Questions tagged [netstat]
Netstat (network statistic) is a tool, common to Windows, Unix and Linux, used to obtain information about network connections (outbound and inbound), routing tables, and a range of information on the use of statistics the network interface. Netstat.exe command line that shows all open ports for Transmission Control Protocol (TCP) and User Datagram Protocol (UDP).
211
questions
0
votes
1
answer
33
views
backdoor infection scanning (some PID not showing)
I am trying to scan the connections established on my Windows 10 PC.
I'm using the command (as admin) netstat -ano. It is working, and I am seeing some established connections.
But when I'm looking ...
- 15
3
votes
2
answers
600
views
How can I correctly check on what network interface SSH is listening on a Linux machine?
I am not a system engineer or a network expert (I am more a software developer) and I have the following problem that I have to solve.
I am working on an Oracle Linux machine (basically it should be ...
- 6,901
-2
votes
1
answer
69
views
How to find open port on specific IP address in Windows 10?
At work, we connected print-server to a printer via USB, to make a printer network-available.
Setting-up as network printer was successful, but at work, additionally we need to specify a port number.
...
- 133
0
votes
0
answers
58
views
Should I wait before turning on my vpn?
If you connect to a certain server without a VPN, disconnect, and immediately connect it with a VPN, you can be traced.
Lets say I'm browsing the internet without a VPN and using Browser A.
When I run ...
- 1
0
votes
0
answers
183
views
netstat shows ESTABLISHED connection between same ip:port pair
I am on Windows Server 2016 Standard. See netstat output below (IP replaced):
C:\Users\user>netstat -an|findstr "55559"
TCP 1.2.3.4:55559 1.2.3.4:55559 ESTABLISHED
What does ...
- 101
0
votes
0
answers
51
views
Simplify NETSTAT monitoring output
I'm monitoring suspicious incoming connections using
sudo watch -n 30 "netstat -antp"
which provides more information than I need, so based on the answer I found here,
I've tried to ...
1
vote
1
answer
340
views
How can the same TCP port show in netstat as BOUND and ESTABLISHED in Windows?
I'm investigating an issue of port exhaustion in Windows, and the output of netstat shows many ports both as BOUND and ESTABLISHED
...
TCP 10.0.1.9:64318 10.0.1.9:8400 ESTABLISHED ...
- 264
1
vote
1
answer
48
views
Is it normal to have a high ICMPv6 Neighbour Solicitation sent?
I have suspicion that my home network may be comprimised and used by malicious actors.
I'm a networking noob so I would like to know if having a Neighbour Solicitations sent >2000 is normal?
I got ...
- 113
0
votes
0
answers
29
views
How to see the percentage of ports being used by an application compared to the total number of ports available
Having some rare port exhaustion issues and was wondering if there is a way to see the number of ports being used by a single application. I would like to have it in a percentage-like manner but ...
0
votes
3
answers
137
views
List the IP addresses that my PC is connected to - in a readable format
I'm trying to search the IP addresses that my PC is connected to, but I don't recognize these & search shows nothing.
I'm looking into all my connections, so I ran netstat -a and I don't recognize ...
0
votes
0
answers
505
views
Why port is blocked (local windows network)
I have two windows computers at my house
10.0.0.15: main computer.
10.0.0.1: laptop
My laptop is running an application on port 6000 that I want to access from the main computer.
I have connection ...
- 137
0
votes
1
answer
516
views
Save a continues netstat to a text file with time stamp
I want to make a continuous netstat to a specific port to show the establishment with date and time.
the command I am using is the below:
netstat -na | find "5002", but it shows the current ...
- 1
0
votes
0
answers
218
views
Netstat -b shows open connections for an old (not used) project from totally unrelated apps
See screenshot below:
In netstat -b output I always see open connections to an old project I developed 2 years ago. They also show when I open new applications (you see totally unrelated apps ...
- 101
0
votes
0
answers
89
views
What is adclick remote address?
netstat -a returns the information below.
What is the "adclick" address? There is any benefit from disconnect it? How to shutdown that connection?
- 101
0
votes
1
answer
2k
views
How do i find out what the foreign addresses are in cmd and where they come from?
Ran netstat -a and I was curious as to what yx-in-f95:https on the foreign address section is and how to find out myself in the future.
James O'Day
1
vote
1
answer
480
views
Why doesn’t netstat display open websites?
I’m a beginner in networking and I’m checking the netstat command.
So I opened a couple websites such as en.wikipedia.org
Then I opened an admin CMD and typed netstat
I can’t see this connection ...
- 737
2
votes
0
answers
215
views
Force netstat to always return results in English language, irrespective of system language?
Is there a way to call netstat commands (e.g. netstat -an) but return the results in English irrespective of the system language?
Background: the reason I wish to find a way is because some software ...
- 573
1
vote
1
answer
684
views
windows, run net stat to txt daily with date/time in filename
first time post.
was unable to find similar solutions on this site or others. need a CMD batch file to run "netstat -an" output to a text file daily with a unique file name so the day before ...
- 11
0
votes
0
answers
395
views
After opening port 443 in windows firewall as inbound rule, I cannot see it when I run 'netstat -an'
As an inbound rule on Windows 10 firewall, I added port 443 as TCP connection allowing all types of connections. However, I cannot see it when I run 'netstat -an'. How can I get it so that I see my ...
2
votes
0
answers
102
views
Netstate and process that are not there?
8080 port is occupied so I can not start glass fish server on it , so I use netstate and find the PID of program whom use that port , but problem start here there is no process or service with this ...
1
vote
1
answer
266
views
Troubleshooting outbound internet traffic - Fedora Linux
Without any programs open except an empty terminal window and System Monitor, I'm seeing network traffic. Roughly every 1 second there's a small spike in outbound and a little inbound traffic. $ sudo ...
- 125
0
votes
1
answer
253
views
Meaning of Local TCP number after double colon when using netstat -a -b -n
Attempting to diagnose port/connection issues and ran into the following output. I know "::" means "any" (replaces consecutive 0's), but what does the 1 mean? It's on chrome, as ...
- 1
1
vote
1
answer
346
views
Increased traffic - Server probed by bots?
Since December 24 my server experiences increased resource consumption. Additionally the Nginx server seems to be unstable which causes several errors.
The CPU usage used to average at around 5%. But ...
0
votes
0
answers
540
views
java.exe opens up hundreds of ports on 127.0.0.1 on a windows 10 computer and listens to itself
After I ran netstat -ab with admin right on my win10 computer, which is not running anything "java" related on the desktop nor there is "java.exe" in taskmanager's "detailed ...
- 103
1
vote
1
answer
3k
views
How do I output a netstat command every 2 seconds to a text file
I am trying to make the following happen, but having a hard time getting it to work as expected.
Tried using the watch command, but the output is just a mess.
I found the following, but haven't been ...
- 13
2
votes
1
answer
8k
views
Reset Netstat statistics
Is there a method to clear the statistics of 'netstat -s' without rebooting the device?
I'm trying to determine the number of errors within a nondeterministic period of time.
- 43
2
votes
0
answers
553
views
What is the explanation of the network flags in MacOSX? [closed]
Good morning.
Could someone explain to me the meaning of the flags in the routing table?
For example if you check the output of netstat -nr you will have lines like this:
default 192.168.2....
- 133
1
vote
0
answers
97
views
Address/ports keep becoming stuck on ubuntu (server) - even after the process terminates
I'm having an issue on a headless Ubuntu 18.04 installation. Ports keep becoming "stuck" which is either preventing processes from terminating (even when sending a SIGKILL), or allowing the processes ...
- 111
0
votes
1
answer
575
views
How to find open ports using netstat?
When I do a netstat -tuln, I get the following output
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 127.0.0.1:25 0.0.0.0:* ...
- 101
10
votes
1
answer
3k
views
Port 9001 used by Microsoft-HTTPAPI/2.0
The port 9001 seems to be used by Microsoft-HTTPAPI/2.0. I get this from the browser doing a http://localhost:9001/
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-...
- 290
1
vote
1
answer
76
views
Incompatible command arguments for netstat?
The command netstat -ano 192.168.1.1 works, whereas adding the -p flag, i.e.netstat -anop 192.168.1.1just displays the command-line parameters with descriptions like if you'd just typed netstat ...
- 185
0
votes
0
answers
514
views
What TCP segment retransmission rate indicates something bad?
For a long time, I’ve suspected there’s a problem with my home network. (Basic AT&T gateway/router with residential fiber). I’m running Windows Performance Manager and monitoring the TCP segments ...
- 365
3
votes
1
answer
584
views
Why is the local address the same as the peer one?
A weird issue occurred while I was troubleshooting with ss, the local address is exactly same as the peer one. Same IP address is ok, but how to explain the same port?
- 61
0
votes
1
answer
541
views
Configure interface order in `netstat -rn` output
When I'm typing netstat -rn, I'm getting the following output:
===========================================================================
Interface list
33...........................myvpn.com
16......
- 103
2
votes
1
answer
4k
views
How to see all the TCP connections opened by Google Chrome browser on Mac?
I am currently browsing using the Google Chrome browser. I know that for every tab I open and type a URL in, a TCP connection is opened. I also know that a maximum of 6 concurrent TCP connections are ...
- 121
0
votes
0
answers
35
views
Roku works but is not apparently on our network?
We have two Roku devices in our house. Each is connected to a different TV's HDMI port and both work. They have unused RJ-11 ports, so I expect them to be on WiFi. But neither appears in the ...
- 715
0
votes
1
answer
2k
views
What does "netstat -n -o" mean?
When I type netstat -n -o, I get a lot of foreign addresses and my Internet Provider Customer Service is telling me that it means that I got spyware on my computer.
What that command really means?
1
vote
1
answer
3k
views
netstat: illegal option -- o when using netstat -ano in MacOS
I want to list all PID with its state and foreign address.
But I got this error:
netstat: illegal option -- o
So how to do that in MacOS? It works on windows
- 113
1
vote
1
answer
388
views
Command Prompt netstat response
I was trying to check if any VNC is turned on so I tried
netstat -an | find "ESTABLISHED" | find ":5900"
and
netstat -an | find "ESTABLISHED" | find ":5800"
I got some feedback
TCP 127.0.0.1:...
- 13
1
vote
1
answer
107
views
Why only part of ports on my machine can be reached from external ip?
I'm trying to achieve my remote service with port 5601. But unfortunately i can't open the website.
Here is something i tried to find out why it's not working:
I logged in remote server and tried "...
- 13
1
vote
1
answer
3k
views
Kali-Linux Netstat command not showing ports
I've been using the netstat command in a remote desktop running kali and not getting any results.
this is all i get after using netstat
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q ...
0
votes
1
answer
2k
views
Understanding netstat output
Below is an output from a netstat command:
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 0.0.0.0:5040 ...
- 117
0
votes
1
answer
509
views
not bound port listening
Here is what netstat shows:
Proto Recv-Q Send-Q Local Address Foreign Address State User Inode PID/Program name
tcp 0 0 127.0.0.1:631 0....
- 5
2
votes
1
answer
1k
views
Suggest me to understand why my windows 10 found connected to that many hosts. checked with netstat -fb
I am using windows 10 laptop, and when I executed netstat -bf, no exe or browser was running, but few windows system services may be running
I am not able to understand why wpnservice & ...
- 123
1
vote
1
answer
807
views
netstat -r output, internet vs internet6, different gateway formats
What's the difference between internet and internet6 routes? I'm assuming internet6 stands for IPv6?
netstat -r
Internet:
Destination Gateway Flags Refs Use Netif ...
- 25
2
votes
1
answer
18k
views
Windows equivalent to nmap
This answer suggests netstat as an equivalent to nmap and also states that nmap for windows does not work.
But I use nmap for an specific purpose and that is to see if a port of a network is open or ...
- 1,424
1
vote
0
answers
11k
views
Netstat -ano. What does this mean..?
Getting an output that shows a specific process or group of processes (listed as PIDs) in netstat -ano.
The PIDs seem to be connecting to multiple 'Foreign Address' IPs, or perhaps trying to spam ...
- 81
0
votes
0
answers
3k
views
netstat Foreign Address shows my hostname, TCP sockets refuse connections
I am attempting to establish a TCP connection to a Windows machine running some third party software, unfortunately, I can not make the connection succeed.
Running:
netstat -an
Shows my service is ...
- 2,019
1
vote
0
answers
409
views
How to find a process that is using a port if it is not displayed even in netstat?
I am using a software development IDE (Intellij) that is using local machine port 5005 for Java program debugging. In some occasions it reports that it cannot connect because the port is being used or ...
- 1,531
1
vote
1
answer
1k
views
Get connection speed of a program with netstat
I use netstat -natpe to view the connections and program names. While wget is fetching data, the RX column is zero
naderan@student-virtual-machine:~$ netstat -natpe
(Not all processes could be ...
- 1,185