Questions tagged [netstat]

netstat is a tool for viewing active network connections, listeners and sockets.

netstat is a tool for viewing active network connections, listeners and sockets.

322 questions
1
vote
0 answers

Get information about socket of unknown domain

The output of lsof (revision: 4.87) on centos 7.8.2003 shows: COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME java 30858 xxxx 841u sock 0,7 0t0 561359758 protocol: TCPv6 java 30858 xxxx …
William Pursell
  • 204
  • 1
  • 3
1
vote
1 answer

SAMBA netstat local address 0.0.0.0

Trying to run samba AD DC but I'm stuck. After created domain provision, I defined resolv.conf: cat /etc/resolv.conf nameserver 10.99.0.30 search example.com Service running: samba-ad-dc.service - Samba Active Directory Domain Controller Loaded:…
SimonLi
  • 49
  • 1
  • 6
1
vote
3 answers

How can a server accept incoming traffic to port 443 if it isn't listed in netstat?

I have a server that is currently accepting HTTPS requests and the only thing that shows with netstat -plnt is this: elijahlynn@web:~$ sudo netstat -plnt Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign…
Elijah Lynn
  • 141
  • 6
  • 17
0
votes
1 answer

Huge amount of imap-login netstat

When I run a netstat -plantu I have a huge amount of ESTABLISHED imap-login, perhaps 50 or 60 connection. Some connections have in column Send-Q a big number like 3211206 or 114636 for example, and all other are at 0. Is that normal? For information…
simon
  • 149
  • 2
  • 7
0
votes
0 answers

List active sessions from tun interface

I'm running CentOS and have a tun interface with IP subnet 10.0.0.0/24 attached for "users". Is it possible to list current active sessions with netstat, ss or similar? Ex. netstat something: tun-mytest 10.0.2.32/32 tun-mytest …
Alfred Balle
  • 409
  • 3
  • 9
  • 22
0
votes
1 answer

Using netsh or netstat (or other native tool) to display UDP traffic to Windows server from given host

We have a Windows server that we suspect is not receiving UDP traffic from a Linux server. We've been able to establish, using tcpdump, that the Linux server is sending UDP traffic and we would like to display UDP traffic coming into the Windows…
Olumide
  • 101
  • 2
0
votes
1 answer

Filter ss process output without using grep

ss -p can give the process name, process id (PID) and the file descriptor associated with the connection. Example: ss -tuanp [...] tcp ESTAB 0 0 x.x.x.x:59594 x.x.x.x:993 users:(("thunderbird",pid=1985,fd=98)) [...] While the filter…
wget
  • 291
  • 2
  • 8
0
votes
0 answers

CENTOS 7 - Auto block IP with null routes

Whenever I notice overload on my media (videos) server, I check for ddos with this command from netstat: netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n It shows currently established connection number by IP. Basically, for…
0
votes
1 answer

Remove tcp entry from netstat -a

I have a rather strange issue and no matter what I do or search, I cannot rectify it and have now decided to seek help here initially. I have a cluster of servers, about 10 clustered together. A few weeks ago, one of the servers stopped…
GreyStone
  • 45
  • 5
0
votes
0 answers

Why can't I ping 127.0.0.1 from some network interfaces?

I'm on OS Sierra. This is (part of) what I get on ifconfig ... en0: flags=8863 mtu 1500 ether 98:01:a7:b4:91:63 inet6 fe80::4e:52ae:9fa8:2e6c%en0 prefixlen 64 secured scopeid 0x5 inet…
0
votes
3 answers

apache is up but does not read requests

This usually happens a few minutes after restarting apache: httpd daemons are up, but are not reading the requests from the sockets. The web clients just wait forever on the connection. When I run netstat, the Recv-Qs are showing a positive byte…
Sleepster
  • 117
  • 1
  • 3
0
votes
0 answers

Remote Client is unable to connect to TCP Server on VPS (Getting 10060 error)

I have searched all over the internet for the solution. Unfortunately, I could not get any working solution yet. Here is the story. I am running TCP server for small communication application on the VPS with Window Server 2012. VPS is the commercial…
maxIT1
  • 1
  • 1
0
votes
1 answer

On a web server, is it normal to see a thousand connections coming from one user?

When I saw so many connections from one IP (by using netstat), I thought it's bot. (The website is not popular so it's very unlikely to be multiple users behind one IP.) But I checked apache access log, the paths and user agent of requests from this…
cshu
  • 101
  • 2
0
votes
0 answers

Collectd won't open listener

So I've been stuck with this for sometime now. I want to use collectd with graphite. Im using centos 7. I've made the necessary changes in collectd.conf as seen below: [root@relay-1 ~]# grep -v "#" /etc/collectd.conf LoadPlugin syslog LoadPlugin…
Mustafa Mujahid
  • 73
  • 1
  • 1
  • 5
0
votes
1 answer

Uderstanding netstat output

When I run netstat -b on Windows 10 I get lots of results of similar nature TCP 127.0.0.1:64248 LocalHostName:64249 ESTABLISHED [w3wp.exe] TCP 127.0.0.1:64249 LocalHostName:64248 ESTABLISHED [w3wp.exe] I would like to know…
Kimi
  • 213
  • 1
  • 2
  • 6