0

I ran the below command in windows 10: C:>netstat -ano

and i get a bunch of ip addresses.

How do I know the number after 127.0.0.1:49274 represent what ? Active Connections

Proto Local Address Foreign Address State PID

TCP 127.0.0.1:5432 127.0.0.1:49274 ESTABLISHED 4940

Also, what does 192.168.1.3:49291 represent in below output?

TCP 192.168.1.3:49291 216.58.221.68:443 ESTABLISHED 2500

1 Answer 1

0

Refer to my understanding.

  1. The number after the IP address is the port number. For example, if at the beginning is TCP, the number means a TCP port.

  2. For the meaning of TCP 192.168.1.3:49291 216.58.221.68:443 ESTABLISHED 2500:

    Local TCP port 49291 relying on IP 192.168.1.3 has established a connection to the remote TCP port 443 relying on 216.58.221.68
    And the 2500 means the Process ID is 2500 (As usual, we can check the Task Manager to see what process/program is using this process)

Finally, for more information about netstat, we can refer to the following link.

4
  • Thanks OOOO, is it possible to find out the remote TCP is coming from which URL and what country etc?
    – Karen Goh
    Apr 29, 2019 at 3:39
  • 1
    As I search, you can refer to the link:whois365.com/en/ip/…
    – OOOO
    Apr 29, 2019 at 3:51
  • it shows private or reserved address. So there is no way we could tell all about the ip address where it is coming from is it?
    – Karen Goh
    Apr 29, 2019 at 3:54
  • 1
    The PTR of the IP is sin10s01-in-f4.1e100.net
    – OOOO
    Apr 29, 2019 at 4:05

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .