Questions tagged [netstat]

analysis tool for statistics about active connections, open sockets, routing tables; in general the networking subsystem.

Filter by
Sorted by
Tagged with
1
vote
1answer
1k views

Netstat Listen Queues

What information can I gather from netstat listen queues? Looking at the man page I can see that using "-L" in netstat it shows me the size of listen queues. It tells me information about each ...
3
votes
0answers
291 views

What does “incoming packets delivered” mean in “netstat -s” output on Linux?

While running netstat -s on Linux, I got below statistics for IP protocol (information for other protocols are omitted), Ip: 322937 total packets received 0 forwarded 0 incoming packets ...
2
votes
0answers
817 views

why i can see ipv6 socket with ipv6 stack disable?

I try to disable complety ipv6 on a Linux Debian 7 (wheezy) However , things escape me. In my case, i test with grafana process (I have same issue with munin, rpcbind etc) Method 1 : with sysctl ...
2
votes
1answer
3k views

How to check which user is responsible for a utilizing a particular port?

I wanted to know which user is running a particular port no. For e.g. netstat -an | grep ':6016' which user is resposible for "6016" port no.
5
votes
2answers
582 views

Language in netstat output

I have a program here, that depends on the output of netstat. More concrete: netstat -apn. Here is an example of a normal output. Proto Recv-Q Send-Q Local Address Foreign Address ...
2
votes
2answers
293 views

What Port is Squid Running on in OS X/BSD

I've recently starting playing around with the Squid caching server on my OS X based computer. I'm curious if there's a way to tell which port Squid is running on using netstat or other standard unix ...
2
votes
1answer
7k views

TigerVNC is running, but not listening on any port?

I'm on CentOS 7 with TigerVNC installed. I have started it up (I think), but I can't connect to it. Here's what leads me to think it's running: $ vncserver -list TigerVNC server sessions: X ...
0
votes
1answer
83 views

How to monitor all the connections?

I have a server with several users, one of them has a script to connect to an external server. How can I see the external connection to the server (I know the IP address), so the program used and the ...
4
votes
1answer
2k views

Why do I have Established TCP connections with no owner PID?

Both ss --processes and netstat --program (with sudo) list some ESTABLISHED TCP connections to local port 6514 with non-zero Recv-Q values and no owner process (netstat output shows - where PID/...
1
vote
0answers
482 views

Reverse AutoSSH working, but the proxied LISTEN ports fail randomly

I'm having a hard time describing the error, sorry for the lengthy explanation: I have a successful, working, stable reverse AutoSSH solution nailed up between a client beagle board and a server. The ...
1
vote
1answer
41 views

installed application keeps open port

I installed an application (a text editor) and it keeps a connection alive. I blocked the IP with iptables, but the port stays open. netstat shows: tcp 0 0 127.0.0.1:<port> 0.0.0.0:* ...
5
votes
2answers
3k views

Distinguish TCP server from client within netstat output

I have a socket connection between a client process and a server process, both running on my machine. There are two entries shown for the connection as, sudo netstat -ntp | grep 56442 tcp 1 ...
0
votes
1answer
86 views

Open ports with no associated PIDs

I have some open ports on my laptop but netstat is not reporting which PID/Program is associated with them: $ netstat -tulpn (Not all processes could be identified, non-owned process info will not ...
1
vote
1answer
484 views

netstat pipe count host

Unix pipe problem: how to process multiline input to output the line and insert some piped processes. echo "111 22222222" | awk '{print $1 " " $2 " " piped_processes_using_2nd_argument}' A bit of ...
0
votes
1answer
748 views

kstat in Solaris 11+

I'm writing a kernel-level program in Solaris that monitors the workload of the system and reports the stats --something similar to netstats in linux and kstat in Solaris. Where the source code for ...
4
votes
2answers
4k views

Netstat output line width limit

When executing netstat, I find that the command's output width is limited regardless of the console size, in contrast with other commands such as ps that seem to get adjusted. So for example: $ sudo ...
3
votes
2answers
6k views

How to use lsof to identify incoming TCP connections?

I want to know if my server establishes a connection to a remote server or if the remote server tries to reach my server. I tried to read the output of lsof and obtain this information: lsof -i TCP:...
0
votes
4answers
174 views

how to show port numbers that are listening for the incoming connections under TCPv4?

I want to use command line to show only the port numbers after ":" only This is what I'm trying to do sudo netstat -ant |grep LISTEN|grep :|sort -n|cut -c 45- It shouldn't list any tcp6 info
0
votes
1answer
98 views

Connections without Virtualhost

I saw tons of connections on port 80. But no requests from these IP addresses were logged in Apache access/error logs. I deleted all the virtual hosts, stopped Apache, and restarted it after there are ...
3
votes
3answers
706 views

How can I list every port serving a web page

I have a number of servers, all with various HTTP(S) services accessible on a variety of ports. It's incredibly difficult to keep track of which service is available under which host and what port. ...
0
votes
2answers
1k views

Routing Configuration sending some traffic over VPN

I have a DD-WRT router with an OpenVPN service configured. I'd like to send only certain source IP's over the vpn connection. I believe my current routing table (as seen with netstat -rn) sends all ...
1
vote
1answer
196 views

Unexpected netstat output in DNAT conditions

So, here I have a basic setup with SOCKS5 proxy listening on, oh, say 8123 I redirect TCP to the proxy via iptables From iptables perspective everything looks peachy, iptables -t nat -v -L shows ...
1
vote
2answers
191 views

Asymmetric ESTABLISHED session in netstat

On the first host, root@xxx:~# netstat -natup | grep xxx tcp 0 0 10.2.5.3:40740 xxx:10051 ESTABLISHED 1482/zabbix_proxy: we can see that a connection has been established with the ...
0
votes
1answer
16k views

Why doesn't Tomcat show up when I grep netstat's output for 8080?

I am doing the following to determine if Tomcat is running: $ whoami voops voops@esavo00:~/apache-tomcat-7.0.57/bin# $ ps -ef | grep -i tomcat | grep -v grep voops 8973 1 0 Apr22 ? 00:...
0
votes
0answers
1k views

can't connect to remote host with MySQL…firewall problem?

I've granted privileges to thufir for remote access through the shell (correct?), but cannot seem to actually connect. The router firewall has SPI to off. I've disable the IPv6 firewall on the ...
0
votes
2answers
2k views

/proc/net/tcp: permission denied

When I type netstat into my SSH console as a non root user, I get /proc/net/tcp: permission denied but it works fine as root. I was wondering if it's possible how I would allow non root users to ...
0
votes
1answer
1k views

Why can `lsof -i` not show an open connection which `netstat -n` lists?

A strange situation. I started telnet 0 8081 and lsof -i (run under root) doesn't list this connection, but netstat -n does. Why can this be?
3
votes
0answers
697 views

why do I have so many open socket handlers and netstat DGRAM entries?

I run on a RPi (Raspbian 3.12.35+ #730 PREEMPT Fri Dec 19 18:31:24 GMT 2014 armv6l GNU/Linux) a daemon in Python 2.7.8 which queries various APIs via requests and provides itself an API for another ...
2
votes
0answers
301 views

Count all network requests to a specific host

I have a mock server running on my localhost that mocks out a back end service that I need for my app. One thing that I want to do is count the number of requests [GET, POST, PUT, DELETE,...] that my ...
0
votes
3answers
528 views

Get Any Interface's Router Address

How can I know what the router's address is when I am on multiple interface? I know by using netstat -rn I can have the dominating interface's gateway, which is the router's address. But what about ...
28
votes
6answers
11k views

chromium browser (pepperflashplugin) opening listening ports on 0.0.0.0:5353

I am using chromium browser (chrome) with pepperflashplugin in Debian. I have noticed, chromium/pepperflashplugin opens a listening port on my public interface 0.0.0.0:5353 as seen with netstat: ...
4
votes
1answer
433 views

log PID of each connection attempt

Finding the PID of an established connection is trivial using netstat or lsof. However, I have a process which is creating a connection ever 60 seconds to our database and locking it up by maxing out ...
3
votes
1answer
3k views

How to report receive queue size for AF_UNIX sockets

netstat -a reports Recv-Q (amount of unread data pending for a reading application) for AF_INET sockets, but not AF_UNIX sockets (at least not for SOCK_DGRAM). Does anybody know a way to obtain this ...
4
votes
1answer
13k views

ss is replacing netstat, how can I get it to list ports similarly to what I am used to?

I've been trying to modernise my way with Linux by, for one thing, ditching netstat for ss. I looked up my favourite command line flag for netstat in the ss man pages, and was very glad to find that ...
1
vote
0answers
849 views

How can I log outgoing TCP traffic including the full path of URLs?

I use a program regularly on Linux that makes a TCP request when it starts up and updates a file with an access token before launching. I'd like to write a batch script that makes this request (using ...
1
vote
1answer
9k views

How to do a netstat that will only filter based on pid

How can I have the following command below just show/filter based on the PID's I'm looking for? sudo netstat -lp --inet The results come back as this Proto Recv-Q Send-Q Local Address ...
1
vote
0answers
565 views

Why doesn't syslog traffic show up in netstat and lsof output?

I've noticed on my CentOS 5.x system that outbound syslog traffic (UDP) doesn't show up in lsof or netstat results. I've even tried stuff like watch -n .1 'netstat -l -u -n --program' to make sure ...
1
vote
3answers
808 views

Status of network ports

I hope it is possible to get the necessary details of each network port from /etc/services. If I have to develop a C++ program to get the status of each port how should I start it? I am not allowed ...
3
votes
1answer
2k views

How does netstat command fit in various layers of TCP/IP model in the performance diagram?

netstat command is useful to, Print network connections, routing tables, interface statistics, masquerade connections, and multicast memberships. Now, I was reading about the Linux performance ...
2
votes
0answers
945 views

How do I find out how long a socket is in CLOSE_WAIT?

I have a server relatively with a high number of sockets in CLOSE_WAIT I want to know the age of each socket, to know if it's a real problem (sockets not getting closed) or that the sockets are ...
4
votes
1answer
609 views

Tons of unknown connections in nethogs

I am seeing hundreds of different connections to the same ip and port scrolling by when running nethogs. Occasionally the foreign IP and port will change (not always 80, but sometimes). I've noticed ...
21
votes
2answers
33k views

netstat — why are IPv4 daemons listening to ports listed only in -A inet6?

I have a computer with: Linux superhost 3.2.0-4-amd64 #1 SMP Debian 3.2.60-1+deb7u3 x86_64 GNU/Linux It runs Apache on port 80 on all interfaces, and it does not show up in netstat -planA inet, ...
-1
votes
1answer
1k views

how to close ports with no process attachedto it

how do you close ports if there are not processes attached to it? I used to run an application and they're using this ports previously for some reason the application crashed but if i restart the ...
5
votes
1answer
36k views

netstat shows an ESTABLISHED connection with no process

I am debugging some problems with postfix. When I establish a connection nothing happens and netstat shows: $ netstat -anp ... tcp 0 0 129.132.202.106:25 129.132.179.232:60154 ...
0
votes
3answers
341 views

Connectivity between 2 remote Linux machines

I have two remote machines, I'm running a script on one of them. There's some part of the script that should be running on the other one, then the script will continue in its further tasks/commands. ...
9
votes
3answers
14k views

port being in use not displayed in netstat output

In what scenarios port being used by a process don't show up in netstat -a output. I'm running jenkins on my machine. It's listening on port 8080. I'm trying to start another process that tries to ...
0
votes
1answer
896 views

Why is my Netstat not returning the desired output and just getting hung up?

My remote Linux machine is able to ping an IP address on an internet, but the same action is unable to get the netstat report for that IP. ping a.b.c.d 64 bytes from a.b.c.d: icmp_seq=1 ttl=64 time=...
19
votes
5answers
32k views

meaning of Netstat local address column

When I do netstat -ntlp there is a column called Local Address: sometimes it would output IP address as 0.0.0.0:7180 and sometimes 127.0.0.1:9001 What's the implications of both notations? Does ...
1
vote
2answers
1k views

what is 'smakynet' in the netstat result?

after logging into a server, I used netstat to check out the ports of this server and wanted to find which port was communicating with me My IP is 143.248.143.198 and my search results are like ...
2
votes
1answer
2k views

Why is the 'foreign address' not IP address but something like this?

I never learned network programming and this kind of stuff properly. Only know very basic stuff like IP address and just a vague concept of what ports and TCP/IP are. Here, I connected to my lab's ...