The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [netstat]

analysis tool for statistics about active connections, open sockets, routing tables; in general the networking subsystem.

Filter by
Sorted by
Tagged with
1
vote
2answers
824 views

How to display an UDP connection?

ss and netstat seem to not be working. Adobe Flash RTMFP protocol creates a lots of UDP connections. I want to know, who is connected to me. I can see intense data-send traffic from the monitor. I ...
1
vote
1answer
388 views

Shows One Shell User, But More Connection Via SSH Port

I've just run the command on my server netstat -atnp It shows 2 established connection via SSH Port, but when I run the command w It shows only 1 shell user. Is there anything I need to worry ...
1
vote
1answer
1k views

Netstat Listen Queues

What information can I gather from netstat listen queues? Looking at the man page I can see that using "-L" in netstat it shows me the size of listen queues. It tells me information about each ...
1
vote
2answers
197 views

Asymmetric ESTABLISHED session in netstat

On the first host, root@xxx:~# netstat -natup | grep xxx tcp 0 0 10.2.5.3:40740 xxx:10051 ESTABLISHED 1482/zabbix_proxy: we can see that a connection has been established with the ...
1
vote
2answers
5k views

How to use netstat command

My question is what does it mean to LISTEN or ACCEPT on a port as it relates to my example? Example: I have a tomcat server, and It will use port 8080. I want to make sure that port is available for ...
1
vote
1answer
32 views

What does the reordering field of ss --info mean?

ss --info returns information about tcp connections. It produces a line simliar to the following (some fields removed for formatting) tcp ESTAB 0 0 192.168.1.177:60236 54.70.141.88:...
1
vote
1answer
1k views

How to get the pid number which connect to external ip?

Some program was connected from my local ip 111.111.111.111 with 130.239.18.176:80,how to get the pid number? netstat -np (Not all processes could be identified, non-owned process info will not be ...
1
vote
1answer
509 views

netstat pipe count host

Unix pipe problem: how to process multiline input to output the line and insert some piped processes. echo "111 22222222" | awk '{print $1 " " $2 " " piped_processes_using_2nd_argument}' A bit of ...
1
vote
1answer
204 views

Unexpected netstat output in DNAT conditions

So, here I have a basic setup with SOCKS5 proxy listening on, oh, say 8123 I redirect TCP to the proxy via iptables From iptables perspective everything looks peachy, iptables -t nat -v -L shows ...
1
vote
2answers
2k views

/proc/net/tcp: permission denied

When I type netstat into my SSH console as a non root user, I get /proc/net/tcp: permission denied but it works fine as root. I was wondering if it's possible how I would allow non root users to ...
1
vote
1answer
9k views

How to do a netstat that will only filter based on pid

How can I have the following command below just show/filter based on the PID's I'm looking for? sudo netstat -lp --inet The results come back as this Proto Recv-Q Send-Q Local Address ...
1
vote
1answer
2k views

Have netstat not display port numbers for foreign address

I would like to get netstat to not display port numbers on the foreign address so I can run some statistics on it. This is for a FreeBSD system. The following is a example of the output. <root&...
1
vote
0answers
19 views

ss is slow when process option (-p) used

When checking for process listening on port using ss command, it's slow when compared with (obsolete) netstat command. $ time ss -nlp | grep -E ':8081|:8007|:8010' LISTEN 0 100 ...
1
vote
0answers
32 views

IGMPv3 Source Filtering Configuration

I know that multicast addresses are being kept in /proc/net/igmp. Where is the configuration for v3 source filter being kept? Please note that I do not wish to inspect actual IGMP packets, I wish to ...
1
vote
0answers
103 views

What does the inode column in netstat signify?

Issuing the command, netstat -pulet, there is an inode column that appears, and so issuing a find command I found that it links to inodes in the /sys/kernel/slab/cgroup/<...> section. For ...
1
vote
0answers
24 views

System statistics from different utilities don't agree

I am running an Aliyun instance with 8 vCPUs to do some high performance computing, so I want to make full use of the machine. In other words, extremely high CPU usage is not a problem; instead it is ...
1
vote
1answer
56 views

confused by netstat result

I ssh to my ubuntu server and run sudo netstat -a -p and I get this: tcp 0 0 ip-172-31-25-123.us:ssh mailDOTjjtoursDOTcom:54531 ESTABLISHED 1516/sshd: ubuntu [ And when I use my other ...
1
vote
1answer
217 views

Difference of interfaces in netstat -i and netstat -i 1 1 command

Result of the netstat -i command in Solaris: # netstat -i Name Mtu Net/Dest Address Ipkts Ierrs Opkts Oerrs Collis Queue lo0 8232 loopback localhost 179 0 179 0 ...
1
vote
0answers
93 views

Show bound socket (but not listen) process

I am trying to understand how bind() works. I open a socket, and bind it to port 5001, but I don't execute listen() on it: sockfd = socket(AF_INET, SOCK_STREAM, 0); /* Initialize socket structure */ ...
1
vote
1answer
101 views

Confused about the “-a” switch of netstat on mac os

The -a switch documentation says the following: -a With the default display, show the state of all sockets; normally sockets used by server processes are not shown. With the routing ...
1
vote
0answers
144 views

How is *Nix parsing Netstat -rn (routing table) Flags? [duplicate]

I was curious to see how *nix based operating systems generate routing tables and found that netstat -rn parses out from /proc/net/route. Viewing my /proc/net/route is something attune to: Iface ...
1
vote
1answer
530 views

Unix: Locating service configuration files on the file system

I have a Solaris 10 box which has limited tools and commands installed in comparison to Linux distros. In addition, the tools that can be used such as grep and netstat don't have the same options and ...
1
vote
0answers
384 views

Unknown network connections in nethogs (is it safe?)

It's about a month that I see some unknown connections in nethogs and I tried to understand what program is responsible for them but I failed. I'm not sure but it seems that my Internet connection ...
1
vote
1answer
829 views

What does TCPRcvCoalesce, TCPAutoCorking and TCPHystartTrainCwnd in netstat mean?

We have some RHEL7 Apache reverse proxies that experienced a performance degradation event. After a few hours, restarting Apache restored performance to normal levels. We are trying to determine the ...
1
vote
0answers
682 views

Arch Linux - Cronie is not working and nestat does not output logs?

I added a cronjob via crontab -e which is to be executed every minute. I enabled and started cronie on systemctl. Set editor $ export EDITOR=vim Add cront tasks $ crontab -e * * * * * Rscript /...
1
vote
0answers
502 views

Reverse AutoSSH working, but the proxied LISTEN ports fail randomly

I'm having a hard time describing the error, sorry for the lengthy explanation: I have a successful, working, stable reverse AutoSSH solution nailed up between a client beagle board and a server. The ...
1
vote
1answer
43 views

installed application keeps open port

I installed an application (a text editor) and it keeps a connection alive. I blocked the IP with iptables, but the port stays open. netstat shows: tcp 0 0 127.0.0.1:<port> 0.0.0.0:* ...
1
vote
0answers
876 views

How can I log outgoing TCP traffic including the full path of URLs?

I use a program regularly on Linux that makes a TCP request when it starts up and updates a file with an access token before launching. I'd like to write a batch script that makes this request (using ...
1
vote
0answers
572 views

Why doesn't syslog traffic show up in netstat and lsof output?

I've noticed on my CentOS 5.x system that outbound syslog traffic (UDP) doesn't show up in lsof or netstat results. I've even tried stuff like watch -n .1 'netstat -l -u -n --program' to make sure ...
1
vote
0answers
835 views

Command for finding open ports

On my linux servers I have this alias set: alias ns="sudo lsof -Pi|grep -v ESTABL|grep -v CLOSED|grep -v -e '->' | tr -s ' ' '\t' | awk '{print $3 "\t" $8 "\t" $5 "\t" $9 "\t" $1}'| column -t|...
1
vote
1answer
2k views

Netstat shows programs running on different ports then they should

I have some code I'm testing. Program A listens on a predefined socket for program B to connect to and for my testing I'm running 32 instances of the programs A and B. I've written my script to tell ...
1
vote
2answers
3k views

Killed process blocks TCP ports

I've had this issue on several machines. Is there some way to free this blocked port? Here is an example: Let me explain. I've killed some JAVA-Process on SUSE Linux Enterprise Server 11 SP4, which ...
0
votes
1answer
1k views

Netstat doesn't show my machine IP as listening on port 22

I am able to ssh to the machine. But my machine not shown as listening on port 22. Below is what I see. It show as listening on port 53, 21, 8080, 8443 etc. But no entry for 22(ssh). My machine IP is ...
0
votes
2answers
808 views

netstat shows over 44K connections without ip address, what's that?

I have a question about linux netstat usage and output results. I'm trying to solve a dilema about why my server is facing communications delays and bottle neck issues, So I started digging and ...
0
votes
1answer
82 views

Process appear by “netstat” but doesn't appear by “ps -a”

I have a machine in my organization that I sshed and received a terminal. When I run netstat -ntlp I received: [root@webtl1 ~]# netstat -ntlp Active Internet connections (only servers) Proto ...
0
votes
2answers
108 views

Print ports with the application using it

I want to print 2 fields together, all open ports and the application using it. This is my command but it only prints the port numbers and still missing the program field: netstat -lnt -u -p | awk '{...
0
votes
1answer
1k views

Why can `lsof -i` not show an open connection which `netstat -n` lists?

A strange situation. I started telnet 0 8081 and lsof -i (run under root) doesn't list this connection, but netstat -n does. Why can this be?
0
votes
3answers
349 views

Connectivity between 2 remote Linux machines

I have two remote machines, I'm running a script on one of them. There's some part of the script that should be running on the other one, then the script will continue in its further tasks/commands. ...
0
votes
1answer
952 views

Why is my Netstat not returning the desired output and just getting hung up?

My remote Linux machine is able to ping an IP address on an internet, but the same action is unable to get the netstat report for that IP. ping a.b.c.d 64 bytes from a.b.c.d: icmp_seq=1 ttl=64 time=...
0
votes
2answers
1k views

what process is listening on a given port

I have several problems: some process is attempting to send data and the firewall is rejecting it at the rate it is sending it out firewall logs flood the system (may need to rate-limit the logging) ...
0
votes
2answers
93 views

How can I find the mapping on `$DISPLAY` after `ssh -X`?

On machine B, I remote access machine C $ ssh -X t@C $ echo $DISPLAY localhost:10.0 How can I find/verify the mapping of $DISPLAY on C to $DISPLAY on B? Can it be done by the following command ...
0
votes
2answers
382 views

How can I verify that the port forwarding is established by checking the sockets?

After I run $ ssh -L 9000:google.com:80 testme@localhost how can I verify that the port forwarding is established by checking the sockets (internet and unix domain sockets)? Thanks.
0
votes
2answers
131 views

Looking for clarification on netstat results

I am looking for some clarification on the following netstat results. The following results are showing 3 java processes. Is there a way to find which java programs are they referring to? Another ...
0
votes
1answer
66 views

List TCP connections

How can I format netstat output so I have a list of TCP connections made to the server? A bit like this: 192.168.234.1 51780 192.168.234.221 51444 192.168.234.251 51447 The closest I got was six ...
0
votes
2answers
81 views

Capture internet traffic on single interface

I have been asked by a customer to provide a list of all URL's that my company's linux server connects to in order to complete a software update including individual TCP,UDP ports that these ...
0
votes
1answer
541 views

How to identify and kill git listening services here?

I am studying my listening services, and I am thinking how identify the type of git listening services so I can kill git the right one in the right situation and/or both. The services are needed for ...
0
votes
2answers
1k views

How can I use netstat to display only Protocol, Port and status?

I am using netstat -lt | grep LISTEN to list all the tcp ports that are listening. I am supposed to use this data by my java application so I want to format the output in shell to reduce the ...
0
votes
1answer
679 views

Monitoring Server Connections - Netstat formatting issue

I have had a few issues with a server recently. So i just wanted to leave a window showing the unique and IP's of connected devices. I have been using: watch -n 5 "netstat -tn 2>/dev/null | grep :...
0
votes
1answer
100 views

Connections without Virtualhost

I saw tons of connections on port 80. But no requests from these IP addresses were logged in Apache access/error logs. I deleted all the virtual hosts, stopped Apache, and restarted it after there are ...
0
votes
3answers
555 views

Get Any Interface's Router Address

How can I know what the router's address is when I am on multiple interface? I know by using netstat -rn I can have the dominating interface's gateway, which is the router's address. But what about ...