Questions tagged [netstat]
Netstat (network statistic) is a tool, common to Windows, Unix and Linux, used to obtain information about network connections (outbound and inbound), routing tables, and a range of information on the use of statistics the network interface. Netstat.exe command line that shows all open ports for Transmission Control Protocol (TCP) and User Datagram Protocol (UDP).
215
questions
1
vote
2
answers
98
views
I am curious why I have all these connections upon using netstat -b. Can someone tell me if I have someone in my system please?
I am curious why I have all these connections upon using netstat -b. Can someone tell me if I have someone in my system please?
C:\Windows\system32>netstat -b
Active Connections
Proto Local ...
Nick Becker
4
votes
0
answers
460
views
Is there a simple way to get per-protocol (i.e. IPv4/IPv6) statistics from netstat?
After a change of ISP, I've recently gotten IPv6 access, so I thought I'd play around a little with netstat to see if it's possible to get some kind of high-level per-protocol statistics from macOS ...
- 151
0
votes
0
answers
262
views
Ncat: Connection Refused when connecting on Linux server
I created a java application and ran it with docker inside a linux server XX.XX.XX.XX. That application should listen behind port 105 of that server. In fact, by executing the "netstat -an | grep ...
- 385
1
vote
1
answer
353
views
How can I add a timestamp to a monitored command (like "netstat") in Windows commandline?
Using netstat -aon | findstr /I "1234", I can monitor that this port is open, but there is an issue: this is what the result looks like:
UDP 0.0.0.0:1234 *:* 5064
UDP 0.0.0.0:...
- 2,283
1
vote
2
answers
6k
views
Windows 10 - Close listening ports
I'm doing a securisation of a PC with windows 10.
With the command:
"netstat -aon"
I get the list of all the active connections.
For some requirements I have to close the open port 80 and ...
- 13
1
vote
1
answer
1k
views
Netstat shows open ports. What services are listening?
Netstat (Windows 10) is showing certain services as "listening", but what service is listening on that port?
Any insights much appreciated.
- 1,041
0
votes
1
answer
100
views
backdoor infection scanning (some PID not showing)
I am trying to scan the connections established on my Windows 10 PC.
I'm using the command (as admin) netstat -ano. It is working, and I am seeing some established connections.
But when I'm looking ...
- 15
3
votes
3
answers
3k
views
How can I correctly check on what network interface SSH is listening on a Linux machine?
I am not a system engineer or a network expert (I am more a software developer) and I have the following problem that I have to solve.
I am working on an Oracle Linux machine (basically it should be ...
- 7,201
-2
votes
1
answer
12k
views
How to find open port on specific IP address in Windows 10?
At work, we connected print-server to a printer via USB, to make a printer network-available.
Setting-up as network printer was successful, but at work, additionally we need to specify a port number.
...
- 133
0
votes
1
answer
482
views
netstat shows ESTABLISHED connection between same ip:port pair
I am on Windows Server 2016 Standard. See netstat output below (IP replaced):
C:\Users\user>netstat -an|findstr "55559"
TCP 1.2.3.4:55559 1.2.3.4:55559 ESTABLISHED
What does ...
- 101
0
votes
0
answers
179
views
Simplify NETSTAT monitoring output
I'm monitoring suspicious incoming connections using
sudo watch -n 30 "netstat -antp"
which provides more information than I need, so based on the answer I found here,
I've tried to ...
1
vote
1
answer
2k
views
How can the same TCP port show in netstat as BOUND and ESTABLISHED in Windows?
I'm investigating an issue of port exhaustion in Windows, and the output of netstat shows many ports both as BOUND and ESTABLISHED
...
TCP 10.0.1.9:64318 10.0.1.9:8400 ESTABLISHED ...
- 382
1
vote
1
answer
970
views
Is it normal to have a high ICMPv6 Neighbour Solicitation sent?
I have suspicion that my home network may be comprimised and used by malicious actors.
I'm a networking noob so I would like to know if having a Neighbour Solicitations sent >2000 is normal?
I got ...
- 113
0
votes
3
answers
581
views
List the IP addresses that my PC is connected to - in a readable format
I'm trying to search the IP addresses that my PC is connected to, but I don't recognize these & search shows nothing.
I'm looking into all my connections, so I ran netstat -a and I don't recognize ...
0
votes
0
answers
1k
views
Why port is blocked (local windows network)
I have two windows computers at my house
10.0.0.15: main computer.
10.0.0.1: laptop
My laptop is running an application on port 6000 that I want to access from the main computer.
I have connection ...
- 147
0
votes
1
answer
1k
views
Save a continues netstat to a text file with time stamp
I want to make a continuous netstat to a specific port to show the establishment with date and time.
the command I am using is the below:
netstat -na | find "5002", but it shows the current ...
- 1
0
votes
0
answers
551
views
Netstat -b shows open connections for an old (not used) project from totally unrelated apps
See screenshot below:
In netstat -b output I always see open connections to an old project I developed 2 years ago. They also show when I open new applications (you see totally unrelated apps ...
- 101
0
votes
0
answers
110
views
What is adclick remote address?
netstat -a returns the information below.
What is the "adclick" address? There is any benefit from disconnect it? How to shutdown that connection?
- 101
0
votes
1
answer
5k
views
How do i find out what the foreign addresses are in cmd and where they come from?
Ran netstat -a and I was curious as to what yx-in-f95:https on the foreign address section is and how to find out myself in the future.
James O'Day
1
vote
1
answer
1k
views
Why doesn’t netstat display open websites?
I’m a beginner in networking and I’m checking the netstat command.
So I opened a couple websites such as en.wikipedia.org
Then I opened an admin CMD and typed netstat
I can’t see this connection ...
- 1,041
2
votes
0
answers
377
views
Force netstat to always return results in English language, irrespective of system language?
Is there a way to call netstat commands (e.g. netstat -an) but return the results in English irrespective of the system language?
Background: the reason I wish to find a way is because some software ...
- 839
2
votes
2
answers
1k
views
windows, run net stat to txt daily with date/time in filename
first time post.
was unable to find similar solutions on this site or others. need a CMD batch file to run "netstat -an" output to a text file daily with a unique file name so the day before ...
- 21
0
votes
0
answers
782
views
After opening port 443 in windows firewall as inbound rule, I cannot see it when I run 'netstat -an'
As an inbound rule on Windows 10 firewall, I added port 443 as TCP connection allowing all types of connections. However, I cannot see it when I run 'netstat -an'. How can I get it so that I see my ...
2
votes
0
answers
149
views
Netstate and process that are not there?
8080 port is occupied so I can not start glass fish server on it , so I use netstate and find the PID of program whom use that port , but problem start here there is no process or service with this ...
1
vote
1
answer
448
views
Troubleshooting outbound internet traffic - Fedora Linux
Without any programs open except an empty terminal window and System Monitor, I'm seeing network traffic. Roughly every 1 second there's a small spike in outbound and a little inbound traffic. $ sudo ...
- 125
0
votes
1
answer
447
views
Meaning of Local TCP number after double colon when using netstat -a -b -n
Attempting to diagnose port/connection issues and ran into the following output. I know "::" means "any" (replaces consecutive 0's), but what does the 1 mean? It's on chrome, as ...
- 1
1
vote
1
answer
422
views
Increased traffic - Server probed by bots?
Since December 24 my server experiences increased resource consumption. Additionally the Nginx server seems to be unstable which causes several errors.
The CPU usage used to average at around 5%. But ...
0
votes
0
answers
997
views
java.exe opens up hundreds of ports on 127.0.0.1 on a windows 10 computer and listens to itself
After I ran netstat -ab with admin right on my win10 computer, which is not running anything "java" related on the desktop nor there is "java.exe" in taskmanager's "detailed ...
- 103
1
vote
1
answer
5k
views
How do I output a netstat command every 2 seconds to a text file
I am trying to make the following happen, but having a hard time getting it to work as expected.
Tried using the watch command, but the output is just a mess.
I found the following, but haven't been ...
- 13
3
votes
1
answer
12k
views
Reset Netstat statistics
Is there a method to clear the statistics of 'netstat -s' without rebooting the device?
I'm trying to determine the number of errors within a nondeterministic period of time.
- 53
2
votes
0
answers
1k
views
What is the explanation of the network flags in MacOSX? [closed]
Good morning.
Could someone explain to me the meaning of the flags in the routing table?
For example if you check the output of netstat -nr you will have lines like this:
default 192.168.2....
- 133
1
vote
0
answers
146
views
Address/ports keep becoming stuck on ubuntu (server) - even after the process terminates
I'm having an issue on a headless Ubuntu 18.04 installation. Ports keep becoming "stuck" which is either preventing processes from terminating (even when sending a SIGKILL), or allowing the processes ...
- 111
0
votes
1
answer
2k
views
How to find open ports using netstat?
When I do a netstat -tuln, I get the following output
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 127.0.0.1:25 0.0.0.0:* ...
- 111
10
votes
1
answer
4k
views
Port 9001 used by Microsoft-HTTPAPI/2.0
The port 9001 seems to be used by Microsoft-HTTPAPI/2.0. I get this from the browser doing a http://localhost:9001/
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-...
- 290
1
vote
1
answer
130
views
Incompatible command arguments for netstat?
The command netstat -ano 192.168.1.1 works, whereas adding the -p flag, i.e.netstat -anop 192.168.1.1just displays the command-line parameters with descriptions like if you'd just typed netstat ...
- 185
0
votes
0
answers
938
views
What TCP segment retransmission rate indicates something bad?
For a long time, I’ve suspected there’s a problem with my home network. (Basic AT&T gateway/router with residential fiber). I’m running Windows Performance Manager and monitoring the TCP segments ...
- 415
3
votes
1
answer
803
views
Why is the local address the same as the peer one?
A weird issue occurred while I was troubleshooting with ss, the local address is exactly same as the peer one. Same IP address is ok, but how to explain the same port?
- 61
0
votes
1
answer
791
views
Configure interface order in `netstat -rn` output
When I'm typing netstat -rn, I'm getting the following output:
===========================================================================
Interface list
33...........................myvpn.com
16......
- 103
2
votes
1
answer
5k
views
How to see all the TCP connections opened by Google Chrome browser on Mac?
I am currently browsing using the Google Chrome browser. I know that for every tab I open and type a URL in, a TCP connection is opened. I also know that a maximum of 6 concurrent TCP connections are ...
- 121
0
votes
0
answers
44
views
Roku works but is not apparently on our network?
We have two Roku devices in our house. Each is connected to a different TV's HDMI port and both work. They have unused RJ-11 ports, so I expect them to be on WiFi. But neither appears in the ...
- 824
0
votes
1
answer
3k
views
What does "netstat -n -o" mean?
When I type netstat -n -o, I get a lot of foreign addresses and my Internet Provider Customer Service is telling me that it means that I got spyware on my computer.
What that command really means?
2
votes
1
answer
4k
views
netstat: illegal option -- o when using netstat -ano in MacOS
I want to list all PID with its state and foreign address.
But I got this error:
netstat: illegal option -- o
So how to do that in MacOS? It works on windows
- 123
1
vote
1
answer
726
views
Command Prompt netstat response
I was trying to check if any VNC is turned on so I tried
netstat -an | find "ESTABLISHED" | find ":5900"
and
netstat -an | find "ESTABLISHED" | find ":5800"
I got some feedback
TCP 127.0.0.1:...
- 13
1
vote
1
answer
177
views
Why only part of ports on my machine can be reached from external ip?
I'm trying to achieve my remote service with port 5601. But unfortunately i can't open the website.
Here is something i tried to find out why it's not working:
I logged in remote server and tried "...
- 13
1
vote
1
answer
4k
views
Kali-Linux Netstat command not showing ports
I've been using the netstat command in a remote desktop running kali and not getting any results.
this is all i get after using netstat
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q ...
0
votes
1
answer
3k
views
Understanding netstat output
Below is an output from a netstat command:
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 0.0.0.0:5040 ...
- 117
0
votes
1
answer
536
views
not bound port listening
Here is what netstat shows:
Proto Recv-Q Send-Q Local Address Foreign Address State User Inode PID/Program name
tcp 0 0 127.0.0.1:631 0....
- 137
2
votes
1
answer
2k
views
Suggest me to understand why my windows 10 found connected to that many hosts. checked with netstat -fb
I am using windows 10 laptop, and when I executed netstat -bf, no exe or browser was running, but few windows system services may be running
I am not able to understand why wpnservice & ...
- 123
1
vote
1
answer
897
views
netstat -r output, internet vs internet6, different gateway formats
What's the difference between internet and internet6 routes? I'm assuming internet6 stands for IPv6?
netstat -r
Internet:
Destination Gateway Flags Refs Use Netif ...
- 25
2
votes
1
answer
25k
views
Windows equivalent to nmap
This answer suggests netstat as an equivalent to nmap and also states that nmap for windows does not work.
But I use nmap for an specific purpose and that is to see if a port of a network is open or ...
- 1,604