Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [netstat]

Netstat (network statistic) is a tool, common to Windows, Unix and Linux, used to obtain information about network connections (outbound and inbound), routing tables, and a range of information on the use of statistics the network interface. Netstat.exe command line that shows all open ports for Transmission Control Protocol (TCP) and User Datagram Protocol (UDP).

0
votes
1answer
62 views

not bound port listening

Here is what netstat shows: Proto Recv-Q Send-Q Local Address Foreign Address State User Inode PID/Program name tcp 0 0 127.0.0.1:631 0....
-1
votes
0answers
30 views

Find out which process steadily creates new outgoing ssh connections

I'm trying to figure out which process is flooding the system with outgoing ssh connections. I know that netstat can be used for this, but it doesn't show me the pid of such a connection. Also, the ...
-1
votes
0answers
29 views

Changing the default route on MAC

I have just set up one more vpn on my macos which means there are two vpn settings on my mac now which are ipsec0 and ipsec1 respectively. I would like to prioritise the ipsec1 over the en0 so that ...
2
votes
1answer
73 views

Suggest me to understand why my windows 10 found connected to that many hosts. checked with netstat -fb

I am using windows 10 laptop, and when I executed netstat -bf, no exe or browser was running, but few windows system services may be running I am not able to understand why wpnservice & ...
0
votes
1answer
87 views

netstat -r output, internet vs internet6, different gateway formats

What's the difference between internet and internet6 routes? I'm assuming internet6 stands for IPv6? netstat -r Internet: Destination Gateway Flags Refs Use Netif ...
0
votes
1answer
976 views

Windows equivalent to nmap

This answer suggests netstat as an equivalent to nmap and also states that nmap for windows does not work. But I use nmap for an specific purpose and that is to see if a port of a network is open or ...
0
votes
0answers
1k views

Netstat -ano. What does this mean..?

Getting an output that shows a specific process or group of processes (listed as PIDs) in netstat -ano. The PIDs seem to be connecting to multiple 'Foreign Address' IPs, or perhaps trying to spam ...
0
votes
0answers
429 views

netstat Foreign Address shows my hostname, TCP sockets refuse connections

I am attempting to establish a TCP connection to a Windows machine running some third party software, unfortunately, I can not make the connection succeed. Running: netstat -an Shows my service is ...
1
vote
0answers
65 views

How to find a process that is using a port if it is not displayed even in netstat?

I am using a software development IDE (Intellij) that is using local machine port 5005 for Java program debugging. In some occasions it reports that it cannot connect because the port is being used or ...
1
vote
1answer
41 views

Get connection speed of a program with netstat

I use netstat -natpe to view the connections and program names. While wget is fetching data, the RX column is zero naderan@student-virtual-machine:~$ netstat -natpe (Not all processes could be ...
0
votes
2answers
90 views

What is happening at each row of this netstat-nr command?

I have a problem that I do not understand. How do I evaluate what is happening in each row and which row matches a destination address of 183.77.42.58 and why? What is happening at each row of this ...
-1
votes
1answer
1k views

Windows CMD netstat output in one line

Netstat output breaks line when -aonb options are used. I can't use FIND to filter the output in one line. Increasing Screen buffer width and Window width doesn't help. The command still breaks into ...
0
votes
0answers
321 views

what is a “normal” netstat -a -b result supposed to look like on a fresh windows 10 installation?

I just reinstalled windows 10 by choosing "Reset My PC" in the settings and telling it to erase the disk. When it finished few things run. Edge crashes. Settings won't come up. File Explorer works. ...
0
votes
0answers
110 views

On Mac OSX, when using netstat -i, why am I missing a link interface?

My netstat -i command prints like this Name Mtu Network Address Ipkts Ierrs Opkts Oerrs Coll lo0 16384 <Link#1> 124573 0 124573 0 ...
0
votes
1answer
1k views

What application uses local address “127.0.0.1” and foreign address “screenshots”

I have discovered in the output of netstat -a over 250 entries like this: TCP 127.0.0.1:49671 screenshots:49670 ESTABLISHED TCP 127.0.0.1:49670 screenshots:49671 ...
-4
votes
1answer
172 views

Why an IP address owned by Amazon would have an active connection to my Windows PC with an svchost.exe process?

Did a netstat -fb. One of the lines was: [svchost.exe] TCP 192.168.1.113:52683 server-13-32-253-84.sea19.r.cloudfront.net:https CLOSE_WAIT Server is registered to Amazon, a little confused. ...
1
vote
0answers
48 views

Figure out IP address of external device

I have an external device (a PCB crate) of which I do not know the IP address. Connected to this device is a PCB that broadcasts its MAC address. Ultimately, I want to know this MAC address. I can ...
0
votes
1answer
75 views

How do I open port 8100 on VMware?

How do I access port 8100 from a VM? I want to access port 8100 on a linux VM. I am running lubuntu. I have tried multiple questions already and none of them seem to work: Connection refused on ...
0
votes
1answer
144 views

sudo netstat -antp not showing PID

i am testing stuff with sockets and i encountered that strange case : i coded i very simple tcp server in c, i made it block after accept(), just to see what happen when accepting multiple connection ...
1
vote
1answer
74 views

Listen for incoming request on port on Linux, then run command

I am after as lightweight as possible solution to listen on a port for a specific request, then run a command should the port be hit and the correct request be recedved. Eg. Send a request to 192.168....
-2
votes
1answer
795 views

Amazon (AWS) zagent is it a malware / remote? [closed]

i ran netstat command and found some amazon tcp connections that i don't know zagent1644.h-cdn.com 142.44.212.29 zagent1642.h-cdn.com 145.239.8.193 zagent859.h-cdn.com 217.182.138.56 zagent1678.h-...
1
vote
0answers
137 views

UDP port appears in netstat but not in lsof?

After using Mosh, I noticed that UDP ports held by mosh-server were still in use after all processes exited. Running netstat -ln, it shows that these ports are in use: Active Internet connections ...
0
votes
0answers
26 views

How to manually send download request to an application

I'm downloading a file from telegram desktop app. I want to see if it's possible that I can find a download link and use a tool like lftp to download the file myself with multiple tcp connections if ...
0
votes
2answers
188 views

detailed understanding of netstat -an output on linux

I tried to look for a good doc on netstat especially for the options -an but cannot find anything detailed enough. example 1: tcp 0 126 android.home:58797 par10s34-in-x0e.1e100.net:https ESTABLISHED ...
5
votes
1answer
2k views

`netstat` command in WSL return empty list

I install python and start python -m SimpleHTTPServer in windows WSL. But the command netstat -an return an empty list. And of course i can't visit the url http://127.0.0.1:8000 in windows browser. ...
2
votes
1answer
981 views

How to interpret outputs from netstat -sp TCP?

I really think someone is accessing my pc illegally and I've read it on many sites that netstat can help me how to trace it. I'm really not into networking so it's hard for me to interpret these ...
2
votes
1answer
27 views

How to log all ports once opened by a process/app in Linux for short time?

I have an app that makes some kind of upd ping to the network and for some short time listens for some port in order to receive some feedback during some timeout. It is short enough to observe if with ...
3
votes
2answers
16k views

Netstat listening programs on ports alternative on Debian 9

What is the alternative to command netstat -ntpl on Debian 9? I am using this command to check what program is listening on port. Alternatively with parameters -ntupl (with u) including UDP.
2
votes
1answer
1k views

How to find attached processes via unix domain socket?

I used netstat to acquire RefCnt column. And there are 2 attached processes via /var/run/mysqld/mysqld.sock. How to find their PIDs? # netstat -a -p -A unix Proto RefCnt Flags Type State ...
3
votes
3answers
3k views

Powershell one-liner to show process on same line as port using netstat issue

First I just want to make sure user Erik Bitemo gets credit for the original code I'm using here. The output is what I'm looking for with one exception: One of the ports disappears and "System System5"...
0
votes
0answers
410 views

How to find out the PID which generates traffics to port 9229 in MacBook

There are unknown traffics to port 9229 in my MacBook. $ sudo tcpdump -i any -n port 9229 ...... 12:10:39.176502 IP6 ::1.62261 > ::1.9229: Flags [S], seq 638850191, win 65535, options [mss 16324,...
5
votes
1answer
731 views

Close ssh tunnel without root and without killing all other ssh connections

I have an ssh tunnel listening on a local port, say 8888, opened from a remote machine with ssh -R 8888:localhost:80 myuser@myhost. I need to write a script for "myuser" on "myhost" that will close ...
0
votes
0answers
1k views

netstat shows too many established connections in windows

I have an Internet service by ADSL, the problem is that my download speed has decreased dramatically in the order of 60 or 70% down. One friend recommend me to put netstat -an on a terminal window and ...
1
vote
2answers
6k views

Strange entries in Netstat output

Out of curiosity, I ran Netstat on my Windows PC, and I found some strange entries like: xx-fbcdn-shv-01-amt2:https edge-star-mini-shv-01-frt3:https mil04s03-in-f10:https xx-fbcdn-shv-01-amt2:https ...
0
votes
1answer
432 views

Netstat showing open established connection but I can't end the process

So I've been curious as to know why I have these open established ipv6 connections. I typed in the command prompt Netstat -ano to get the connections, PID numbers, and port numbers. The connections ...
1
vote
1answer
425 views

windows netstat shows mysql server state time wait

What does it mean when windows netstat -ano shows this, and why there are four (more than 1).
0
votes
1answer
86 views

Comparing netstat scan from previous scans

Lets say you want to compare new netstat scans from old ones to see changes in network connections. Is there a method or tool in windows 7 where you can view these changes?
2
votes
1answer
863 views

What are the different parts of the response from netstat -rn

On my mac, if i run netstat -rn i get the following output: Internet: Destination Gateway Flags Refs Use Netif Expire default 192.168.1.1 UGSc ...
0
votes
1answer
2k views

ubuntu 16.04 trying to open port 8443 not working

i need to open port 8443 in OS ubuntu 16.04 but nothing is working first i tried to do a scan port using Nmap: RESULT : Discovered open port 139/tcp on 127.0.0.1 Discovered open port 445/tcp on ...
2
votes
0answers
475 views

How to check which process is flooding TCP SYN connections on Linux?

My Server is running Fedora Core 13. One day I found there were a lot of abnormal traffic that tried to initiate TCP connections with outside hosts. I tried to remove the default route and the DNS ...
0
votes
3answers
87 views

Cannot connect even though ports are open

On my TurnKey Linux I have a number of programs running. When I access it using another computer I can see website working, I can connect using SSH. But Webmin (port 12321), MySql (3306) and others ...
2
votes
3answers
2k views

Meaning of netstat output?

When I type "sudo netstat -an", this is part of the output I get: Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 192.99.202.17:39922 ...
0
votes
1answer
130 views

Does “netstat -e” displays statistics of all network interfaces combined?

This is an example output of netstat -e: Does this output displays the statistics of all the network interfaces combined, or does it only displays the statistics of a single network interface?
0
votes
2answers
231 views

filename with date and time as title?

trying to setup a task in task scheduler to run every hour, I'm having trouble finding a way to add the date and time to the filename, looking for something concise like a one liner, or if needed, ...
6
votes
2answers
7k views

Why UDP does not show LISTENING in the state column in netstat?

TCP shows LISTENING in the state column while UDP does not show anything: Is it because UDP has only one state (which is LISTENING) so there is no need to show it, or is there another reason?
-1
votes
1answer
2k views

Hacker evidence from “netstat -a” [closed]

What exactly do you look for in "netstat -a" results that would indicate an unknown user on your network, please? Thank you for the replies below. I edited this original question (above) earlier, ...
23
votes
4answers
6k views

Do 0.0.0.0:0 and *:* represent the same thing?

I used netstat (in Windows) to view the listened ports for TCP and UDP: I noticed that in the Foreign Address column, UDP displays *:* instead of 0.0.0.0:0, do these two values represent the same ...
0
votes
2answers
1k views

“netstat” vs “netstat -a” in Windows

I want to know the difference between netstat and netstat -a in Windows. I think that this is the difference: netstat will display all of the TCP connections in every State except for LISTENING. ...
0
votes
1answer
841 views

netstat with full command name (like in htop)

I'm running a few different services via mono, each on there own port, but when I use netstat to check which have assigned a port and which haven't, all I get are 2 processes called "mono", no way to ...
0
votes
1answer
435 views

PID 4 Using Port 80 - IIS Unable To Bind

So I've been having a problem where I can't use localhost:80 on IIS So I ran this: > netstat -ano | find "0:80" And got: TCP 0.0.0.0:80 0.0.0.0:0 LISTENING 4 ...