0

I ran the below command in windows 10: C:>netstat -ano

and i get a bunch of ip addresses.

How do I know the number after 127.0.0.1:49274 represent what ? Active Connections

Proto Local Address Foreign Address State PID

TCP 127.0.0.1:5432 127.0.0.1:49274 ESTABLISHED 4940

Also, what does 192.168.1.3:49291 represent in below output?

TCP 192.168.1.3:49291 216.58.221.68:443 ESTABLISHED 2500

0

Refer to my understanding.

  1. The number after the IP address is the port number. For example, if at the beginning is TCP, the number means a TCP port.

  2. For the meaning of TCP 192.168.1.3:49291 216.58.221.68:443 ESTABLISHED 2500:

    Local TCP port 49291 relying on IP 192.168.1.3 has established a connection to the remote TCP port 443 relying on 216.58.221.68
    And the 2500 means the Process ID is 2500 (As usual, we can check the Task Manager to see what process/program is using this process)

Finally, for more information about netstat, we can refer to the following link.

| improve this answer | |
  • Thanks OOOO, is it possible to find out the remote TCP is coming from which URL and what country etc? – Karen Goh Apr 29 '19 at 3:39
  • 1
    As I search, you can refer to the link:whois365.com/en/ip/… – OOOO Apr 29 '19 at 3:51
  • it shows private or reserved address. So there is no way we could tell all about the ip address where it is coming from is it? – Karen Goh Apr 29 '19 at 3:54
  • 1
    The PTR of the IP is sin10s01-in-f4.1e100.net – OOOO Apr 29 '19 at 4:05

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.