netstat is a tool for viewing active network connections, listeners and sockets.
netstat is a tool for viewing active network connections, listeners and sockets.
Questions tagged [netstat]
322 questions
3
votes
1 answer
Lots of TIME_WAIT connections in netstat (Windows Server 2008)
I'm having some issues on a Windows 2008 server with some network connections not going through. For instance, in a web application on the server, we need to open a socket connection to another server, and this fails sometimes with the following…
Rhys Causey
- 191
- 1
- 2
- 7
3
votes
1 answer
TIME_WAIT in netstat of Apache processes
What are the meaning of the TIME_WAIT when using netstat of my web server process? I am sure the web server is not over loaded.
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 15655/apache2
tcp 0 0…
Howard
- 2,135
- 13
- 48
- 72
3
votes
1 answer
Ierrs on Network Interface - Pfsense/Freebsd
We're using PfSense as an internal router/firewall (no connection to WAN). Using the Web-GUI, under Status ---> Interfaces, there's one particular interface where I have some errors:
In/out errors 3513/0
I then SSHed to the firewall to…
JFA
3
votes
0 answers
How to tell whether a linux tcp socket had recent activity?
Most of the time, when changing or upgrading a network service, I would do this during maintenance hours but some services are rarely used so it is tempting to just check whether it is currently in use and if not, take it down for a minute or…
Gamification
- 131
- 4
3
votes
1 answer
Show TCP keepalive status in Windows?
Using netstat -to on a Linux system shows the status of tcp keepalive for a socket like this:
Proto Recv-Q Send-Q Local Address Foreign Address State Timer
tcp6 0 0 192.168.210.114:3389 192.168.10.57:52914 …
T-Me
- 163
- 4
3
votes
2 answers
netstat reports UDP ports with no owning process
When I run netstat -avp udp I get a slowly growing number of ports. It grows about 100 an hour but the rate varies considerably.
When I close the process, the ports do not disappear from the list. Similarly when I kill the process. Restarting the…
Simon G.
- 131
- 2
3
votes
1 answer
cURL can connect to localhost but browser cannot
My system is Win10 with WSL2, I ran a gogs docker container (from ubuntu in WSL):
83b2a8833235 gogs/gogs "/app/gogs/docker/st…" 17 minutes ago Up 17 minutes 0.0.0.0:10022->22/tcp, :::10022->22/tcp,…
Ken Tsoi
- 133
- 1
- 6
3
votes
1 answer
DDOS manual mitigation using command netstat. How to determine real attackers?
When my server is slow, I have been told to run this command and check if someone is making a request of SYN_RECV to slow down my server:
netstat -npt | grep SYN_RECV | awk '{print $5}' | grep -Eo '([0-9]{1,3}\.){3}[0-9]{1,3}' | cut -d: -f1 | sort…
Kalib Zen
- 137
- 7
2
votes
1 answer
netstat says connection in SYN_SENT but tcpdump captures no data
I'm debugging a ldap problem after ldap client machine upgraded to ubuntu 18.04. Trying to figure out where the problem is, and I noticed the outbound connection is in SYN_SENT, but when I use tcpdump to capture the problem, both server and client…
dhchen
- 183
- 3
- 12
2
votes
1 answer
why are there are so many svchost established connections to Isilon?
Our client has a Isilon (used only for smb) with few nodes attached to it. When I run TCPView I don't understand why svchost service established the connection and why there're so many of them:
And the ip 10.64.4.212:
I run svchost analyzer to…
Okrx
- 73
- 1
- 12
2
votes
1 answer
Debian 8 - getnameinfo Failed Error - netstat
I am experiencing a error/warning when running any netstat command on my Debian 8 machine.
One of the commands:-
netstat | grep http | wc -l
The result:-
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo…
daygle
- 41
- 1
- 5
2
votes
0 answers
In the output of netstat -r, what is the meaning of the "Netif" column and how does it differ to the "Gateway" column?
I can find virtually no documentation of the meaning of the column "Netif" in the output of netstat -rn. Googled for it, searched through the netstat(1) and route(8) man pages and found the following sentence as the clearest bit of information on…
papiro
- 159
- 1
- 8
2
votes
1 answer
What is running on port 49181 Windows 7
I have an application that relies on port 63000 for communicating with other devices over the network.
Some while ago this app stopped working on the PC.
I tried all sorts of firewall configs, ON/OFF etc but no effect.
Today I noticed that even…
TenG
- 143
- 6
2
votes
1 answer
Getting current connections from nginx/access.log
Hello im looking for command like this
netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n
But based on activity from /var/log/nginx/access.log
Im aware that access.log can't provide currently handled connections, so the best…
user276349
2
votes
2 answers
Source and destination servers showing different number of established TCP connections
I have a JBoss app server and a Postgres database server on different machines. I'm troubleshooting TCP connections between them (because the app keeps running out of database connections).
I'm seeing this and it makes no sense:
When I do a netstat…
David Carboni
- 181
- 1
- 4