and I got the output bellow.
I dont understand what this means. It seems like some program is running on our server and using ...
-1
votes
1answer
124 views
How do I get my terminal to show the entire output of my command?
terminal command: watch netstat -nalp
I get an output, but I am not able to scroll down to see the majority of the output. I can only see as far down as I extend the bottom of the terminal (box). I ...
8
votes
0answers
1k views
What network connections are not seen by netstat/lsof/ss?
Network monitoring tools ss, lsof -i, netstat -ltupw and similar have limitations like namespace and thus they don't show the whole machine connections. (for namespace created with ip we can see other ...
0
votes
1answer
36 views
app.asar --nod ? What programme is it (in my netstat statistics?
What is app.asar --nod?
jerzy@jerzy:~$ sudo netstat -tupln
[sudo] password for jerzy:
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program ...
1
vote
0answers
342 views
What does the inode column in netstat signify?
Issuing the command, netstat -pulet, there is an inode column that appears, and so issuing a find command I found that it links to inodes in the /sys/kernel/slab/cgroup/<...> section.
For ...
0
votes
0answers
222 views
netstat command for popular IP addresses OK in CentOS 6, fails in CentOS 7
In CentOS 6 w/ OpenVZ 2.6.32, this command outputs IPs with the highest number of connections against port 22, e.g:
[root@legovz ~]# netstat -antu | grep :22 | grep -v LISTEN | awk '{print $5}' | cut ...
1
vote
1answer
338 views
Why does postgresql server have a `localhost:57504` to `localhost:57504` UDP “connection”?
$ sudo netstat -ap | grep postg
tcp 0 0 localhost:postgresql 0.0.0.0:* LISTEN 1567/postgres
udp 0 0 localhost:57504 localhost:57504 ...
-3
votes
1answer
912 views
What do `0.0.0.0:*`, `[::]:mysql`, and `[::]:*` mean in netstat output?
$ sudo netstat -ap | grep postg
tcp 0 0 localhost:postgresql 0.0.0.0:* LISTEN 1567/postgres
udp 0 0 localhost:57504 localhost:57504 ...
1
vote
1answer
39 views
Does `netstat` output different sockets with and without -n?
man netstat says
--numeric, -n
Show numerical addresses instead of trying to determine symbolic host,
port or user names.
Does netstat output additional sockets with -n than without -n?
Or ...
1
vote
0answers
37 views
System statistics from different utilities don't agree
I am running an Aliyun instance with 8 vCPUs to do some high performance computing, so I want to make full use of the machine. In other words, extremely high CPU usage is not a problem; instead it is ...
0
votes
2answers
151 views
How can I find the mapping on `$DISPLAY` after `ssh -X`?
On machine B, I remote access machine C
$ ssh -X t@C
$ echo $DISPLAY
localhost:10.0
How can I find/verify the mapping of $DISPLAY on C to $DISPLAY on B? Can it be done by the following command ...
1
vote
1answer
83 views
confused by netstat result
I ssh to my ubuntu server and run sudo netstat -a -p and I get this:
tcp 0 0 ip-172-31-25-123.us:ssh mailDOTjjtoursDOTcom:54531 ESTABLISHED 1516/sshd: ubuntu [
And when I use my other ...
2
votes
1answer
165 views
Red Hat Linux - port is in listening state but could not find process ID
I have this problem for my application, port is in listening state but process ID is not showing up. Used below commands. This is cloud AWS server Red Hat Linux.
$ netstat -tulpn
tcp 0 ...
0
votes
0answers
24 views
Question on Netstat output “app --node-in” & other
While doing "netstat -p", I got result out of which, I am unable to understand below output:-
unix 3 [ ] STREAM CONNECTED 3889891 23976/app --node-in
unix 3 [ ] STREAM CONNECTED 33223 ...
2
votes
2answers
2k views
How can I verify that the port forwarding is established by checking the sockets?
After I run
$ ssh -L 9000:google.com:80 testme@localhost
how can I verify that the port forwarding is established by checking the sockets (internet and unix domain sockets)?
Thanks.
5
votes
1answer
4k views
reading TCP connection list from /proc
I'm trying to implement code that enumerate all existing TCP connections per process (similar to netstat -lptn).
I prefer to implement it myself and not to rely on netstat.
In order to do that, I'm ...
0
votes
1answer
131 views
Process appear by “netstat” but doesn't appear by “ps -a”
I have a machine in my organization that I sshed and received a terminal.
When I run netstat -ntlp I received:
[root@webtl1 ~]# netstat -ntlp
Active Internet connections (only servers)
Proto ...
1
vote
2answers
160 views
What is the server-client relationship between a terminal emulator, a window manager and a X server processes?
In APUE (see the figure below), how do a terminal emulator process and a window manager
(e.g. openbox) process communicate? Is a temrinal emulator process
a client of a window manager process, based ...
