Questions tagged [netstat]

analysis tool for statistics about active connections, open sockets, routing tables; in general the networking subsystem.

Filter by
Sorted by
Tagged with
1
vote
1answer
98 views

Confused about the “-a” switch of netstat on mac os

The -a switch documentation says the following: -a With the default display, show the state of all sockets; normally sockets used by server processes are not shown. With the routing ...
2
votes
2answers
205 views

find pid of open tcp port, as a regular user

From local host I'm ssh tunneling some remote host:port to my local host:port, so anybody on a remote host can use their "local" port to access my port via that tunnel. I'm using some regular (non-...
0
votes
2answers
2k views

Killed process blocks TCP ports

I've had this issue on several machines. Is there some way to free this blocked port? Here is an example: Let me explain. I've killed some JAVA-Process on SUSE Linux Enterprise Server 11 SP4, which ...
0
votes
1answer
943 views

Netstat doesn't show my machine IP as listening on port 22

I am able to ssh to the machine. But my machine not shown as listening on port 22. Below is what I see. It show as listening on port 53, 21, 8080, 8443 etc. But no entry for 22(ssh). My machine IP is ...
2
votes
0answers
284 views

Getting incomplete output in netstat

Apache tomcat is running on port 8080, but netstat -tlnp does not show it, instead its output gets truncated with a binary character: # netstat -tlnp Active Internet connections (only servers) Proto ...
2
votes
3answers
156 views

script to verify running services on specific ports

I got a task to do. I have to search whether, are there running services on below ports. ports 53 & 55 If not I have to send alerts. Please correct my logic and syntax in below code for one port ...
1
vote
1answer
561 views

netstat output is “ESTABLISHED -” (no program name attached). What is the issue?

My server program is running and I am trying to establish some TCP connections from redis client. I am trying to establish 1150 client connections, and when I check netstat at server side I find a ...
0
votes
2answers
98 views

Print ports with the application using it

I want to print 2 fields together, all open ports and the application using it. This is my command but it only prints the port numbers and still missing the program field: netstat -lnt -u -p | awk '{...
0
votes
1answer
617 views

Why I see this output in netstat (Local Address)

I have a server in a small network. This server has a hostname, let's say hostname1.network.internal. And the current IP adress of this server is 192.168.0.54. But when I call the command netstat | ...
2
votes
1answer
392 views

netstat, listing connections correctly

I have 2 machines A 192.168.0.40 (CentOS) B 192.168.0.41 (Debian) Gateway 192.168.0.2 Now I did set a port forwarding using firewallD, from A port 2245 to B port 22 Connection established from ...
1
vote
2answers
626 views

How to display an UDP connection?

ss and netstat seem to not be working. Adobe Flash RTMFP protocol creates a lots of UDP connections. I want to know, who is connected to me. I can see intense data-send traffic from the monitor. I ...
0
votes
1answer
513 views

How to identify and kill git listening services here?

I am studying my listening services, and I am thinking how identify the type of git listening services so I can kill git the right one in the right situation and/or both. The services are needed for ...
1
vote
2answers
73 views

Netstat showing a strange process named “public”

I have a several process named "public" who are listen for TCP connections. Due to this extremely commonly name, I was not able to identify what is this process and what is his purpose. ...
2
votes
1answer
8k views

netstat show port number instead of process name

I want to see which port, e.g. postgresql is listening on, so I use: netstat -l But that is trying to be clever and prints the process name instead of the port: Active Internet connections (only ...
2
votes
0answers
522 views

Why doesn't netstat show me some ports?

When port-scanning my computer with another machine, I find three open ports: Starting Nmap 7.40 ( https://nmap.org ) at 2017-05-08 22:14 CEST Nmap scan report for laptop.local (192.168.11.103) Host ...
3
votes
0answers
418 views

Why does pepperflashplayer have almost 50 ports open?

So, I was messing around with netstat to learn more about addressing when I decided to run it on my local machine and see what processes were holding open ports. I came across this... tcp 0 ...
2
votes
3answers
4k views

What process is listening on a port?

[root@SERVER ~]# netstat -tulpn | grep 44316 tcp 0 0 :::44316 :::* LISTEN - [root@SERVER ~]# lsof -i | grep 44316 [root@...
1
vote
1answer
352 views

Shows One Shell User, But More Connection Via SSH Port

I've just run the command on my server netstat -atnp It shows 2 established connection via SSH Port, but when I run the command w It shows only 1 shell user. Is there anything I need to worry ...
1
vote
0answers
120 views

How is *Nix parsing Netstat -rn (routing table) Flags? [duplicate]

I was curious to see how *nix based operating systems generate routing tables and found that netstat -rn parses out from /proc/net/route. Viewing my /proc/net/route is something attune to: Iface ...
0
votes
1answer
407 views

netstat (/proc/net): why is user associated with socket root? how to get user-id of 'remote' process?

ubuntu 16.04 I have 2 node applications, app-1 and app-2, with usernames matching their application names, listening locally (on ports 8001 and 8002, respectively) on the same instance. When app-1 ...
11
votes
0answers
1k views

Why is the default output of ss so strange? [duplicate]

When I run ss -tnlp to display all programs listening for tcp connections (something I do rather often) I get something like this: Despite the terminal being wide enough, ss chooses to split some ...
1
vote
1answer
834 views

How to get the pid number which connect to external ip?

Some program was connected from my local ip 111.111.111.111 with 130.239.18.176:80,how to get the pid number? netstat -np (Not all processes could be identified, non-owned process info will not be ...
7
votes
1answer
5k views

TCP *:hbci (LISTEN) - What does hbci mean? [duplicate]

I simply open an http server from my terminal (with node) listening on port 3000, which is obviously working if I request localhost:3000 in a browser. Now, I want to see this connection so I use ...
0
votes
1answer
514 views

Stalled TCP connection with data in RecvQ and ESTABLISHED off

My networking skills are quite poor and I am trying to understand the following netstat -ton meaning. We have redis server and a client with a thread connecting to it via PUB/SUB. The client ...
-1
votes
1answer
2k views

How to find all the incoming traffic in the linux server [closed]

How to find all the incoming traffic to the linux server. It should show only incoming traffics.
0
votes
2answers
611 views

/proc/net/netstat not found

I am trying to compile my own Linux for embededd devices, using the OpenWRT distribution. I am trying to get some Multicast information using the /proc/net/netstat interface but it is not found (...
3
votes
3answers
2k views

How does one determine the process causing an ARP request?

I have a machine that runs a network intensive application that spawns many processes. I noticed recently that the machine is producing ARP requests looking for an IP address that does not exist. I ...
2
votes
1answer
548 views

number of HTTP sessions=number of TCP Sessions?

I have a software that has an HTTP server listening on port 20001 and running on a Unix machine. The logfile of the HTTP server says it currently has 600+ active HTTP connections, however netstat -an |...
2
votes
1answer
392 views

lxterminal in the netstat output

Can you explain the following lines in the netstat output? Active UNIX domain sockets (w/o servers) Proto RefCnt Flags Type State I-Node Path unix 2 [ ] STREAM ...
3
votes
1answer
1k views

“netstat -p”/“ss -p” not showing the process of a listening port

On my CentOS 7, at one point, sudo ss -plt listed a port marked as LISTENING on *:30565, but there was no information whatsoever in the process column of its row. The other listening ports were ...
3
votes
2answers
4k views

does netstat established mean that someone is ssh'd into my machine

I ran the command netstat -lat and I got this output... ... tcp 0 0 my.machine.ip.add:ssh 116.31.116.48:43270 ESTABLISHED tcp 0 0 my.machine.ip.add:ssh my....
0
votes
1answer
55 views

how to find which process / service do criminal traffic via port 11413

we get message from our security department about criminal traffic via port 11413 from linux machine A to linux machine B please advice how to find who use this port and details about the traffic ...
6
votes
2answers
1k views

Netstat display wrong process associated to listening port

When I do netstat -tanup as root on my Debian host, process 1/init is displayed for port 993. How is this possible ? I never saw such behavior. The command systemctl list-sockets shows the correct ...
1
vote
1answer
6k views

Solaris 10 - Find service attached to listening port

I'm diagnosing an old Solaris 10 build and during port scans I've found an open port that's not on the approved list for this server. I've tried various combinations of netstat switches but I can't ...
6
votes
6answers
7k views

netstat: See process name like in `ps aux`

The postfix daemon has only the name "master" if I use netsat like this: root@myhost# netstat -tulpen| grep master tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 0 53191445 13640/master If I ...
1
vote
1answer
487 views

Unix: Locating service configuration files on the file system

I have a Solaris 10 box which has limited tools and commands installed in comparison to Linux distros. In addition, the tools that can be used such as grep and netstat don't have the same options and ...
0
votes
2answers
1k views

How can I use netstat to display only Protocol, Port and status?

I am using netstat -lt | grep LISTEN to list all the tcp ports that are listening. I am supposed to use this data by my java application so I want to format the output in shell to reduce the ...
3
votes
0answers
746 views

dnsmasq uses many ports

I've executed the command sudo netstat -veepa -n -W and found many local ports which are used by dnsmasq: Proto Recv-Q Send-Q Local Address Foreign Address State User ...
1
vote
0answers
355 views

Unknown network connections in nethogs (is it safe?)

It's about a month that I see some unknown connections in nethogs and I tried to understand what program is responsible for them but I failed. I'm not sure but it seems that my Internet connection ...
2
votes
1answer
662 views

nmap does not report all open ports?

An excerpt from the output of netstat: tcp4 0 0 192.168.2.48.49620 stackoverflow.co.https ESTABLISHED tcp4 0 0 192.168.2.48.49554 stackoverflow.co.https ESTABLISHED ...
1
vote
1answer
768 views

What does TCPRcvCoalesce, TCPAutoCorking and TCPHystartTrainCwnd in netstat mean?

We have some RHEL7 Apache reverse proxies that experienced a performance degradation event. After a few hours, restarting Apache restored performance to normal levels. We are trying to determine the ...
19
votes
2answers
6k views

Why is netstat deprecated? [closed]

I've heard many times now that it is, and I'm mostly using ss now. But I sometimes get frustrated with differences between the two, and I would love some insight. Also, I can't be the only one who ...
1
vote
4answers
694 views

Bash: How to print additional column matching IP Address to Name

I'm using netstat to collect information about connected IP's. And I have the following format: netstat -tn 2>/dev/null | awk '/:80 / {print $5}' | sed 's/.*::ffff://' | sed 's/:.*//' | sor t | ...
2
votes
1answer
5k views

How do I get active unix domain sockets for a specific pid if I can't use lsof command?

If I have no permission to use lsof, how do I get them for a process with pid already known? Thanks I know netstat -l -p command print out active unix domain sockets, but it seems it's not updating ? ...
0
votes
1answer
614 views

Monitoring Server Connections - Netstat formatting issue

I have had a few issues with a server recently. So i just wanted to leave a window showing the unique and IP's of connected devices. I have been using: watch -n 5 "netstat -tn 2>/dev/null | grep :...
0
votes
1answer
421 views

reading the output of netstat for tcp

If I ssh root@server -R 5901:localhost:5900 and netstat -an I get: Active Internet connections (servers and established) │ Proto Recv-Q Send-Q Local Address ...
1
vote
0answers
635 views

Arch Linux - Cronie is not working and nestat does not output logs?

I added a cronjob via crontab -e which is to be executed every minute. I enabled and started cronie on systemctl. Set editor $ export EDITOR=vim Add cront tasks $ crontab -e * * * * * Rscript /...
2
votes
0answers
5k views

List services with port numbers

I would like to list all installed services (especially running) with their port numbers, where they are assigned. Could you be so glad and help me with this command?
4
votes
1answer
1k views

ss not showing all ports being listened on

After doing a ssh -fND 1080 localhost, ssh will listen on port 1080 to provide the SOCKS service: box:~$ netstat -ln|grep 1080 tcp 0 0 127.0.0.1:1080 0.0.0.0:* ...
0
votes
2answers
780 views

netstat shows over 44K connections without ip address, what's that?

I have a question about linux netstat usage and output results. I'm trying to solve a dilema about why my server is facing communications delays and bottle neck issues, So I started digging and ...