Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [netstat]

netstat is a tool for viewing active network connections, listeners and sockets.

netstat is a tool for viewing active network connections, listeners and sockets.

322 questions
2
votes
0 answers

Why netstat -p doesn't show PID of established connections?

I have some REST service which is listening on tcp/8051 I'm querying this service with curl in infinite loop from the same host: while true; do curl --header "Authorization: Bearer NDkwMjM3NzEtN2U2NS00ZDVkLThhYzItOThmZTliODljNWJj" -k…
user1700494
  • 1,642
  • 2
  • 12
  • 21
2
votes
0 answers

How to aggregate reports given by nestat?

In this question OP gives some reports that has been generated with netstat. However, the more I look at the switches of netstat, the less I can find how to generate that report. The sample report is: Process Id = 0, State = TIME_WAIT have 130,053…
Saeed Neamati
  • 451
  • 2
  • 8
  • 18
2
votes
0 answers

How to resolve UDP packets being dropped given netstat reporting SndbufErrors

I have a server instance on an OpenStack that at a pretty high load starts loosing UDP packets. I captured all outgoing packets using tcpdump and some of them are missing, even though application logs imply that they should have been sent. Usual…
eddyP23
  • 243
  • 4
  • 11
2
votes
1 answer

Why does this "netstat -tln" output show entries for "0.0.0.0:22" and "127.0.0.1:3306"

When I run the command netstat -tln I see the following output: Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 127.0.0.1:3306 0.0.0.0:* …
Sunny
  • 381
  • 1
  • 6
  • 16
2
votes
2 answers

What does `SYNs to LISTEN sockets dropped` from `netstat -s` mean

I could found 437 SYNs to LISTEN sockets dropped from netstat -s from the server on my server which runs nginx. I found this explanation from the man page: --statistics, -s, Display summary statistics for each protocol. Then what does this count 437…
larryzhao
  • 205
  • 4
  • 8
2
votes
0 answers

cannot bind a port altough LISTEN

I'm new to this problem I'm using Ubuntu 12.04 LTS via VMware My problem is to bind port 6703 i tried alot of commands to check if this port or open or not Error Message is Failed to bind to: 0.0.0.0/0.0.0.0:6703 My result after (("try")) to…
user1
  • 121
  • 1
2
votes
1 answer

Netstat showing multiple connections for on ssh login

I connect to my server via ssh. I am the only person who has access to connect to the server. After connecting via ssh, I run the following command: sudo netstat -tupn The output includes the following two lines: Active Internet connections (w/o…
flyingL123
  • 245
  • 4
  • 12
2
votes
1 answer

Is it possible to deterministically trace how port 80 is forwarded and where the configuration is on a given system?

Is there a way to determine or trace how a port forwarding configuration is set up on a system running Ubuntu 14.04 LTS, on which there is a NodeJS service running and somehow accepting connections via port 80, although the service itself is running…
zealoushacker
  • 163
  • 6
2
votes
1 answer

Does the netstat counter wrap around? And over what period are they collected?

If I run netstat -s on my solaris 10 box, I got a lot of network statistics. Are these counters since the time of system boot, or some other arbitrary period? And some of the numbers are quite large. Does it wrap-around at some point?
user55570
  • 458
  • 6
  • 18
2
votes
1 answer

How to use non-deprecated tools like ss to get process id running on a port?

I am looking for a non-deprecated way of running a command like netstat -tulpn | grep 8000 to output information about an active port. Any suggestions on how to use a tool like ss to get the process id? I have a localhost running on port 8000, but…
modulitos
  • 335
  • 1
  • 3
  • 16
2
votes
2 answers

Limit to number of listening ports in linux

I have tried to launch a script to listen to thousands of tcp ports (1000 to 10000) but it appears to be hitting a limit of 1024 listening ports. I've confirmed this via netstat and closed ports above certain ranges. Is there a fixed limit of…
loloy.batoytoy
  • 53
  • 4
2
votes
5 answers

Is there a netstat -s equivalent for windows?

I know that netstat -s exists on Windows, but it displays way less informations than on Linux/OS X. It only gives 8 counters about TCP, while on Linux it's more than 50. I'm looking for any TCP-related counters such as: Linux: TCPDSACKOldSent,…
jean-loup
  • 127
  • 2
  • 9
2
votes
1 answer

Cannot install net-tools on Red Hat Linux

The isolated networking lab is running Red Hat Linux 9 (Shrike). We still use this "ancient" release, because given the simplicity of the protocols examined, it is sufficient. In addition, because of the equipment and the textbook we are following,…
George
  • 133
  • 4
2
votes
2 answers

Determine from where is "sh" being run under apache www-data user using using PF or NETSTAT

I am working with a compromised Ubuntu 8.04 Plesk 9.5.4 server. It seems that a script on the server is continuously doing reverse lookups to random IPs on the Internet. I first spotted it during by using top and then noticed flashes of this coming…
Eugene van der Merwe
  • 435
  • 5
  • 9
  • 21
2
votes
2 answers

How to map an ephemeral port to a pid?

I have a RHEL server with several apps on it and I am attempting to figure out which one of them is making calls to an external web service. I have TCP dumps that show the calls being made and through various tools I am able to determine what…
jdw
  • 3,855
  • 2
  • 17
  • 21
1 2 3
…
21 22