Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [netstat]

netstat is a tool for viewing active network connections, listeners and sockets.

netstat is a tool for viewing active network connections, listeners and sockets.

322 questions
1
vote
2 answers

Understanding the netstat command output

I used netstat command recently, and the output is below. netstat -a proto local address foreign address state tcp 127.0.0.1:1107 avinash-pc:0 listening tcp 0.0.0.0:134 avinash-pc:0 …
AvinashK
  • 113
  • 1
  • 1
  • 5
1
vote
1 answer

Process killing trouble

I am trying to program a server software which involves a lot of testing on java / scala platform. Whenever i compile and execute the code. It starts listening on port 80. Sometimes i need to terminate it by Ctrl+C when it hangs. In that case,…
Aditya Singh
  • 21
  • 2
1
vote
1 answer

FreeBSD netstat -di, Idrop vs Drop and drop count from NIC or kernel?

On FreeBSD what's the difference between Drop and Idrop in the netstat output? $ netstat -di Name Mtu Network Address Ipkts Ierrs Idrop Opkts Oerrs Coll Drop bge0* 1500 00:16:d4:e3:49:31 0 0 0…
jon
  • 181
  • 2
  • 9
1
vote
2 answers

Can ping an ip but does not show up in netstat?

I was wondering if someone would be able to help me with a head scratcher. We have a device that has communicated with our server but is not sending back any data. I am able to ping the IP address which pings successfully but when I do a netstat on…
Adrian
  • 11
  • 1
  • 1
  • 2
1
vote
1 answer

High count packets rejects in established connections because of timestamp

I am trying to set up a Wowza media server using a Dell R710 with 24GB memory and a 10Gbit connection and all the calculations say it should be able to handle around 20k connections however when I get to around 9000 connections, Wowza starts…
Roger
  • 11
  • 1
  • 2
1
vote
2 answers

Can't connect to local server

I'm migrating a client / server application from Linux to Windows and while the Linux version of the server works fine, the Windows version won't connect via localhost. While the program is trying to negotiate the connection I see the following…
Mike
  • 113
  • 1
  • 5
1
vote
1 answer

netstat on fresh install of Solaris 10 update 9

I am attempting to decipher the below output bash-3.00$ netstat -a UDP: IPv4 Local Address Remote Address State -------------------- -------------------- ---------- *.sunrpc Idle *.* …
700 Software
  • 2,233
  • 10
  • 49
  • 77
1
vote
1 answer

Unknown connections to foreign hosts

When I run netstat -a, a lot of connections to foreign hosts show up. It's connected to a whole subnet, ie 123.123.123.x to the port 80. How can I see what is actually going on? My server doesn't look compromised. It's running ArchLinux.
Ledio Berdellima
  • 113
  • 1
  • 3
1
vote
3 answers

debugging spiking netstat "failed connection attempts" with iptables

http://farm4.static.flickr.com/3305/4588110530_a60c934289_o.png This graph is munin collecting netstat -s output. I want to determine where the connections are coming from. There is nothing obvious in wireshark dumps. It's been a while since I've…
someara
  • 21
  • 1
  • 3
1
vote
2 answers

What can I use to monitor which IP address w/name resolution is connected to each PID?

This would be for under Linux particularly. Is there a tool out there, or a script that I could use to monitor IP connections--with name resolution--and, see which process they're connected to? Right now I'm using this: watch -d netstat -peeW…
supercheetah
  • 223
  • 1
  • 2
  • 9
1
vote
5 answers

Httpd problem, suspect an attack but not sure

On one of my servers when I type netstat -n I get a huge output, something like 400 entries for httpd. The bandwidth on the server isn't high, so I'm confused as to what's causing it. I'm suspecting an attack, but not sure. Intermittently, the web…
Bob
1
vote
1 answer

lsof not showing what port a proc is listening on

I have many processes on a box listening on several ports. I am trying to map ports to pids. The problem is that lsof is not telling me what ports belong to which process. Given an apache listening on port 80, I can see it listening via…
ericslaw
  • 1,572
  • 2
  • 13
  • 15
1
vote
1 answer

What does "no ports" on netstat -s mean?

On Windows server 2016, when I execute, in a cmd prompt, "netstat -s" I get a bunch of statistics. One of those is "No Ports". What does this mean? Is this the number of times no port was found to be available when requested? Or does this refer…
Vincent
  • 808
  • 1
  • 9
  • 12
1
vote
0 answers

How to identify which os process is establishing a proxy connection

Platform: Red-Hat 7 I hope you can help me with this. I've been told that one proxy server we are using is going to be decommissioned in the following days. I've tried to use netstat in order to identify which application/os process is actually…
Roberto Hernandez
  • 111
  • 3
1
vote
2 answers

How to find a malicious TCP program using netstat

I am trying to do a homework for a lab but have a quick question. How do I find a malicious TCP service that is still running and the adversary has achieved persistence by creating a systemd service? I think I have to use netstat to find the name of…
beveragerocks
  • 11
  • 1
1 2 3
…
21 22