All Questions

Tagged with
Filter by
Sorted by
Tagged with
5
votes
0answers
212 views

What network connections are not seen by netstat/lsof/ss?

Network monitoring tools ss, lsof -i, netstat -ltupw and similar have limitations like namespace and thus they don't show the whole machine connections. (for namespace created with ip we can see other ...
0
votes
1answer
17 views

app.asar --nod ? What programme is it (in my netstat statistics?

What is app.asar --nod? jerzy@jerzy:~$ sudo netstat -tupln [sudo] password for jerzy: Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program ...
1
vote
0answers
62 views

What does the inode column in netstat signify?

Issuing the command, netstat -pulet, there is an inode column that appears, and so issuing a find command I found that it links to inodes in the /sys/kernel/slab/cgroup/<...> section. For ...
0
votes
0answers
285 views

Tcp TCPBacklogDrop and packets pruned from receive queue

I am analyzing two virtual machines in the same LAN, tcp packet loss problem, but the knowledge has been exhausted. platform CentOS Linux release 7.2.1511 (Core) 3.10.0-327.el7.x86_64 #1 SMP Thu Nov ...
2
votes
1answer
615 views

reading TCP connection list from /proc

I'm trying to implement code that enumerate all existing TCP connections per process (similar to netstat -lptn). I prefer to implement it myself and not to rely on netstat. In order to do that, I'm ...
1
vote
1answer
43 views

How to check which interface(s) a service is bound to?

netstat and similar commands provide information on services bound to an IP. This information is however limited when a service binds to "all available interfaces": root@srv ~# netstat -tulpn | grep ...
1
vote
1answer
96 views

Significance of output of netstat -i command in AIX

The output of the netstat-i command on AIX 7.1 / AIX 7.2 : Name Mtu Network Address Ipkts Ierrs Opkts Oerrs Coll en0 65390 link#2 e2.f9.3a.a8.fc.2 1205 0 71 ...
1
vote
1answer
6k views

How to figure out the meaning behind Recv-Q and Send-Q from netstat?

netstat -ntp Active Internet connections (w/o servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 8216172 0 127.0.0.1:9503 ...
2
votes
2answers
939 views

Incoming and outgoing traffic when NOTHING is running

In a system with nothing running (at least nothing I know of). Listening of incoming and outgoing traffic prints this output: 192.168.1.1 => all-systems.mcast.net 0b ...
0
votes
1answer
617 views

Why I see this output in netstat (Local Address)

I have a server in a small network. This server has a hostname, let's say hostname1.network.internal. And the current IP adress of this server is 192.168.0.54. But when I call the command netstat | ...
0
votes
1answer
407 views

netstat (/proc/net): why is user associated with socket root? how to get user-id of 'remote' process?

ubuntu 16.04 I have 2 node applications, app-1 and app-2, with usernames matching their application names, listening locally (on ports 8001 and 8002, respectively) on the same instance. When app-1 ...
0
votes
1answer
512 views

Stalled TCP connection with data in RecvQ and ESTABLISHED off

My networking skills are quite poor and I am trying to understand the following netstat -ton meaning. We have redis server and a client with a thread connecting to it via PUB/SUB. The client ...
-1
votes
1answer
2k views

How to find all the incoming traffic in the linux server [closed]

How to find all the incoming traffic to the linux server. It should show only incoming traffics.
3
votes
3answers
2k views

How does one determine the process causing an ARP request?

I have a machine that runs a network intensive application that spawns many processes. I noticed recently that the machine is producing ARP requests looking for an IP address that does not exist. I ...
2
votes
1answer
546 views

number of HTTP sessions=number of TCP Sessions?

I have a software that has an HTTP server listening on port 20001 and running on a Unix machine. The logfile of the HTTP server says it currently has 600+ active HTTP connections, however netstat -an |...
2
votes
1answer
392 views

lxterminal in the netstat output

Can you explain the following lines in the netstat output? Active UNIX domain sockets (w/o servers) Proto RefCnt Flags Type State I-Node Path unix 2 [ ] STREAM ...
3
votes
1answer
1k views

“netstat -p”/“ss -p” not showing the process of a listening port

On my CentOS 7, at one point, sudo ss -plt listed a port marked as LISTENING on *:30565, but there was no information whatsoever in the process column of its row. The other listening ports were ...
1
vote
1answer
5k views

Solaris 10 - Find service attached to listening port

I'm diagnosing an old Solaris 10 build and during port scans I've found an open port that's not on the approved list for this server. I've tried various combinations of netstat switches but I can't ...
1
vote
0answers
354 views

Unknown network connections in nethogs (is it safe?)

It's about a month that I see some unknown connections in nethogs and I tried to understand what program is responsible for them but I failed. I'm not sure but it seems that my Internet connection ...
1
vote
1answer
764 views

What does TCPRcvCoalesce, TCPAutoCorking and TCPHystartTrainCwnd in netstat mean?

We have some RHEL7 Apache reverse proxies that experienced a performance degradation event. After a few hours, restarting Apache restored performance to normal levels. We are trying to determine the ...
1
vote
1answer
1k views

Netstat Listen Queues

What information can I gather from netstat listen queues? Looking at the man page I can see that using "-L" in netstat it shows me the size of listen queues. It tells me information about each ...
0
votes
1answer
86 views

Open ports with no associated PIDs

I have some open ports on my laptop but netstat is not reporting which PID/Program is associated with them: $ netstat -tulpn (Not all processes could be identified, non-owned process info will not ...
0
votes
2answers
1k views

Routing Configuration sending some traffic over VPN

I have a DD-WRT router with an OpenVPN service configured. I'd like to send only certain source IP's over the vpn connection. I believe my current routing table (as seen with netstat -rn) sends all ...
0
votes
0answers
1k views

can't connect to remote host with MySQL…firewall problem?

I've granted privileges to thufir for remote access through the shell (correct?), but cannot seem to actually connect. The router firewall has SPI to off. I've disable the IPv6 firewall on the ...
0
votes
1answer
1k views

Why can `lsof -i` not show an open connection which `netstat -n` lists?

A strange situation. I started telnet 0 8081 and lsof -i (run under root) doesn't list this connection, but netstat -n does. Why can this be?
3
votes
0answers
697 views

why do I have so many open socket handlers and netstat DGRAM entries?

I run on a RPi (Raspbian 3.12.35+ #730 PREEMPT Fri Dec 19 18:31:24 GMT 2014 armv6l GNU/Linux) a daemon in Python 2.7.8 which queries various APIs via requests and provides itself an API for another ...
0
votes
3answers
528 views

Get Any Interface's Router Address

How can I know what the router's address is when I am on multiple interface? I know by using netstat -rn I can have the dominating interface's gateway, which is the router's address. But what about ...
3
votes
1answer
3k views

How to report receive queue size for AF_UNIX sockets

netstat -a reports Recv-Q (amount of unread data pending for a reading application) for AF_INET sockets, but not AF_UNIX sockets (at least not for SOCK_DGRAM). Does anybody know a way to obtain this ...
4
votes
1answer
13k views

ss is replacing netstat, how can I get it to list ports similarly to what I am used to?

I've been trying to modernise my way with Linux by, for one thing, ditching netstat for ss. I looked up my favourite command line flag for netstat in the ss man pages, and was very glad to find that ...
1
vote
0answers
848 views

How can I log outgoing TCP traffic including the full path of URLs?

I use a program regularly on Linux that makes a TCP request when it starts up and updates a file with an access token before launching. I'd like to write a batch script that makes this request (using ...
1
vote
3answers
808 views

Status of network ports

I hope it is possible to get the necessary details of each network port from /etc/services. If I have to develop a C++ program to get the status of each port how should I start it? I am not allowed ...
4
votes
1answer
609 views

Tons of unknown connections in nethogs

I am seeing hundreds of different connections to the same ip and port scrolling by when running nethogs. Occasionally the foreign IP and port will change (not always 80, but sometimes). I've noticed ...
5
votes
1answer
36k views

netstat shows an ESTABLISHED connection with no process

I am debugging some problems with postfix. When I establish a connection nothing happens and netstat shows: $ netstat -anp ... tcp 0 0 129.132.202.106:25 129.132.179.232:60154 ...
1
vote
2answers
1k views

what is 'smakynet' in the netstat result?

after logging into a server, I used netstat to check out the ports of this server and wanted to find which port was communicating with me My IP is 143.248.143.198 and my search results are like ...
2
votes
1answer
2k views

Why is the 'foreign address' not IP address but something like this?

I never learned network programming and this kind of stuff properly. Only know very basic stuff like IP address and just a vague concept of what ports and TCP/IP are. Here, I connected to my lab's ...
6
votes
3answers
25k views

How to determine eth0 gateway address when it is not the default gateway?

In my system I have eth0 (which may or may not be connected) and a modem on ppp0 (which always may be up or down). The the case where both interfaces are up and ppp0 is the default route, I'd like to ...
6
votes
1answer
6k views

Accounting for /proc/net/dev reported traffic

I noticed that according to /proc/net/dev I am constantly receiving around 6Kb/s on my wireless usb interface. But I can't account for anything even close to that with the individual connections that ...
2
votes
1answer
5k views

Understand netstat -i flgs

Can anyone explain for me what each option in Flg means? [root@apple ~]# netstat -i Kernel Interface table Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg eth0 ...
1
vote
0answers
821 views

Command for finding open ports

On my linux servers I have this alias set: alias ns="sudo lsof -Pi|grep -v ESTABL|grep -v CLOSED|grep -v -e '->' | tr -s ' ' '\t' | awk '{print $3 "\t" $8 "\t" $5 "\t" $9 "\t" $1}'| column -t|...
1
vote
2answers
5k views

How to use netstat command

My question is what does it mean to LISTEN or ACCEPT on a port as it relates to my example? Example: I have a tomcat server, and It will use port 8080. I want to make sure that port is available for ...
50
votes
4answers
275k views

How do I know what service is running on a particular port in linux? [duplicate]

I am trying to run weblogic server on my linux machine and I am getting the following error : ERROR: transport error 202: bind failed: Address already in use ERROR: JDWP Transport dt_socket failed to ...
50
votes
14answers
52k views

What's the easiest way to find an unused local port?

What's the easiest way to find an unused local port? Currently I'm using something similar to this: port=$RANDOM quit=0 while [ "$quit" -ne 1 ]; do netstat -a | grep $port >> /dev/null if ...
6
votes
3answers
4k views

How can I know the process name which is opening a tcp port?

I have two linux servers. Let's say they are C and S. C is client of S On my S machine, I type. $ netstat -an | grep ESTABLISHED tcp 0 0 192.168.1.220:3306 C:57010 ...
2
votes
1answer
846 views

Information about the 1630/master app

When I run $ sudo netstat -a --programs | grep LISTENING | grep 1630 I will get this output. Do you know what good are processes running under this app name? Why they are running on my system and if ...
1
vote
3answers
371 views

How can I identify processes that use network facilities, and can they be killed?

In the output of netstat -a | grep LISTEN there are usually a lot of processes. How (where) can I find out information about them, what is their purpose in the system and if I can kill them? Which ...
2
votes
2answers
3k views

Per Socket network Buffer queues utilization

Is there a way to get a per-socket send and receive Queues utilization on Solaris similar to the way that Linux' netstat displays it? Example on Linux: Proto Recv-Q Send-Q Local Address ...
4
votes
3answers
11k views

Source code of netstat

Can I view the source code of netstat on my Linux machine?