Questions tagged [netstat]

Netstat (network statistic) is a tool, common to Windows, Unix and Linux, used to obtain information about network connections (outbound and inbound), routing tables, and a range of information on the use of statistics the network interface. Netstat.exe command line that shows all open ports for Transmission Control Protocol (TCP) and User Datagram Protocol (UDP).

Filter by
Sorted by
Tagged with
0
votes
0answers
44 views

What is adclick remote address?

netstat -a returns the information below. What is the "adclick" address? There is any benefit from disconnect it? How to shutdown that connection?
0
votes
1answer
29 views

How do i find out what the foreign addresses are in cmd and where they come from?

Ran netstat -a and I was curious as to what yx-in-f95:https on the foreign address section is and how to find out myself in the future.
1
vote
1answer
24 views

Why doesn’t netstat display open websites?

I’m a beginner in networking and I’m checking the netstat command. So I opened a couple websites such as en.wikipedia.org Then I opened an admin CMD and typed netstat I can’t see this connection ...
2
votes
0answers
36 views

Force netstat to always return results in English language, irrespective of system language?

Is there a way to call netstat commands (e.g. netstat -an) but return the results in English irrespective of the system language? Background: the reason I wish to find a way is because some software ...
1
vote
1answer
36 views

windows, run net stat to txt daily with date/time in filename

first time post. was unable to find similar solutions on this site or others. need a CMD batch file to run "netstat -an" output to a text file daily with a unique file name so the day before ...
0
votes
0answers
19 views

After opening port 443 in windows firewall as inbound rule, I cannot see it when I run 'netstat -an'

As an inbound rule on Windows 10 firewall, I added port 443 as TCP connection allowing all types of connections. However, I cannot see it when I run 'netstat -an'. How can I get it so that I see my ...
2
votes
0answers
30 views

Netstate and process that are not there?

8080 port is occupied so I can not start glass fish server on it , so I use netstate and find the PID of program whom use that port , but problem start here there is no process or service with this ...
1
vote
1answer
24 views

Troubleshooting outbound internet traffic - Fedora Linux

Without any programs open except an empty terminal window and System Monitor, I'm seeing network traffic. Roughly every 1 second there's a small spike in outbound and a little inbound traffic. $ sudo ...
0
votes
1answer
30 views

Meaning of Local TCP number after double colon when using netstat -a -b -n

Attempting to diagnose port/connection issues and ran into the following output. I know "::" means "any" (replaces consecutive 0's), but what does the 1 mean? It's on chrome, as ...
1
vote
1answer
190 views

Increased traffic - Server probed by bots?

Since December 24 my server experiences increased resource consumption. Additionally the Nginx server seems to be unstable which causes several errors. The CPU usage used to average at around 5%. But ...
0
votes
0answers
47 views

java.exe opens up hundreds of ports on 127.0.0.1 on a windows 10 computer and listens to itself

After I ran netstat -ab with admin right on my win10 computer, which is not running anything "java" related on the desktop nor there is "java.exe" in taskmanager's "detailed ...
1
vote
1answer
302 views

How do I output a netstat command every 2 seconds to a text file

I am trying to make the following happen, but having a hard time getting it to work as expected. Tried using the watch command, but the output is just a mess. I found the following, but haven't been ...
1
vote
1answer
2k views

Reset Netstat statistics

Is there a method to clear the statistics of 'netstat -s' without rebooting the device? I'm trying to determine the number of errors within a nondeterministic period of time.
2
votes
0answers
36 views

What is the explanation of the network flags in MacOSX? [closed]

Good morning. Could someone explain to me the meaning of the flags in the routing table? For example if you check the output of netstat -nr you will have lines like this: default 192.168.2....
1
vote
0answers
20 views

Address/ports keep becoming stuck on ubuntu (server) - even after the process terminates

I'm having an issue on a headless Ubuntu 18.04 installation. Ports keep becoming "stuck" which is either preventing processes from terminating (even when sending a SIGKILL), or allowing the processes ...
0
votes
1answer
54 views

How to find open ports using netstat?

When I do a netstat -tuln, I get the following output Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 127.0.0.1:25 0.0.0.0:* ...
9
votes
1answer
2k views

Port 9001 used by Microsoft-HTTPAPI/2.0

The port 9001 seems to be used by Microsoft-HTTPAPI/2.0. I get this from the browser doing a http://localhost:9001/ HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-...
0
votes
1answer
24 views

Incompatible command arguments for netstat?

The command netstat -ano 192.168.1.1 works, whereas adding the -p flag, i.e.netstat -anop 192.168.1.1just displays the command-line parameters with descriptions like if you'd just typed netstat ...
0
votes
0answers
110 views

What TCP segment retransmission rate indicates something bad?

For a long time, I’ve suspected there’s a problem with my home network. (Basic AT&T gateway/router with residential fiber). I’m running Windows Performance Manager and monitoring the TCP segments ...
2
votes
1answer
280 views

Why is the local address the same as the peer one?

A weird issue occurred while I was troubleshooting with ss, the local address is exactly same as the peer one. Same IP address is ok, but how to explain the same port?
0
votes
1answer
201 views

Configure interface order in `netstat -rn` output

When I'm typing netstat -rn, I'm getting the following output: =========================================================================== Interface list 33...........................myvpn.com 16......
2
votes
1answer
2k views

How to see all the TCP connections opened by Google Chrome browser on Mac?

I am currently browsing using the Google Chrome browser. I know that for every tab I open and type a URL in, a TCP connection is opened. I also know that a maximum of 6 concurrent TCP connections are ...
0
votes
0answers
28 views

Roku works but is not apparently on our network?

We have two Roku devices in our house. Each is connected to a different TV's HDMI port and both work. They have unused RJ-11 ports, so I expect them to be on WiFi. But neither appears in the ...
0
votes
1answer
998 views

What does “netstat -n -o” mean?

When I type netstat -n -o, I get a lot of foreign addresses and my Internet Provider Customer Service is telling me that it means that I got spyware on my computer. What that command really means?
0
votes
1answer
1k views

netstat: illegal option — o when using netstat -ano in MacOS

I want to list all PID with its state and foreign address. But I got this error: netstat: illegal option -- o So how to do that in MacOS? It works on windows
1
vote
1answer
123 views

Command Prompt netstat response

I was trying to check if any VNC is turned on so I tried netstat -an | find "ESTABLISHED" | find ":5900" and netstat -an | find "ESTABLISHED" | find ":5800" I got some feedback TCP 127.0.0.1:...
1
vote
1answer
45 views

Why only part of ports on my machine can be reached from external ip?

I'm trying to achieve my remote service with port 5601. But unfortunately i can't open the website. Here is something i tried to find out why it's not working: I logged in remote server and tried "...
0
votes
1answer
2k views

Kali-Linux Netstat command not showing ports

I've been using the netstat command in a remote desktop running kali and not getting any results. this is all i get after using netstat Active Internet connections (w/o servers) Proto Recv-Q Send-Q ...
0
votes
1answer
1k views

Understanding netstat output

Below is an output from a netstat command: TCP 0.0.0.0:135 0.0.0.0:0 LISTENING TCP 0.0.0.0:445 0.0.0.0:0 LISTENING TCP 0.0.0.0:5040 ...
0
votes
0answers
1k views

How to have a value different from 0 in netstat's Send-Q column for a socket in the LISTEN state?

I am currently trying to solve a Capture The Flag challenge that involves trying to escalate privileges by taking advantage of an exploit in a bash script. The script first does the following to get ...
0
votes
1answer
381 views

not bound port listening

Here is what netstat shows: Proto Recv-Q Send-Q Local Address Foreign Address State User Inode PID/Program name tcp 0 0 127.0.0.1:631 0....
2
votes
1answer
486 views

Suggest me to understand why my windows 10 found connected to that many hosts. checked with netstat -fb

I am using windows 10 laptop, and when I executed netstat -bf, no exe or browser was running, but few windows system services may be running I am not able to understand why wpnservice & ...
1
vote
1answer
578 views

netstat -r output, internet vs internet6, different gateway formats

What's the difference between internet and internet6 routes? I'm assuming internet6 stands for IPv6? netstat -r Internet: Destination Gateway Flags Refs Use Netif ...
0
votes
1answer
11k views

Windows equivalent to nmap

This answer suggests netstat as an equivalent to nmap and also states that nmap for windows does not work. But I use nmap for an specific purpose and that is to see if a port of a network is open or ...
1
vote
0answers
6k views

Netstat -ano. What does this mean..?

Getting an output that shows a specific process or group of processes (listed as PIDs) in netstat -ano. The PIDs seem to be connecting to multiple 'Foreign Address' IPs, or perhaps trying to spam ...
0
votes
0answers
2k views

netstat Foreign Address shows my hostname, TCP sockets refuse connections

I am attempting to establish a TCP connection to a Windows machine running some third party software, unfortunately, I can not make the connection succeed. Running: netstat -an Shows my service is ...
1
vote
0answers
159 views

How to find a process that is using a port if it is not displayed even in netstat?

I am using a software development IDE (Intellij) that is using local machine port 5005 for Java program debugging. In some occasions it reports that it cannot connect because the port is being used or ...
1
vote
1answer
377 views

Get connection speed of a program with netstat

I use netstat -natpe to view the connections and program names. While wget is fetching data, the RX column is zero naderan@student-virtual-machine:~$ netstat -natpe (Not all processes could be ...
0
votes
2answers
454 views

What is happening at each row of this netstat-nr command?

I have a problem that I do not understand. How do I evaluate what is happening in each row and which row matches a destination address of 183.77.42.58 and why? What is happening at each row of this ...
1
vote
1answer
3k views

Windows CMD netstat output in one line

Netstat output breaks line when -aonb options are used. I can't use FIND to filter the output in one line. Increasing Screen buffer width and Window width doesn't help. The command still breaks into ...
0
votes
0answers
2k views

what is a “normal” netstat -a -b result supposed to look like on a fresh windows 10 installation?

I just reinstalled windows 10 by choosing "Reset My PC" in the settings and telling it to erase the disk. When it finished few things run. Edge crashes. Settings won't come up. File Explorer works. ...
1
vote
1answer
7k views

What application uses local address “127.0.0.1” and foreign address “screenshots”

I have discovered in the output of netstat -a over 250 entries like this: TCP 127.0.0.1:49671 screenshots:49670 ESTABLISHED TCP 127.0.0.1:49670 screenshots:49671 ...
-4
votes
1answer
830 views

Why an IP address owned by Amazon would have an active connection to my Windows PC with an svchost.exe process?

Did a netstat -fb. One of the lines was: [svchost.exe] TCP 192.168.1.113:52683 server-13-32-253-84.sea19.r.cloudfront.net:https CLOSE_WAIT Server is registered to Amazon, a little confused. ...
1
vote
0answers
74 views

Figure out IP address of external device

I have an external device (a PCB crate) of which I do not know the IP address. Connected to this device is a PCB that broadcasts its MAC address. Ultimately, I want to know this MAC address. I can ...
0
votes
1answer
908 views

How do I open port 8100 on VMware?

How do I access port 8100 from a VM? I want to access port 8100 on a linux VM. I am running lubuntu. I have tried multiple questions already and none of them seem to work: Connection refused on ...
1
vote
1answer
672 views

sudo netstat -antp not showing PID

i am testing stuff with sockets and i encountered that strange case : i coded i very simple tcp server in c, i made it block after accept(), just to see what happen when accepting multiple connection ...
1
vote
1answer
591 views

Listen for incoming request on port on Linux, then run command

I am after as lightweight as possible solution to listen on a port for a specific request, then run a command should the port be hit and the correct request be recedved. Eg. Send a request to 192.168....
-2
votes
1answer
2k views

Amazon (AWS) zagent is it a malware / remote? [closed]

i ran netstat command and found some amazon tcp connections that i don't know zagent1644.h-cdn.com 142.44.212.29 zagent1642.h-cdn.com 145.239.8.193 zagent859.h-cdn.com 217.182.138.56 zagent1678.h-...
1
vote
1answer
729 views

UDP port appears in netstat but not in lsof?

After using Mosh, I noticed that UDP ports held by mosh-server were still in use after all processes exited. Running netstat -ln, it shows that these ports are in use: Active Internet connections ...
0
votes
0answers
28 views

How to manually send download request to an application

I'm downloading a file from telegram desktop app. I want to see if it's possible that I can find a download link and use a tool like lftp to download the file myself with multiple tcp connections if ...

1
2 3 4 5