Netstat (network statistic) is a tool, common to Windows, Unix and Linux, used to obtain information about network connections (outbound and inbound), routing tables, and a range of information on the use of statistics the network interface. Netstat.exe command line that shows all open ports for ...

learn more… | top users | synonyms

0
votes
0answers
12 views

How to get `netstat -tpn`-like output with `ip` utility

How (or is it possible) to list all open TCP(/UDP) ports using ip utility on Linux (preferably with their owner processes)? I want something like netstat -tpn.
0
votes
0answers
12 views

A port is supposedly being listened upon but lsof does not see it

I am unable to start the datanode on my mac because some process is bound to port 50020: $netstat -an | grep 50020 tcp4 0 0 10.246.244.94.50020 17.172.232.9.5223 ESTABLISHED ...
10
votes
4answers
44k views

How to kill a particular tcp connection in windows?

On Linux we can kill an Established TCP Connection using tcpkill command. For example, to drop all connection to/from a particular IP: tcpkill host ipaddr Or similary to kill all connection ...
0
votes
1answer
16 views

SVC Host service not visible in Svchost viewer

Some port required by my application was put in TIME_WAIT status by svchost which I found by running netstat. I used this application called Svchost Viewer to track the PID corresponding to the ...
0
votes
0answers
6 views

Weblogic server port not listing in netstat

I am able to access weblogic server from a remote system in hostname:7001/console at 7001 port (as configured in weblogic). But I couldn't find a 7001 port entry in either netstat or lsof output. ...
0
votes
1answer
24 views

netstat with --inet option does not display listening tcp por

Can someone please explain why the output of the command are different? user@geeko:~> netstat -ln | grep 9876 tcp 0 0 127.0.0.1:9876 :::* LISTEN and ...
2
votes
2answers
71 views

Get *hostname* of a RDP client computer

This question: Get hostname of a RDP client computer, asked how an RDP server can identify a client (i.e., the host that is being used to login remotely), and got this answer: netstat -na | find ...
29
votes
15answers
61k views

How do I kill a process that is dead but listening?

I'm developing an app that listens on port 3000. Apparently there's an instance of it still listening to the port because whenever I start it, it can't create a listener (C#, TcpListener, but that's ...
1
vote
0answers
23 views

Per-process network usage on OSX?

I want to periodically poll for per-process network usage. Is there a way to do this efficiently in OSX like netstat -p on Linux? I know there's lsof -i -Tqsf but it doesn't seem to show bytes ...
1
vote
3answers
1k views

Kill UDP port that has no process?

My VPN client sometimes can't bind to the UDP port (500) it uses. It seems to leave behind a "bind" to port 500 on a previous run, even though it has quit. The port is reported as "already in ...
0
votes
1answer
50 views

Netstat returns strange looking foreign address

I am trying to understand what this foreign address means in a netstat listing: 195.sub-174-227-0.myv When I run netstat, some foreign address don't look like normal IP addresses. Are these IPv6 ...
8
votes
5answers
38k views

how to use netstat to show what process is listening on a port

I'm on an OS X mountain lion laptop and have a couple of Vagrant boxes on it. I'm trying to figure out which process is listening on port 8080. My variations produce like a hundred lines but none with ...
0
votes
0answers
44 views

Tcpview and netstat are not showing any tcp connections

I know I currently have tcp connections open, but neither tcpview, or netstat can show them. Tcpview show a blank page and netstat returns an empty list. Netstat seems to handle udp connections fine. ...
0
votes
0answers
78 views

Lots of weird connections on my computer on various different ports

i have all these weird connections on my computer and i'm wondering if i should be worried? Could anyone explain where all these connections come from? Proto Recv-Q Send-Q Local Address ...
1
vote
0answers
37 views

netstat -o timer value “probe”

A bit of background on the scenario. I have a distributed application running on RH6.5 that uses JMS (OpenMQ 4.5.2) to send messages between hosts. One host (Host A) receives information from network ...
5
votes
3answers
6k views

How to interpret the output of netstat -o / netstat --timers

netstat -o includes some timer information in the output but I haven't found an explanation of the output in the Timer column anywhere. Can anybody explain this or point to an explanation? This ist ...
1
vote
0answers
37 views

How do I deal with processes which continuously open/close ports and increasingly consume memory?

According to file.net, nvtray.exe is some process for or from my video card. When I look at the Netstat part of XAMPP, it shows nvtray.exe continuously opening and closing ports, increment the port ...
10
votes
5answers
4k views

What is ::: in the Local Address of netstat output?

This is the output of netstat -tulpn that I get: tcp 0 0 127.0.0.1:2208 0.0.0.0:* LISTEN 2055/hpiod tcp 0 0 127.0.0.1:631 ...
0
votes
1answer
135 views

What exactly does this netstat output mean?

Having run netstat /b on my local machine, I am having trouble interpreting this output. To my knowledge I have only one machine on my network and it's not called fish. Active Connections Proto ...
0
votes
1answer
57 views

OS X - Static routes / non-standard default gateway for endpoints on *local subnet*

My question is: How can I reliably set up a static route in OS X, for 2 endpoints to pass via a gateway, where all machines are on the same subnet? I provide the context below: For testing ...
1
vote
3answers
26k views

Can I tell from “netstat” if someone is snooping my computer?

I have many questions. However, to begin in the easiest and shortest manner. I am trying to figure out why when I type cmd prompt netstat -a I get a plethora of IP addresses and links that I am almost ...
1
vote
0answers
194 views

OSX Yosemite - How to add route having two default gateways

I'm on OSX Yosemite and I have two different active connections... - WIFI (en0) - Tethering USB (en7) SnakeBook:~ root# netstat -nr Routing tables Internet: Destination Gateway ...
0
votes
0answers
166 views

What is port 1001 used by NT Kernel & System on my Windows 7?

Sometimes i make ssh tunnel which listen as sock proxy on port 1001. But lately i can't bind to this port. Apparently this port already occupied. I can bind to any port for my ssh tunnel. But I'm ...
0
votes
1answer
512 views

Cannot connect to port 3306 on a remote MySQL server using MySQL Workbench in Mac OS X

I want to access MySQL remotely: GRANT ALL ON *.* TO thufir@'192.168.0.16' IDENTIFIED BY 'hfdks4329vjkl'; When Workbench failed to connect, I took a look with ping and telnet: Brents-MacBook:~ ...
0
votes
2answers
38 views

Windows netstat reports an “amnesia:2554” connection: what the hell is “vcnet-link-v10”?

Running netstat in Windows reports this line: TCP 192.168.1.161:59065 amnesia:2554 TIME_WAIT 192.168.1.161 it's me, but we have no “amnesia” host on the network. Looking for info ...
0
votes
0answers
176 views

How to make netstat on Linux only show OUTBOUND tcp connetions?

My Ubuntu server is infected and there is a process making a bunch of HTTP requests to a bunch of websites. I have added the following to my firewall (UFW): sudo ufw deny out proto tcp to any port ...
0
votes
0answers
36 views

Established connection on VPS not appearing in tcpdump

I'm running the kippo honeypot on port 22 with my actual ssh on port 2999. netstat Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 ...
1
vote
3answers
187 views

Some program occupy port 80. What is it?

I am trying to run netstat and this is what I got Proto Local Address Foreign Address State TCP 127.0.0.1:5550 TOSHIBA-PC:49319 ESTABLISHED TCP ...
1
vote
1answer
42 views

netstat showing multiple responses for single listening process

Why does netstat -lntp show multiple responses as 0.0.0.0:22 & :::22 for a single sshd process? Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program ...
2
votes
1answer
2k views

Why does explorer.exe has an established connection to a microsoft server?

This seems a bit odd. Using netstat -a -b -n I've found the following: TCP 192.168.1.X:1150 157.56.124.76:443 ESTABLISHED [Explorer.EXE] It turns out that the ip 157.56.124.76 which resolves to ...
1
vote
2answers
3k views

Getting system lacked sufficient buffer space or because a queue was full

My ASP.NET and SQL Server 2012 application is running on Windows Server 2008 R2. Suddenly, my internet on server stopped working and my application start throwing, An operation on a socket could not ...
1
vote
1answer
205 views

How can I connect to MongoDB on my Mac OSX from a process on a Vagrant/Virtualbox machine?

I can't use localhost because from my virtual machine's perspective localhost is the virtual machine itself and not the underlying host that it is running on. How can I connect to the host machine ...
0
votes
1answer
162 views

What is the timeframe used, for TCPBacklogDrop value calculation in netstat [closed]

I'm interested in the value TCPBacklogDrop of the command netstat -s on linux. But I don't know which timeframe is considered, when calculating it.
0
votes
1answer
83 views

How to use Continuously (-c) with grep on netstat?

How can I use netstat -c option with grep without repeating the info? Example: sudo netstat -tapc (works fine) I want to do the same but only for the http lines: sudo netstat -tapc | grep http ...
1
vote
1answer
2k views

What does netstat -r on OSX tell you about gateways?

I noticed the route table has a lot of entries I do not understand. The route tabel is: Internet: Destination Gateway Flags Refs Use Netif Expire default ...
0
votes
0answers
28 views

View IP connections on Windows originating from VM or Connection Sharing (like netstat-nat)

IP Connections from Windows Internet Connection Sharing (ICS) or Virtual Machine bridged connections do not show up in tools like sysInternals tcpview/procexp, although traffic can be seen (by ...
1
vote
1answer
468 views

What's the netstat command to get the process name and only for a specific port?

I'm using netstat on Windows 7, I would like to get only the process which are using the port 80 and to get also the name of the process. Not only the PID. I've found this solution to add the process ...
5
votes
1answer
8k views

How does Mac OSX prioritize network interfaces when routing?

To give a concrete example, how does OSX choose which of these default entries from netstat -nr to route to? Destination Gateway Flags Refs Use Netif Expire 0/1 ...
1
vote
1answer
88 views

What is this foreign address called cartfill in windows netstat

This is the result of netstat in my Winodws 8 CMD C:\Windows\System32>netstat Active Connections Proto Local Address Foreign Address State TCP 127.0.0.1:2311 ...
1
vote
1answer
32 views

Process port-protocol form PID

If I have process ID and I want to know the port and Protocol of this process is there any command in netstat or other help me?
0
votes
1answer
267 views

How do I clear command prompt before each netstat refresh?

How do I clear the command prompt screen before printing out netstat information when using a refresh interval? I've been using netstat -anp TCP | Find "5000" to view information for a specific ...
0
votes
1answer
8k views

Redirect the output of netstat to a file?

I'm trying to redirect the output of netstat to a file and it doesn't work. Initially I tried: runas /noprofile /user:xxxxx\administrator "netstat -a -b > C:\temp\file.txt" Then I read ...
0
votes
3answers
3k views

How to determine why port 443 is already in use?

I'm running Apache 2.4.10 on a Windows 7 machine and am trying to add SSL connections. Port 80 connections work fine, and I'm trying to add port 443. When the httpd.conf gets Listen 443 added it ...
0
votes
1answer
43 views

Analysing what network connections are made by a service in Linux

Is it possible to pipe an executable script through a utility that shows what network connections the script is making [in real time]? I was thinking I might be able to use netstat and connect to that ...
1
vote
1answer
337 views

Already dead process is continuing to eat net traffic

I'm using Windows 7, Ruby 1.9.2, SciTE, Outpost Pro 2009 and NetBalancer. Wrinting Ruby programs in SciTE I press Ctrl+Break to kill them. This way is designed to be easy, quick and reliable. But now ...
3
votes
2answers
1k views

Continuously check netstat output for a particular program

I have a android emulator running on port 5554. I want to continuously watch the netstat output concerning emulator stuff. Right now I have to manually execute this command every time sudo netstat ...
0
votes
0answers
178 views

netstat returns a huge amount of connections

I am having connection problem with my internet connection, it drops really frequently and it is almost impossible to connect to my phone for debugging apps using both wired and wireless connections. ...
1
vote
2answers
320 views

Batch Capture incoming Netstat IPs as variable

I'm trying to figure out if there is a way I can capture (and if possible, log) the ip addresses displayed from 'netstat' command. I'm trying to make a script that waits for a ping from a specific ...
0
votes
2answers
171 views

weird netstat result what does this mean why is my computer connected to itself

netstat shows following results: ACTIVE CONNECTNONS PROTO LOCAL ADDRES FOREIGN ADDRESS TCP 127.0.0.1:54964 MYCOMPUTER:54965 TCP 127.0.0.1:54965 ...
1
vote
1answer
188 views

Windows 8 seems to be remote controlled?

Recently I have detected that my mouse pointer moves by itself sometimes and even clicks/open random programs/files. I have no idea if this is hardware related since I am using my laptop connected to ...