Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [netstat]

netstat is a tool for viewing active network connections, listeners and sockets.

netstat is a tool for viewing active network connections, listeners and sockets.

322 questions
3
votes
0 answers

netstat e on windows shows really high bytes count

running netstat /e is giving me strange results "bytes received" from netstat /e output is always way higher, about 10 times higher than when netsh interface ip show subinterfaces is run. wireshark also shows similar number as the netsh command, am…
ljk
  • 131
  • 1
3
votes
2 answers

Difference Between Netstat and Access Log

When I was checking stats in SSH terminal for my VPS, I noticed that netstat and access log gives different results. When I used: netstat -anp I saw that one attacker having 32 concurrent connections to port 80 with 123.217.100.19 ip…
NecNecco
  • 221
  • 2
  • 9
3
votes
1 answer

Find number of TCP bytes transmitted

I have rhel4 and rhel6 hosts. I can use netstat -s to see information on the number of segments sent/received. I can use ifconfig to see the number of bytes sent/received on a given interface (for my purposes only one is important, the rest have…
JRG
  • 133
  • 6
3
votes
1 answer

What is a good way to determine a server's connection usage?

Trying to figure out where my system's connections are being used (i.e. how many connections belong to what processes - could even be filtered by some expression through grep, if it applies). The system is running CentOS 6. How can I determine what…
Juan Carlos Coto
  • 677
  • 2
  • 6
  • 13
3
votes
1 answer

What exactly does tcpOutAckDelayed mean, and is it a problem if it's counting up?

What does tcpOutAckDelayed mean, and what causes it to count up? is it an indication of problems or not? The sun doco isnt clear! Thanks, Dan
Codek
  • 203
  • 2
  • 9
3
votes
2 answers

When using netstat on a listening port what is the difference between localhost:6666 and [::]:6666 in 'Local Address' field

Using ubuntu 11.04, I run netstat -nplt the results for local address may be localhost:6666 or [::]:6666 What is the difference? I believe that the [::]: binds the service at port xxxx to all interfaces, (lo, eth0, eth1 ) and …
Dave
  • 367
  • 2
  • 5
  • 11
3
votes
2 answers

FreeBSD Listen Queue Overflows - can't increase max queue size

I have a decently high trafficked FreeBSD Nginx server, and I'm starting to get a large number of listen queue overflows: [root@svr ~]# netstat -sp tcp | fgrep listen 80361931 listen queue overflows [root@svr ~]# netstat -Lan | grep "*.80" tcp4 …
Harry
  • 221
  • 1
  • 5
  • 9
3
votes
2 answers

What does "::" denote in windows netstat results?

I'm trying to understand on which interfaces a TCP port is open Using windows netstat command I get result like : TCP [::]:10000 MyMachineName:0 LISTENING What does the symbol "::" mean here ? for rest of the ports it…
Abhijeet Apsunde
  • 141
  • 5
3
votes
2 answers

How to determine which TCP/UDP ports are being opened by a given process (linux)?

I know how to do the opposite (find out what process has a given port open) using lsof or netstat, but extensive research on Google hasn't helped me solve the reverse problem. I know I could use "netstat -np" combined with some grep and sed, but it…
Alex G
  • 386
  • 1
  • 4
  • 13
3
votes
1 answer

AIX: is it somehow possible to get a ForeignAddress/PID pair like we are able to get in Linux with netstat?

In Linux (RHEL), we are able to get a ForeignAddress/PID pair with "netstat -ntp" command: [root@rhel ~]# netstat -ntp Active Internet connections (w/o servers) Proto Recv-Q Send-Q Local Address Foreign Address State …
user54614
  • 379
  • 2
  • 6
  • 18
3
votes
2 answers

iftop Shows Lots of Mysterious Connections - Not Showing in netstat

I've just stopped all pretty much all services except sshd on my server (Ubuntu Server 10.04), and when I run iftop I get output that looks like this: 12.5Kb 25.0Kb 37.5Kb 50.0Kb …
HOLOGRAPHICpizza
  • 153
  • 1
  • 5
3
votes
3 answers

python reports socket in use, netstat and others claim its not

We have a strange socket issue with a RHES3 box: Python 2.4.1 (#1, Jul 5 2005, 19:17:11) [GCC 3.2.3 20030502 (Red Hat Linux 3.2.3-52)] Type "help", "copyright", "credits" or "license" for more information. >>> import socket >>> s =…
captainmish
  • 308
  • 3
  • 10
3
votes
2 answers

Interpreting Netstat output

I have a LAMP stack running Fedora 12 and I am run the following instruction through the command line on the server: netstat -anp |grep 'tcp\|udp' | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n As far as I understand this should show me…
Adrien Hingert
  • 309
  • 2
  • 3
  • 9
3
votes
2 answers

What does each field of netstat -ano mean?

tcp 0 0 219.155.32.195:8888 221.137.227.51:5943 TIME_WAIT timewait (58.45/0/0) tcp 0 0 219.155.32.195:8888 221.137.227.51:5936 TIME_WAIT timewait (59.36/0/0) tcp 0 2944 219.155.32.195:8888 …
kernel
  • 8,561
  • 6
  • 20
  • 14
3
votes
0 answers

Netstat Send-Q High

Am using Ubuntu Server 10.10 and when i do netstat -tuna i get the many connections with Send-Q very high, 23K, 50K, 100K. This users report that they have latency problems when connecting to the server. How can i enhance this or what tips can i…
Luis Alvarado
  • 179
  • 1
  • 11
1 2 3
…
21 22