Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [netstat]

Netstat (network statistic) is a tool, common to Windows, Unix and Linux, used to obtain information about network connections (outbound and inbound), routing tables, and a range of information on the use of statistics the network interface. Netstat.exe command line that shows all open ports for Transmission Control Protocol (TCP) and User Datagram Protocol (UDP).

Filter by
Sorted by
Tagged with
4 votes
0 answers
454 views

Is there a simple way to get per-protocol (i.e. IPv4/IPv6) statistics from netstat?

After a change of ISP, I've recently gotten IPv6 access, so I thought I'd play around a little with netstat to see if it's possible to get some kind of high-level per-protocol statistics from macOS ...
gmw's user avatar
  • 151
0 votes
0 answers
62 views

Ncat: Connection Refused when connecting on Linux server

I created a java application and ran it with docker inside a linux server XX.XX.XX.XX. That application should listen behind port 105 of that server. In fact, by executing the "netstat -an | grep ...
El_Merendero's user avatar
1 vote
1 answer
270 views

How can I add a timestamp to a monitored command (like "netstat") in Windows commandline?

Using netstat -aon | findstr /I "1234", I can monitor that this port is open, but there is an issue: this is what the result looks like: UDP 0.0.0.0:1234 *:* 5064 UDP 0.0.0.0:...
Dominique's user avatar
  • 2,249
1 vote
2 answers
4k views

Windows 10 - Close listening ports

I'm doing a securisation of a PC with windows 10. With the command: "netstat -aon" I get the list of all the active connections. For some requirements I have to close the open port 80 and ...
marco94's user avatar
  • 13
1 vote
1 answer
956 views

Netstat shows open ports. What services are listening?

Netstat (Windows 10) is showing certain services as "listening", but what service is listening on that port? Any insights much appreciated.
Antonio23249's user avatar
  • 1,001
0 votes
1 answer
88 views

backdoor infection scanning (some PID not showing)

I am trying to scan the connections established on my Windows 10 PC. I'm using the command (as admin) netstat -ano. It is working, and I am seeing some established connections. But when I'm looking ...
Charbel Eid's user avatar
3 votes
3 answers
3k views

How can I correctly check on what network interface SSH is listening on a Linux machine?

I am not a system engineer or a network expert (I am more a software developer) and I have the following problem that I have to solve. I am working on an Oracle Linux machine (basically it should be ...
AndreaNobili's user avatar
  • 7,181
-2 votes
1 answer
9k views

How to find open port on specific IP address in Windows 10?

At work, we connected print-server to a printer via USB, to make a printer network-available. Setting-up as network printer was successful, but at work, additionally we need to specify a port number. ...
Askar's user avatar
  • 133
0 votes
2 answers
419 views

netstat shows ESTABLISHED connection between same ip:port pair

I am on Windows Server 2016 Standard. See netstat output below (IP replaced): C:\Users\user>netstat -an|findstr "55559" TCP 1.2.3.4:55559 1.2.3.4:55559 ESTABLISHED What does ...
cly's user avatar
  • 101
0 votes
0 answers
166 views

Simplify NETSTAT monitoring output

I'm monitoring suspicious incoming connections using sudo watch -n 30 "netstat -antp" which provides more information than I need, so based on the answer I found here, I've tried to ...
marcusdavanco's user avatar
1 vote
1 answer
1k views

How can the same TCP port show in netstat as BOUND and ESTABLISHED in Windows?

I'm investigating an issue of port exhaustion in Windows, and the output of netstat shows many ports both as BOUND and ESTABLISHED ... TCP 10.0.1.9:64318 10.0.1.9:8400 ESTABLISHED ...
zentrunix's user avatar
  • 372
1 vote
1 answer
840 views

Is it normal to have a high ICMPv6 Neighbour Solicitation sent?

I have suspicion that my home network may be comprimised and used by malicious actors. I'm a networking noob so I would like to know if having a Neighbour Solicitations sent >2000 is normal? I got ...
RedRum's user avatar
  • 113
0 votes
3 answers
548 views

List the IP addresses that my PC is connected to - in a readable format

I'm trying to search the IP addresses that my PC is connected to, but I don't recognize these & search shows nothing. I'm looking into all my connections, so I ran netstat -a and I don't recognize ...
Kevin Mulvihill's user avatar
0 votes
0 answers
988 views

Why port is blocked (local windows network)

I have two windows computers at my house 10.0.0.15: main computer. 10.0.0.1: laptop My laptop is running an application on port 6000 that I want to access from the main computer. I have connection ...
justadev's user avatar
  • 147
0 votes
1 answer
960 views

Save a continues netstat to a text file with time stamp

I want to make a continuous netstat to a specific port to show the establishment with date and time. the command I am using is the below: netstat -na | find "5002", but it shows the current ...
Hossam M's user avatar
0 votes
0 answers
503 views

Netstat -b shows open connections for an old (not used) project from totally unrelated apps

See screenshot below: In netstat -b output I always see open connections to an old project I developed 2 years ago. They also show when I open new applications (you see totally unrelated apps ...
user2078023's user avatar
0 votes
0 answers
109 views

What is adclick remote address?

netstat -a returns the information below. What is the "adclick" address? There is any benefit from disconnect it? How to shutdown that connection?
Zyncho's user avatar
  • 101
0 votes
1 answer
5k views

How do i find out what the foreign addresses are in cmd and where they come from?

Ran netstat -a and I was curious as to what yx-in-f95:https on the foreign address section is and how to find out myself in the future.
user avatar
1 vote
1 answer
1k views

Why doesn’t netstat display open websites?

I’m a beginner in networking and I’m checking the netstat command. So I opened a couple websites such as en.wikipedia.org Then I opened an admin CMD and typed netstat I can’t see this connection ...
Antonio23249's user avatar
  • 1,001
2 votes
0 answers
357 views

Force netstat to always return results in English language, irrespective of system language?

Is there a way to call netstat commands (e.g. netstat -an) but return the results in English irrespective of the system language? Background: the reason I wish to find a way is because some software ...
stevec's user avatar
  • 789
2 votes
2 answers
1k views

windows, run net stat to txt daily with date/time in filename

first time post. was unable to find similar solutions on this site or others. need a CMD batch file to run "netstat -an" output to a text file daily with a unique file name so the day before ...
noob_user's user avatar
0 votes
0 answers
759 views

After opening port 443 in windows firewall as inbound rule, I cannot see it when I run 'netstat -an'

As an inbound rule on Windows 10 firewall, I added port 443 as TCP connection allowing all types of connections. However, I cannot see it when I run 'netstat -an'. How can I get it so that I see my ...
KaneHarry729's user avatar
2 votes
0 answers
140 views

Netstate and process that are not there?

8080 port is occupied so I can not start glass fish server on it , so I use netstate and find the PID of program whom use that port , but problem start here there is no process or service with this ...
johnny is here's user avatar
1 vote
1 answer
414 views

Troubleshooting outbound internet traffic - Fedora Linux

Without any programs open except an empty terminal window and System Monitor, I'm seeing network traffic. Roughly every 1 second there's a small spike in outbound and a little inbound traffic. $ sudo ...
There's user avatar
  • 125
0 votes
1 answer
421 views

Meaning of Local TCP number after double colon when using netstat -a -b -n

Attempting to diagnose port/connection issues and ran into the following output. I know "::" means "any" (replaces consecutive 0's), but what does the 1 mean? It's on chrome, as ...
Jon F.'s user avatar
  • 1
1 vote
1 answer
409 views

Increased traffic - Server probed by bots?

Since December 24 my server experiences increased resource consumption. Additionally the Nginx server seems to be unstable which causes several errors. The CPU usage used to average at around 5%. But ...
Andy Sukowski-Bang's user avatar
0 votes
0 answers
926 views

java.exe opens up hundreds of ports on 127.0.0.1 on a windows 10 computer and listens to itself

After I ran netstat -ab with admin right on my win10 computer, which is not running anything "java" related on the desktop nor there is "java.exe" in taskmanager's "detailed ...
eliu's user avatar
  • 103
1 vote
1 answer
5k views

How do I output a netstat command every 2 seconds to a text file

I am trying to make the following happen, but having a hard time getting it to work as expected. Tried using the watch command, but the output is just a mess. I found the following, but haven't been ...
Trey's user avatar
  • 13
3 votes
1 answer
11k views

Reset Netstat statistics

Is there a method to clear the statistics of 'netstat -s' without rebooting the device? I'm trying to determine the number of errors within a nondeterministic period of time.
qz_99's user avatar
  • 53
2 votes
0 answers
1k views

What is the explanation of the network flags in MacOSX? [closed]

Good morning. Could someone explain to me the meaning of the flags in the routing table? For example if you check the output of netstat -nr you will have lines like this: default 192.168.2....
n3mo's user avatar
  • 133
1 vote
0 answers
139 views

Address/ports keep becoming stuck on ubuntu (server) - even after the process terminates

I'm having an issue on a headless Ubuntu 18.04 installation. Ports keep becoming "stuck" which is either preventing processes from terminating (even when sending a SIGKILL), or allowing the processes ...
Arc's user avatar
  • 111
0 votes
1 answer
2k views

How to find open ports using netstat?

When I do a netstat -tuln, I get the following output Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 127.0.0.1:25 0.0.0.0:* ...
nishanth2066's user avatar
10 votes
1 answer
4k views

Port 9001 used by Microsoft-HTTPAPI/2.0

The port 9001 seems to be used by Microsoft-HTTPAPI/2.0. I get this from the browser doing a http://localhost:9001/ HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-...
Stéphane Gerber's user avatar
1 vote
1 answer
128 views

Incompatible command arguments for netstat?

The command netstat -ano 192.168.1.1 works, whereas adding the -p flag, i.e.netstat -anop 192.168.1.1just displays the command-line parameters with descriptions like if you'd just typed netstat ...
Math1000's user avatar
  • 185
0 votes
0 answers
881 views

What TCP segment retransmission rate indicates something bad?

For a long time, I’ve suspected there’s a problem with my home network. (Basic AT&T gateway/router with residential fiber). I’m running Windows Performance Manager and monitoring the TCP segments ...
synaptik's user avatar
  • 405
3 votes
1 answer
778 views

Why is the local address the same as the peer one?

A weird issue occurred while I was troubleshooting with ss, the local address is exactly same as the peer one. Same IP address is ok, but how to explain the same port?
choes's user avatar
  • 61
0 votes
1 answer
764 views

Configure interface order in `netstat -rn` output

When I'm typing netstat -rn, I'm getting the following output: =========================================================================== Interface list 33...........................myvpn.com 16......
vbezhenar's user avatar
  • 103
2 votes
1 answer
5k views

How to see all the TCP connections opened by Google Chrome browser on Mac?

I am currently browsing using the Google Chrome browser. I know that for every tab I open and type a URL in, a TCP connection is opened. I also know that a maximum of 6 concurrent TCP connections are ...
africandrogba's user avatar
0 votes
0 answers
44 views

Roku works but is not apparently on our network?

We have two Roku devices in our house. Each is connected to a different TV's HDMI port and both work. They have unused RJ-11 ports, so I expect them to be on WiFi. But neither appears in the ...
WGroleau's user avatar
  • 804
0 votes
1 answer
3k views

What does "netstat -n -o" mean?

When I type netstat -n -o, I get a lot of foreign addresses and my Internet Provider Customer Service is telling me that it means that I got spyware on my computer. What that command really means?
mohamed_ashraf51's user avatar
2 votes
1 answer
3k views

netstat: illegal option -- o when using netstat -ano in MacOS

I want to list all PID with its state and foreign address. But I got this error: netstat: illegal option -- o So how to do that in MacOS? It works on windows
Yiling Liu's user avatar
1 vote
1 answer
685 views

Command Prompt netstat response

I was trying to check if any VNC is turned on so I tried netstat -an | find "ESTABLISHED" | find ":5900" and netstat -an | find "ESTABLISHED" | find ":5800" I got some feedback TCP 127.0.0.1:...
Han Angeline's user avatar
1 vote
1 answer
172 views

Why only part of ports on my machine can be reached from external ip?

I'm trying to achieve my remote service with port 5601. But unfortunately i can't open the website. Here is something i tried to find out why it's not working: I logged in remote server and tried "...
J.ben's user avatar
  • 13
1 vote
1 answer
4k views

Kali-Linux Netstat command not showing ports

I've been using the netstat command in a remote desktop running kali and not getting any results. this is all i get after using netstat Active Internet connections (w/o servers) Proto Recv-Q Send-Q ...
depression_vortex's user avatar
0 votes
1 answer
3k views

Understanding netstat output

Below is an output from a netstat command: TCP 0.0.0.0:135 0.0.0.0:0 LISTENING TCP 0.0.0.0:445 0.0.0.0:0 LISTENING TCP 0.0.0.0:5040 ...
Nina G's user avatar
  • 117
0 votes
1 answer
533 views

not bound port listening

Here is what netstat shows: Proto Recv-Q Send-Q Local Address Foreign Address State User Inode PID/Program name tcp 0 0 127.0.0.1:631 0....
achille's user avatar
  • 137
2 votes
1 answer
2k views

Suggest me to understand why my windows 10 found connected to that many hosts. checked with netstat -fb

I am using windows 10 laptop, and when I executed netstat -bf, no exe or browser was running, but few windows system services may be running I am not able to understand why wpnservice & ...
GLK's user avatar
  • 123
1 vote
1 answer
886 views

netstat -r output, internet vs internet6, different gateway formats

What's the difference between internet and internet6 routes? I'm assuming internet6 stands for IPv6? netstat -r Internet: Destination Gateway Flags Refs Use Netif ...
koperandus's user avatar
2 votes
1 answer
24k views

Windows equivalent to nmap

This answer suggests netstat as an equivalent to nmap and also states that nmap for windows does not work. But I use nmap for an specific purpose and that is to see if a port of a network is open or ...
Shayan's user avatar
  • 1,554
1 vote
0 answers
15k views

Netstat -ano. What does this mean..?

Getting an output that shows a specific process or group of processes (listed as PIDs) in netstat -ano. The PIDs seem to be connecting to multiple 'Foreign Address' IPs, or perhaps trying to spam ...
Arianax's user avatar
  • 81

1
2 3 4 5