Netstat (network statistic) is a tool, common to Windows, Unix and Linux, used to obtain information about network connections (outbound and inbound), routing tables, and a range of information on the use of statistics the network interface. Netstat.exe command line that shows all open ports for ...

learn more… | top users | synonyms

2
votes
3answers
48 views

Meaning of netstat output?

When I type "sudo netstat -an", this is part of the output I get: Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 192.99.202.17:39922 ...
0
votes
2answers
14k views

Redirect the output of netstat to a file?

I'm trying to redirect the output of netstat to a file and it doesn't work. Initially I tried: runas /noprofile /user:xxxxx\administrator "netstat -a -b > C:\temp\file.txt" Then I read ...
0
votes
1answer
58 views

Does “netstat -e” displays statistics of all network interfaces combined?

This is an example output of netstat -e: Does this output displays the statistics of all the network interfaces combined, or does it only displays the statistics of a single network interface?
0
votes
2answers
20 views

filename with date and time as title?

trying to setup a task in task scheduler to run every hour, I'm having trouble finding a way to add the date and time to the filename, looking for something concise like a one liner, or if needed, ...
-1
votes
1answer
60 views

Hacker evidence from “netstat -a” [closed]

What exactly do you look for in "netstat -a" results that would indicate an unknown user on your network, please? Thank you for the replies below. I edited this original question (above) earlier, ...
2
votes
1answer
100 views

Why UDP does not show LISTENING in the state column in netstat?

TCP shows LISTENING in the state column while UDP does not show anything: Is it because UDP has only one state (which is LISTENING) so there is no need to show it, or is there another reason?
19
votes
4answers
2k views

Do 0.0.0.0:0 and *:* represent the same thing?

I used netstat (in Windows) to view the listened ports for TCP and UDP: I noticed that in the Foreign Address column, UDP displays *:* instead of 0.0.0.0:0, do these two values represent the same ...
0
votes
1answer
1k views

Multiple connections to Plex dlna port 32469

Sorry if this is not in the correct forum. I have Plex server installed on a Raspberry PI running Raspbian with Open Media Vault. Everything works well. The only issue I have is that I get lots of ...
0
votes
2answers
86 views

“netstat” vs “netstat -a” in Windows

I want to know the difference between netstat and netstat -a in Windows. I think that this is the difference: netstat will display all of the TCP connections in every State except for LISTENING. ...
0
votes
2answers
1k views

Why netstat/TCPView/CurrPorts lists processes as unknown?

I'm trying to record data of all the processes that establish connections from my PC for security issues, I tried to do netstat -bn 1 > stats.txt, also tried to make a log file with CurrPorts, TCPView ...
0
votes
1answer
47 views

netstat with full command name (like in htop)

I'm running a few different services via mono, each on there own port, but when I use netstat to check which have assigned a port and which haven't, all I get are 2 processes called "mono", no way to ...
4
votes
2answers
7k views

Why does explorer.exe has an established connection to a microsoft server?

This seems a bit odd. Using netstat -a -b -n I've found the following: TCP 192.168.1.X:1150 157.56.124.76:443 ESTABLISHED [Explorer.EXE] It turns out that the ip 157.56.124.76 which resolves to ...
4
votes
2answers
9k views

Getting system lacked sufficient buffer space or because a queue was full

My ASP.NET and SQL Server 2012 application is running on Windows Server 2008 R2. Suddenly, my internet on server stopped working and my application start throwing, An operation on a socket could not ...
13
votes
6answers
6k views

What is ::: in the Local Address of netstat output?

This is the output of netstat -tulpn that I get: tcp 0 0 127.0.0.1:2208 0.0.0.0:* LISTEN 2055/hpiod tcp 0 0 127.0.0.1:631 0.0....
0
votes
1answer
27 views

PID 4 Using Port 80 - IIS Unable To Bind

So I've been having a problem where I can't use localhost:80 on IIS So I ran this: > netstat -ano | find "0:80" And got: TCP 0.0.0.0:80 0.0.0.0:0 LISTENING 4 ...
0
votes
0answers
36 views

Suspicious Active Internet connection in Netstat

I recently discovered the tool netstat on my Macbook Pro terminal and there are a lot of these connections that seem to be allowing any ip and any port to connect to my machine. Is this a sign of ...
0
votes
1answer
37 views

Strange listening port

Auditing one of my systems, I found a process without name listening on localhost, port 52698. # netstat -lntp Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address ...
0
votes
0answers
24 views

Entries in my Mac OSX routing table

I undestand basics of IPv4 and subneting but I could not find a definite answer of what some of these entries in my routing table mean: netstat -nr Destination Gateway Flags ...
19
votes
4answers
56k views

netstat with process name?

Using netstat -a -o -n I can get the list of ports and PID then I need to go to task manager and add the PID and see who is it. (pretty frustrating) I was wonder if there is a CMD command which ...
0
votes
1answer
23 views

Does netstat on windows persist logs of old connections?

I need to verify if a computer was hacked or if it has suspicious activity. Is a PC running on windows so I am wonder if there is a way to check a log with old connections activities.
0
votes
2answers
209 views

What is the difference between nmap and netstat?

I am trying to learn a little about networking and I was hoping to get some help. Does anyone know the difference between nmap and netstat? I kind of know how to use them and how to check ports but ...
3
votes
3answers
3k views

What does “msnbot” mean in netstat listings?

I was checking my Windows 8.1 PC's outgoing connections using the command netstat 5, on the advice of this article to check whether I have botnet problems. Everything looked normal except this: ...
0
votes
0answers
17 views

SABNZB+ connects to Google

COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME sabnzbdpl 29850 sabnzbd 5u IPv6 190586 0t0 UDP *:50895->par03s14-in-x0e.1e100.net:http sabnzbdpl 31115 sabnzbd 5u IPv6 ...
0
votes
0answers
16 views

Unable to pipe netstat output to a text file if i use -naob on 2008x86

Windows Server 2008 x86 only, this issue doesn't happen on Server 2012 R2 If i use netstat -nao > netstat.txt it works fine If i use netstat -naob > netstat.txt Error x: Windows Sockets ...
0
votes
0answers
26 views

How to debug Linux server connection silence

[EDIT] After I restarted for the 6th time it finally worked. I have no clue why, but hey, I can proceed again. [/EDIT] I'm developing a website using the Python Flask framework. Flask comes with a ...
0
votes
1answer
663 views

Is explorer.exe connecting to a Singapore Microsoft server common behaviour?

Netstas results explorer.exe TCP 192.168.x.x: 491x 111.221.124.116: 443 ESTABLISHED Is this part of error reporting?
0
votes
0answers
75 views

How to simulate TCP simultaneous open and close conditions?

I am learning TCP/IP protocol. I want to see simultaneous open, close, half open/close, etc conditions in practice. I have created simple TCP server and client program. How can I simulate simultaneous ...
0
votes
0answers
34 views

Why don't ALL Active Connection PID's show up in Task Manager INCLUDING those shown when using the “netstat -ano” command?

I am using Windows 7, but this may be the same in other versions of windows. Why don't ALL Active Connection PID's show up in Task Manager INCLUDING those shown when using the 'netstat -ano' command? ...
0
votes
0answers
17 views

How do I find out to what hostname a potential malware wants to connect?

Without connecting my computer to Internet. I can only think about netstat and packet capturing tools, but I dont really know which method is suitable.
10
votes
3answers
10k views

How to interpret the output of netstat -o / netstat --timers

netstat -o includes some timer information in the output but I haven't found an explanation of the output in the Timer column anywhere. Can anybody explain this or point to an explanation? This ist ...
0
votes
1answer
372 views

Disable default VPN ports on windows 500 and 4500

How do I disable the default listening VPN ports on windows machine? When I type netstat -an | findstr "500" command on the windows command prompt I get to see default 500 and 4500 ports listening ...
0
votes
3answers
174 views

Netstat -an in Command Line

In the below picture, as you see When I write netstat -an inside the command line I got this answer in the picture. The last line is different than others. Sometimes, I query netstat -an command ...
2
votes
1answer
593 views

OSX Yosemite - How to add route having two default gateways

I'm on OSX Yosemite and I have two different active connections... - WIFI (en0) - Tethering USB (en7) SnakeBook:~ root# netstat -nr Routing tables Internet: Destination Gateway ...
2
votes
0answers
69 views

How to monitor the unix socket statistics in OSX per-seconds

I can monitor a net-device in the OSX, like below $ netstat -I eth0 -b 1 1000 input (Total) output packets errs bytes packets errs bytes colls ...
0
votes
0answers
135 views

Ipaddress does not show up on netstat

Why would a ipaddress not show up in foreign address when I do netstat -atp tcp? Here is a list of my foreign address that are not showing up. How can I find out where they are going to? Proto ...
0
votes
1answer
304 views

Port 80 used by Microsoft-HTTPAPI/2.0

The port 80 is used by Microsoft-HTTPAPI/2.0 and cannot be stopped. I have tried many solutions, but no one worked. Here is what I have done. Also, here is what is on the page : Not Found HTTP Error ...
2
votes
1answer
350 views

Linux netstat shows ipv4 mapped ipv6 address

Even after disabling ipv6 on my linux machine and restarting network services, and not having an ipv6 address assigned to an interface, one of my daemon (cassandra to be specific)is using an ipv4 ...
1
vote
1answer
27 views

“awk” not working when using it with “watch”

In order to watch my IPv6 traffic totals I want to run this command: netstat -s -6 | grep -i octet | grep -vi cast | awk '{ print $2/(1024*1024*1024) }' combined with "watch -n1", so it gets run ...
11
votes
6answers
62k views

how to use netstat to show what process is listening on a port

I'm on an OS X mountain lion laptop and have a couple of Vagrant boxes on it. I'm trying to figure out which process is listening on port 8080. My variations produce like a hundred lines but none with ...
0
votes
0answers
218 views

Netstat VS Netstat (Gnu/Linux VS BSD/Mac OS X)

Why are there different versions of netstat for Gnu/Linux and BSD/Mac OS X? I'm trying to get the latter to respond & behave more like the former.
1
vote
0answers
235 views

OS X DNS queries failing with a custom tun interface

I have a slightly modified version of tun/tap for OS X 10.10.5 running. The interface is brought up by a small python script which reads from /dev/tun and then forwards all requests over an adhoc ...
0
votes
1answer
2k views

Cannot connect to port 3306 on a remote MySQL server using MySQL Workbench in Mac OS X

I want to access MySQL remotely: GRANT ALL ON *.* TO thufir@'192.168.0.16' IDENTIFIED BY 'hfdks4329vjkl'; When Workbench failed to connect, I took a look with ping and telnet: Brents-MacBook:~ ...
0
votes
0answers
35 views

How to get `netstat -tpn`-like output with `ip` utility

How (or is it possible) to list all open TCP(/UDP) ports using ip utility on Linux (preferably with their owner processes)? I want something like netstat -tpn.
0
votes
0answers
72 views

A port is supposedly being listened upon but lsof does not see it

I am unable to start the datanode on my mac because some process is bound to port 50020: $netstat -an | grep 50020 tcp4 0 0 10.246.244.94.50020 17.172.232.9.5223 ESTABLISHED ...
10
votes
4answers
59k views

How to kill a particular tcp connection in windows?

On Linux we can kill an Established TCP Connection using tcpkill command. For example, to drop all connection to/from a particular IP: tcpkill host ipaddr Or similary to kill all connection ...
0
votes
1answer
47 views

SVC Host service not visible in Svchost viewer

Some port required by my application was put in TIME_WAIT status by svchost which I found by running netstat. I used this application called Svchost Viewer to track the PID corresponding to the ...
0
votes
0answers
53 views

Weblogic server port not listing in netstat

I am able to access weblogic server from a remote system in hostname:7001/console at 7001 port (as configured in weblogic). But I couldn't find a 7001 port entry in either netstat or lsof output. ...
0
votes
1answer
190 views

netstat with --inet option does not display listening tcp por

Can someone please explain why the output of the command are different? user@geeko:~> netstat -ln | grep 9876 tcp 0 0 127.0.0.1:9876 :::* LISTEN and user@...
2
votes
2answers
222 views

Get *hostname* of a RDP client computer

This question: Get hostname of a RDP client computer, asked how an RDP server can identify a client (i.e., the host that is being used to login remotely), and got this answer: netstat -na | find "...
32
votes
15answers
76k views

How do I kill a process that is dead but listening?

I'm developing an app that listens on port 3000. Apparently there's an instance of it still listening to the port because whenever I start it, it can't create a listener (C#, TcpListener, but that's ...