Questions tagged [netstat]

Netstat (network statistic) is a tool, common to Windows, Unix and Linux, used to obtain information about network connections (outbound and inbound), routing tables, and a range of information on the use of statistics the network interface. Netstat.exe command line that shows all open ports for Transmission Control Protocol (TCP) and User Datagram Protocol (UDP).

Filter by
Sorted by
Tagged with
1
vote
0answers
12 views

Address/ports keep becoming stuck on ubuntu (server) - even after the process terminates

I'm having an issue on a headless Ubuntu 18.04 installation. Ports keep becoming "stuck" which is either preventing processes from terminating (even when sending a SIGKILL), or allowing the processes ...
0
votes
1answer
25 views

How to find open ports using netstat?

When I do a netstat -tuln, I get the following output Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 127.0.0.1:25 0.0.0.0:* ...
4
votes
1answer
302 views

Port 9001 used by Microsoft-HTTPAPI/2.0

The port 9001 seems to be used by Microsoft-HTTPAPI/2.0. I get this from the browser doing a http://localhost:9001/ HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-...
0
votes
1answer
20 views

Incompatible command arguments for netstat?

The command netstat -ano 192.168.1.1 works, whereas adding the -p flag, i.e.netstat -anop 192.168.1.1just displays the command-line parameters with descriptions like if you'd just typed netstat ...
0
votes
0answers
42 views

What TCP segment retransmission rate indicates something bad?

For a long time, I’ve suspected there’s a problem with my home network. (Basic AT&T gateway/router with residential fiber). I’m running Windows Performance Manager and monitoring the TCP segments ...
0
votes
0answers
31 views

Can you follow TCP Connections?

netstat and tcpvcon (sysinternals) can show you TCP connections as they are right now. Is it possible to "follow" TCP connections i.e have them show on the screen the moment they are established or ...
2
votes
1answer
116 views

Why is the local address the same as the peer one?

A weird issue occurred while I was troubleshooting with ss, the local address is exactly same as the peer one. Same IP address is ok, but how to explain the same port?
0
votes
1answer
85 views

Configure interface order in `netstat -rn` output

When I'm typing netstat -rn, I'm getting the following output: =========================================================================== Interface list 33...........................myvpn.com 16......
2
votes
0answers
668 views

How to see all the TCP connections opened by Google Chrome browser on Mac?

I am currently browsing using the Google Chrome browser. I know that for every tab I open and type a URL in, a TCP connection is opened. I also know that a maximum of 6 concurrent TCP connections are ...
0
votes
0answers
27 views

Roku works but is not apparently on our network?

We have two Roku devices in our house. Each is connected to a different TV's HDMI port and both work. They have unused RJ-11 ports, so I expect them to be on WiFi. But neither appears in the ...
0
votes
0answers
17 views

Why can't sendmail recognise the machine it is using?

I find this in the mail log when I try to send email: localhost sm-mta[28354]: gethostbyaddr(192.168.1.3) failed: 1 netstat -natp gives this one reference to 192.168.1.3: Active Internet ...
0
votes
1answer
523 views

What does “netstat -n -o” mean?

When I type netstat -n -o, I get a lot of foreign addresses and my Internet Provider Customer Service is telling me that it means that I got spyware on my computer. What that command really means?
0
votes
1answer
492 views

netstat: illegal option — o when using netstat -ano in MacOS

I want to list all PID with its state and foreign address. But I got this error: netstat: illegal option -- o So how to do that in MacOS? It works on windows
1
vote
1answer
96 views

Command Prompt netstat response

I was trying to check if any VNC is turned on so I tried netstat -an | find "ESTABLISHED" | find ":5900" and netstat -an | find "ESTABLISHED" | find ":5800" I got some feedback TCP 127.0.0.1:...
1
vote
1answer
45 views

Why only part of ports on my machine can be reached from external ip?

I'm trying to achieve my remote service with port 5601. But unfortunately i can't open the website. Here is something i tried to find out why it's not working: I logged in remote server and tried "...
0
votes
1answer
809 views

Kali-Linux Netstat command not showing ports

I've been using the netstat command in a remote desktop running kali and not getting any results. this is all i get after using netstat Active Internet connections (w/o servers) Proto Recv-Q Send-Q ...
0
votes
1answer
847 views

Understanding netstat output

Below is an output from a netstat command: TCP 0.0.0.0:135 0.0.0.0:0 LISTENING TCP 0.0.0.0:445 0.0.0.0:0 LISTENING TCP 0.0.0.0:5040 ...
0
votes
0answers
1k views

How to have a value different from 0 in netstat's Send-Q column for a socket in the LISTEN state?

I am currently trying to solve a Capture The Flag challenge that involves trying to escalate privileges by taking advantage of an exploit in a bash script. The script first does the following to get ...
0
votes
1answer
358 views

not bound port listening

Here is what netstat shows: Proto Recv-Q Send-Q Local Address Foreign Address State User Inode PID/Program name tcp 0 0 127.0.0.1:631 0....
2
votes
1answer
256 views

Suggest me to understand why my windows 10 found connected to that many hosts. checked with netstat -fb

I am using windows 10 laptop, and when I executed netstat -bf, no exe or browser was running, but few windows system services may be running I am not able to understand why wpnservice & ...
1
vote
1answer
412 views

netstat -r output, internet vs internet6, different gateway formats

What's the difference between internet and internet6 routes? I'm assuming internet6 stands for IPv6? netstat -r Internet: Destination Gateway Flags Refs Use Netif ...
0
votes
1answer
7k views

Windows equivalent to nmap

This answer suggests netstat as an equivalent to nmap and also states that nmap for windows does not work. But I use nmap for an specific purpose and that is to see if a port of a network is open or ...
1
vote
0answers
5k views

Netstat -ano. What does this mean..?

Getting an output that shows a specific process or group of processes (listed as PIDs) in netstat -ano. The PIDs seem to be connecting to multiple 'Foreign Address' IPs, or perhaps trying to spam ...
0
votes
0answers
1k views

netstat Foreign Address shows my hostname, TCP sockets refuse connections

I am attempting to establish a TCP connection to a Windows machine running some third party software, unfortunately, I can not make the connection succeed. Running: netstat -an Shows my service is ...
1
vote
0answers
133 views

How to find a process that is using a port if it is not displayed even in netstat?

I am using a software development IDE (Intellij) that is using local machine port 5005 for Java program debugging. In some occasions it reports that it cannot connect because the port is being used or ...
1
vote
1answer
152 views

Get connection speed of a program with netstat

I use netstat -natpe to view the connections and program names. While wget is fetching data, the RX column is zero naderan@student-virtual-machine:~$ netstat -natpe (Not all processes could be ...
0
votes
2answers
299 views

What is happening at each row of this netstat-nr command?

I have a problem that I do not understand. How do I evaluate what is happening in each row and which row matches a destination address of 183.77.42.58 and why? What is happening at each row of this ...
0
votes
1answer
2k views

Windows CMD netstat output in one line

Netstat output breaks line when -aonb options are used. I can't use FIND to filter the output in one line. Increasing Screen buffer width and Window width doesn't help. The command still breaks into ...
0
votes
0answers
1k views

what is a “normal” netstat -a -b result supposed to look like on a fresh windows 10 installation?

I just reinstalled windows 10 by choosing "Reset My PC" in the settings and telling it to erase the disk. When it finished few things run. Edge crashes. Settings won't come up. File Explorer works. ...
1
vote
1answer
5k views

What application uses local address “127.0.0.1” and foreign address “screenshots”

I have discovered in the output of netstat -a over 250 entries like this: TCP 127.0.0.1:49671 screenshots:49670 ESTABLISHED TCP 127.0.0.1:49670 screenshots:49671 ...
-4
votes
1answer
555 views

Why an IP address owned by Amazon would have an active connection to my Windows PC with an svchost.exe process?

Did a netstat -fb. One of the lines was: [svchost.exe] TCP 192.168.1.113:52683 server-13-32-253-84.sea19.r.cloudfront.net:https CLOSE_WAIT Server is registered to Amazon, a little confused. ...
1
vote
0answers
65 views

Figure out IP address of external device

I have an external device (a PCB crate) of which I do not know the IP address. Connected to this device is a PCB that broadcasts its MAC address. Ultimately, I want to know this MAC address. I can ...
0
votes
1answer
463 views

How do I open port 8100 on VMware?

How do I access port 8100 from a VM? I want to access port 8100 on a linux VM. I am running lubuntu. I have tried multiple questions already and none of them seem to work: Connection refused on ...
1
vote
1answer
461 views

sudo netstat -antp not showing PID

i am testing stuff with sockets and i encountered that strange case : i coded i very simple tcp server in c, i made it block after accept(), just to see what happen when accepting multiple connection ...
1
vote
1answer
456 views

Listen for incoming request on port on Linux, then run command

I am after as lightweight as possible solution to listen on a port for a specific request, then run a command should the port be hit and the correct request be recedved. Eg. Send a request to 192.168....
-2
votes
1answer
1k views

Amazon (AWS) zagent is it a malware / remote? [closed]

i ran netstat command and found some amazon tcp connections that i don't know zagent1644.h-cdn.com 142.44.212.29 zagent1642.h-cdn.com 145.239.8.193 zagent859.h-cdn.com 217.182.138.56 zagent1678.h-...
1
vote
1answer
430 views

UDP port appears in netstat but not in lsof?

After using Mosh, I noticed that UDP ports held by mosh-server were still in use after all processes exited. Running netstat -ln, it shows that these ports are in use: Active Internet connections ...
0
votes
0answers
28 views

How to manually send download request to an application

I'm downloading a file from telegram desktop app. I want to see if it's possible that I can find a download link and use a tool like lftp to download the file myself with multiple tcp connections if ...
0
votes
2answers
415 views

detailed understanding of netstat -an output on linux

I tried to look for a good doc on netstat especially for the options -an but cannot find anything detailed enough. example 1: tcp 0 126 android.home:58797 par10s34-in-x0e.1e100.net:https ESTABLISHED ...
9
votes
1answer
7k views

`netstat` command in WSL return empty list

I install python and start python -m SimpleHTTPServer in windows WSL. But the command netstat -an return an empty list. And of course i can't visit the url http://127.0.0.1:8000 in windows browser. ...
2
votes
1answer
2k views

How to interpret outputs from netstat -sp TCP?

I really think someone is accessing my pc illegally and I've read it on many sites that netstat can help me how to trace it. I'm really not into networking so it's hard for me to interpret these ...
2
votes
1answer
44 views

How to log all ports once opened by a process/app in Linux for short time?

I have an app that makes some kind of upd ping to the network and for some short time listens for some port in order to receive some feedback during some timeout. It is short enough to observe if with ...
5
votes
2answers
23k views

Netstat listening programs on ports alternative on Debian 9

What is the alternative to command netstat -ntpl on Debian 9? I am using this command to check what program is listening on port. Alternatively with parameters -ntupl (with u) including UDP.
2
votes
1answer
2k views

How to find attached processes via unix domain socket?

I used netstat to acquire RefCnt column. And there are 2 attached processes via /var/run/mysqld/mysqld.sock. How to find their PIDs? # netstat -a -p -A unix Proto RefCnt Flags Type State ...
4
votes
3answers
11k views

Powershell one-liner to show process on same line as port using netstat issue

First I just want to make sure user Erik Bitemo gets credit for the original code I'm using here. The output is what I'm looking for with one exception: One of the ports disappears and "System System5"...
1
vote
1answer
871 views

How to find out the PID which generates traffics to port 9229 in MacBook

There are unknown traffics to port 9229 in my MacBook. $ sudo tcpdump -i any -n port 9229 ...... 12:10:39.176502 IP6 ::1.62261 > ::1.9229: Flags [S], seq 638850191, win 65535, options [mss 16324,...
5
votes
1answer
1k views

Close ssh tunnel without root and without killing all other ssh connections

I have an ssh tunnel listening on a local port, say 8888, opened from a remote machine with ssh -R 8888:localhost:80 myuser@myhost. I need to write a script for "myuser" on "myhost" that will close ...
0
votes
0answers
3k views

netstat shows too many established connections in windows

I have an Internet service by ADSL, the problem is that my download speed has decreased dramatically in the order of 60 or 70% down. One friend recommend me to put netstat -an on a terminal window and ...
1
vote
2answers
15k views

Strange entries in Netstat output

Out of curiosity, I ran Netstat on my Windows PC, and I found some strange entries like: xx-fbcdn-shv-01-amt2:https edge-star-mini-shv-01-frt3:https mil04s03-in-f10:https xx-fbcdn-shv-01-amt2:https ...
0
votes
1answer
668 views

Netstat showing open established connection but I can't end the process

So I've been curious as to know why I have these open established ipv6 connections. I typed in the command prompt Netstat -ano to get the connections, PID numbers, and port numbers. The connections ...