Questions tagged [netstat]
Netstat (network statistic) is a tool, common to Windows, Unix and Linux, used to obtain information about network connections (outbound and inbound), routing tables, and a range of information on the use of statistics the network interface. Netstat.exe command line that shows all open ports for Transmission Control Protocol (TCP) and User Datagram Protocol (UDP).
213
questions
1
vote
1
answer
3k
views
why can't I open a port on Win 7? is it the app's fault?
I am having problems opening a port from one Windows PC on my local network.
On Windows 7 computer ("Computer A") I running Calibre, an ebook management program that has something called an "ebook ...
- 294
1
vote
2
answers
3k
views
Count exchanged bytes per TCP connection
I need to get a table updated with the exchanged bytes (Rx and/or Tx) for each ESTABLISHED TCP connection on a linux machine (well, at least, a list of connections (port ranges), thus not actually all)...
- 11
1
vote
2
answers
596
views
what is ip 10.1.1.130 to which seems monitored by NT Kernel & System process on Windows 7?
I used netstat to see what is happening with network connections, and I see this weird ip address somehow listed together with PID 4 "NT Kernel & System", whatever that might be. Netstat describes ...
1
vote
1
answer
2k
views
Nestat -ano what does it mean?
I tried checking my PC if there are some loggers installed and what I get was:
TCP 192.168.1.7:2642 192.168.1.2:445 ESTABLISHED 4
When I checked in my Task Manager it says system? What ...
- 1,237
1
vote
1
answer
213
views
How can I add a timestamp to a monitored command (like "netstat") in Windows commandline?
Using netstat -aon | findstr /I "1234", I can monitor that this port is open, but there is an issue: this is what the result looks like:
UDP 0.0.0.0:1234 *:* 5064
UDP 0.0.0.0:...
- 2,243
1
vote
1
answer
801
views
Netstat shows open ports. What services are listening?
Netstat (Windows 10) is showing certain services as "listening", but what service is listening on that port?
Any insights much appreciated.
- 971
1
vote
1
answer
749
views
Is it normal to have a high ICMPv6 Neighbour Solicitation sent?
I have suspicion that my home network may be comprimised and used by malicious actors.
I'm a networking noob so I would like to know if having a Neighbour Solicitations sent >2000 is normal?
I got ...
- 113
1
vote
1
answer
397
views
Troubleshooting outbound internet traffic - Fedora Linux
Without any programs open except an empty terminal window and System Monitor, I'm seeing network traffic. Roughly every 1 second there's a small spike in outbound and a little inbound traffic. $ sudo ...
- 125
1
vote
1
answer
4k
views
How do I output a netstat command every 2 seconds to a text file
I am trying to make the following happen, but having a hard time getting it to work as expected.
Tried using the watch command, but the output is just a mess.
I found the following, but haven't been ...
- 13
1
vote
1
answer
668
views
Command Prompt netstat response
I was trying to check if any VNC is turned on so I tried
netstat -an | find "ESTABLISHED" | find ":5900"
and
netstat -an | find "ESTABLISHED" | find ":5800"
I got some feedback
TCP 127.0.0.1:...
- 13
1
vote
1
answer
171
views
Why only part of ports on my machine can be reached from external ip?
I'm trying to achieve my remote service with port 5601. But unfortunately i can't open the website.
Here is something i tried to find out why it's not working:
I logged in remote server and tried "...
- 13
1
vote
1
answer
1k
views
Get connection speed of a program with netstat
I use netstat -natpe to view the connections and program names. While wget is fetching data, the RX column is zero
naderan@student-virtual-machine:~$ netstat -natpe
(Not all processes could be ...
- 1,285
1
vote
1
answer
815
views
windows netstat shows mysql server state time wait
What does it mean when windows netstat -ano shows this, and why there are four (more than 1).
- 3,197
1
vote
1
answer
881
views
How can I connect to MongoDB on my Mac OSX from a process on a Vagrant/Virtualbox machine?
I can't use localhost because from my virtual machine's perspective localhost is the virtual machine itself and not the underlying host that it is running on. How can I connect to the host machine ...
- 317
1
vote
1
answer
12k
views
What's the netstat command to get the process name and only for a specific port?
I'm using netstat on Windows 7, I would like to get only the process which are using the port 80 and to get also the name of the process. Not only the PID.
I've found this solution to add the process ...
- 355
1
vote
1
answer
575
views
What is this foreign address called cartfill in windows netstat
This is the result of netstat in my Winodws 8 CMD
C:\Windows\System32>netstat
Active Connections
Proto Local Address Foreign Address State
TCP 127.0.0.1:2311 cartfill:...
- 31
1
vote
1
answer
3k
views
How can I tell what this process is from netstat -AB?
I need to find out which process is running on port 8888. I have used the 'netstat -AB' command in the command prompt however it does not show me the information. It seems to have a problem reading ...
- 723
1
vote
1
answer
2k
views
How to Get List/Reference Computers on a Domain, When My computer is Not a Part of that Domain
This is a question I posted on Stack Overflow: https://stackoverflow.com/questions/15211175/how-to-get-list-reference-computers-on-a-domain-when-my-computer-is-not-a-part
I'm looking to get a list of ...
- 453
1
vote
1
answer
782
views
How can I unbind a UDP port that has no entry in lsof?
On my Mac, I have a UDP port that is "already in use", but doesn't have an associated process:
sudo netstat -na | grep "udp.*\.500\>"
shows
udp4 0 0 192.168.50.181.500 *.* ...
- 131
1
vote
1
answer
3k
views
How do I understand netstat output?
Recently in wondering about my slower-than-usual internet connection, I learned that you can run the netstat command line in the command prompt.
However, when I use this it tends to show things like,...
Chris
1
vote
1
answer
3k
views
What does netstat mean by "acknowledgments not containing data received"?
Netstat reports some TCP packets in the following category acknowledgments not containing data received.
However, I'm not clear what this phrase means. Goggling and the netstat documentation don't ...
1
vote
1
answer
403
views
Increased traffic - Server probed by bots?
Since December 24 my server experiences increased resource consumption. Additionally the Nginx server seems to be unstable which causes several errors.
The CPU usage used to average at around 5%. But ...
1
vote
0
answers
137
views
Address/ports keep becoming stuck on ubuntu (server) - even after the process terminates
I'm having an issue on a headless Ubuntu 18.04 installation. Ports keep becoming "stuck" which is either preventing processes from terminating (even when sending a SIGKILL), or allowing the processes ...
- 111
1
vote
0
answers
15k
views
Netstat -ano. What does this mean..?
Getting an output that shows a specific process or group of processes (listed as PIDs) in netstat -ano.
The PIDs seem to be connecting to multiple 'Foreign Address' IPs, or perhaps trying to spam ...
- 81
1
vote
0
answers
557
views
How to find a process that is using a port if it is not displayed even in netstat?
I am using a software development IDE (Intellij) that is using local machine port 5005 for Java program debugging. In some occasions it reports that it cannot connect because the port is being used or ...
- 1,571
1
vote
0
answers
80
views
Figure out IP address of external device
I have an external device (a PCB crate) of which I do not know the IP address. Connected to this device is a PCB that broadcasts its MAC address. Ultimately, I want to know this MAC address.
I can ...
- 316
1
vote
1
answer
1k
views
sudo netstat -antp not showing PID
i am testing stuff with sockets and i encountered that strange case :
i coded i very simple tcp server in c, i made it block after accept(), just to see what happen when accepting multiple connection ...
1
vote
1
answer
1k
views
How to find out the PID which generates traffics to port 9229 in MacBook
There are unknown traffics to port 9229 in my MacBook.
$ sudo tcpdump -i any -n port 9229
......
12:10:39.176502 IP6 ::1.62261 > ::1.9229: Flags [S], seq 638850191, win 65535, options [mss 16324,...
- 31
1
vote
1
answer
11k
views
netstat shows too many established connections in windows
I have an Internet service by ADSL, the problem is that my download speed has decreased dramatically in the order of 60 or 70% down. One friend recommend me to put netstat -an on a terminal window and ...
- 131
1
vote
3
answers
7k
views
Netstat -an in Command Line
In the below picture, as you see When I write netstat -an inside the command line I got this answer in the picture. The last line is different than others.
Sometimes, I query netstat -an command ...
- 111
1
vote
2
answers
800
views
"awk" not working when using it with "watch"
In order to watch my IPv6 traffic totals I want to run this command:
netstat -s -6 | grep -i octet | grep -vi cast | awk '{ print $2/(1024*1024*1024) }'
combined with "watch -n1", so it gets run ...
- 121
1
vote
0
answers
1k
views
Netstat VS Netstat (Gnu/Linux VS BSD/Mac OS X)
Why are there different versions of netstat for Gnu/Linux and BSD/Mac OS X?
I'm trying to get the latter to respond & behave more like the former.
- 2,731
1
vote
0
answers
372
views
OS X DNS queries failing with a custom tun interface
I have a slightly modified version of tun/tap for OS X 10.10.5 running. The interface is brought up by a small python script which reads from /dev/tun and then forwards all requests over an adhoc ...
- 111
1
vote
0
answers
194
views
Per-process network usage on OSX?
I want to periodically poll for per-process network usage. Is there a way to do this efficiently in OSX like netstat -p on Linux? I know there's lsof -i -Tqsf but it doesn't seem to show bytes sent/...
- 111
1
vote
0
answers
134
views
How do I deal with processes which continuously open/close ports and increasingly consume memory?
According to file.net, nvtray.exe is some process for or from my video card. When I look at the Netstat part of XAMPP, it shows nvtray.exe continuously opening and closing ports, increment the port ...
- 121
1
vote
0
answers
3k
views
What is port 1001 used by NT Kernel & System on my Windows 7?
Sometimes i make ssh tunnel which listen as sock proxy on port 1001.
But lately i can't bind to this port. Apparently this port already occupied.
I can bind to any port for my ssh tunnel. But I'm ...
- 11
1
vote
1
answer
79
views
Process port-protocol form PID
If I have process ID and I want to know the port and Protocol of this process
is there any command in netstat or other help me?
- 43
1
vote
2
answers
1k
views
Batch Capture incoming Netstat IPs as variable
I'm trying to figure out if there is a way I can capture (and if possible, log) the ip addresses displayed from 'netstat' command. I'm trying to make a script that waits for a ping from a specific ...
- 21
1
vote
0
answers
198
views
Query an office gateway/router to confirm all routes?
Is it possible to send a 'query' of some sort to a gateway device in an office to see what subnets I have access to? For example, I know that I have access to multiple subnets because we have many ...
- 153
1
vote
0
answers
375
views
netstat multiple local addresses - connections from other PC in LAN to Internet
Running netstat on my Ubuntu 12.04 in a LAN reveals entries like this:
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 other-pc-in-lan-hostname.lo:...
- 11
1
vote
2
answers
829
views
Netstat doesn't work on FreeBSD by php function exec()
In my php-app I need list of all ip connected on 80 port.
i've chose this way:
<?php
$ips = exec("netstat -an |grep 'tcp\|udp' | awk '{print $5}' | cut -d: -f1 | sort | uniq -c", $info);
?>...
- 111
1
vote
1
answer
3k
views
Why does netstat on Windows show connections over 24 hours old?
I'm getting the error relating to port exhaustion on my server ("Only one usage of each socket address (protocol/network address/port) is normally permitted").
So, I checked with netstat -n, and it ...
- 525
1
vote
2
answers
4k
views
Send HTTP request from server to another server and get the IP that replies
I have to do this project, and I honestly have NO idea where to start.
It will send a simple GET request to a web server, and then wait for a reply, and it will print out the IP that replied. The HTTP ...
- 33
0
votes
2
answers
7k
views
How to find who is connected to my computer from MAC address?
When I type in the command netstat -an into cmd, I get information that one of my ports is opened from some MAC address. My qestion is how to close that port and how to find from the MAC address what ...
0
votes
1
answer
4k
views
What's the '-' stands for in the output of 'netstat -anp'?
I want to use netstat -anp to check which program/process is listening a specific port. But the output includes lots of lines in which the value of 'PID/Program Name' column is just a -. For example
...
- 903
0
votes
1
answer
2k
views
What does "netstat -n -o" mean?
When I type netstat -n -o, I get a lot of foreign addresses and my Internet Provider Customer Service is telling me that it means that I got spyware on my computer.
What that command really means?
0
votes
1
answer
812
views
TCP number of connections differ from client to server
How can this be ? netstat shows x 'established' connections from the client to y 'established' connections on the server. Situation stays like this for 10 minutes, then x and y change, then another ...
- 387
0
votes
1
answer
520
views
Already dead process is continuing to eat net traffic
I'm using Windows 7, Ruby 1.9.2, SciTE, Outpost Pro 2009 and NetBalancer.
Wrinting Ruby programs in SciTE I press Ctrl+Break to kill them. This way is designed to be easy, quick and reliable. But now ...
- 953
0
votes
1
answer
3k
views
Understanding netstat output
Below is an output from a netstat command:
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 0.0.0.0:5040 ...
- 117
0
votes
2
answers
1k
views
What is happening at each row of this netstat-nr command?
I have a problem that I do not understand. How do I evaluate what is happening in each row and which row matches a destination address of 183.77.42.58 and why?
What is happening at each row of this ...
- 3