netstat is a tool for viewing active network connections, listeners and sockets.
netstat is a tool for viewing active network connections, listeners and sockets.
Questions tagged [netstat]
322 questions
1
vote
1 answer
Confusing traffic in netstat, nothing in logs
Just had a confusing couple of minutes! I was monitoring a screen (the gnu screen) running "netstat -a" and I noticed that there was one connection connected to http (port 80), fine. But when I checked my apache logs there's nothing! Neither there…
Armer
- 11
- 1
1
vote
5 answers
netstat shows many times deploy.akamaitechnologies.com connected to my server
Many times, after running netstat on my server, I find one of IP addresses belonging to deploy.akamaitechnologies.com connected to my server, do someone has an idea on what is happening on my server ?
this is a case:
TCP xxx.xxx.xxx.xxx:49189 …
Sami-L
- 253
- 2
- 6
- 17
1
vote
1 answer
netstat outputs same local adress for 2 different connections
Trying to understand how to read netstat output.
In my browser I opened site1.com
On my server netstat -A inet -p -e outputs the following:
tcp 0 0 site1.com:www foreign-adress:37991 ESTABLISHED www-data 94215 …
Under435
- 13
- 3
1
vote
1 answer
How to remove the hint in the terminal?
As a normal user , when I run some command like ps\netstat, the terminal hint me:
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
I know could redirect STDERR to /dev/null…
jiangchengwu
- 45
- 7
1
vote
3 answers
Find whats using all my servers bandwidth
TLDR: how can I dig deeper into my Mac mini OSX server to determine what processes are consuming so much bandwidth, or where all the inbound traffic is coming from?
Resource caching is on, all resources are minified or images crushed, our pages are…
Benno
- 217
- 2
- 10
1
vote
1 answer
Debian iptables, netstate. DDOS?
My server has been timing out and crashing lately.
I ran this command:
netstat -anp |grep 'tcp\|udp' | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n
Check the picture for result. Does the two IPs in the end ddos me?
And how do I block…
Muazam
- 197
- 2
- 10
1
vote
1 answer
DDOS Attack detection with netstat
I have a server, today load of my server over 20, i was found a command that detect alive connection to server for DDOS detection and reject IP.
netstat -anp | grep 'tcp\|udp' | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n
and result…
Akbar
- 11
- 1
- 1
- 2
1
vote
2 answers
Difference between two netstat results for Apache
We are running RedHat Linux on two front end webservers both running Apache HTTP Server.
I have done a diff on both httpd.conf files and there are no differences but the server hostnames. We have seen some issues were one of the servers is…
roacha
- 447
- 1
- 6
- 9
1
vote
2 answers
Why is the port listed only in the specific format of netstat?
I have Tomcat and I am trying to bind to 2 specific ports (using custom connectors). E.g. port A and port B.
Problem:
When I do netstat -a |grep A I do NOT see the port listed.
If I do netstat -antp I see both ports A and B listed.
What is the…
Jim
- 335
- 2
- 4
- 8
1
vote
1 answer
How to utilise netstat information
We have an application named "Seamer" installed on 2008R2 machine named "R2DUO" which has IP address set as 192.61.247.37 in host file and 172.26.127.40 is IP address of Ethernet card .We have two more systems in the LAN named R2TMBER and R2LEAF.…
michale
- 11
- 7
1
vote
1 answer
How to find malicious IPs?
Cacti shows irregular and pretty steady high bandwidth to my server (40x the normal) so I guess the server is udnder some sort of DDoS attack. The incoming bandwidth has not paralyzed my server, but of course consuming the bandwidth and affects…
alfish
- 3,127
- 15
- 47
- 71
1
vote
1 answer
nginx serving .php as static files
ok, again apparently a totally ridiculous problem which I just can't seem to figure out.
nginx keeps serving my .php files as static files.
I've installed nginx via the repositories on ubuntu. I've installed php5-fpm (no configuration changed…
jcfrei
- 175
- 1
- 7
1
vote
2 answers
How to measure bandwidth within the last 15 minutes?
I would like to log my bandwidth into a database and find out when my windows server 2003 is being used the most.
I want to feed the database with the bandwidth passed from the last feed (let's say it's 15 minutes).
I know that the netstat -e…
iTayb
- 791
- 4
- 10
- 25
1
vote
1 answer
What's the difference between Send-Q and S-BCNT in FreeBSD netstat -anx?
What's the exact meaning of Send Buffer byte count in the extended netstat statistics, and why is it always bigger than Send-Q?
In other words, what's counted against the S-BCNT that's not counted against the Send-Q?
Is S-BCNT a better number to use…
cjp
- 208
- 1
- 6
1
vote
3 answers
Linux : restricting outgoing on an application basis
I typed :
netstat -atlpvn
and noticed that applications like gedit and python had foreign addresses outside the network (the network being a single computer connected to the internet).
Is there any way for me to restrict which applications are…
artella
- 1,009
- 2
- 10
- 6