I ran the below command in windows 10: C:>netstat -ano

and i get a bunch of ip addresses.

How do I know the number after represent what ? Active Connections

Proto Local Address Foreign Address State PID


Also, what does represent in below output?



Refer to my understanding.

  1. The number after the IP address is the port number. For example, if at the beginning is TCP, the number means a TCP port.

  2. For the meaning of TCP ESTABLISHED 2500:

    Local TCP port 49291 relying on IP has established a connection to the remote TCP port 443 relying on
    And the 2500 means the Process ID is 2500 (As usual, we can check the Task Manager to see what process/program is using this process)

Finally, for more information about netstat, we can refer to the following link.

| improve this answer | |
  • Thanks OOOO, is it possible to find out the remote TCP is coming from which URL and what country etc? – Karen Goh Apr 29 '19 at 3:39
  • 1
    As I search, you can refer to the link:whois365.com/en/ip/… – OOOO Apr 29 '19 at 3:51
  • it shows private or reserved address. So there is no way we could tell all about the ip address where it is coming from is it? – Karen Goh Apr 29 '19 at 3:54
  • 1
    The PTR of the IP is sin10s01-in-f4.1e100.net – OOOO Apr 29 '19 at 4:05

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.