netstat is a tool for viewing active network connections, listeners and sockets.
netstat is a tool for viewing active network connections, listeners and sockets.
Questions tagged [netstat]
322 questions
2
votes
1 answer
Cannot Connect Via RDP
I cannot connect via RDP to a win2003 server. Terminal services say that they're started, but a netstat shows nothing to do with port 3389. Any ideas?
direMonky
- 23
- 2
2
votes
1 answer
Why netstat reporting incorrect machine names?
I need to investigate what clients connected to my application and I am using the netstat command for this. I noticed that sometimes it does not report me the correct machine name.
Why this is happening? Is there a better way to get the list of…
gyurisc
- 139
- 2
- 11
2
votes
1 answer
Netstat shows two sshd's listening, but only one pid
On my Linode sudo netstat -tulp gives me:
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 *:ssh *:* LISTEN 2030/sshd
tcp 0 0 *:http …
Kyle Schmidt
- 45
- 8
2
votes
1 answer
Dovecot claims ports are in use, netstat disagrees
Attempting to start dovecot gives me this:
Apr 28 13:37:00 master: Error: service(pop3-login): listen(*, 110) failed: Address already in use
Apr 28 13:37:00 master: Error: service(pop3-login): listen(*, 995) failed: Address already in use
Apr 28…
user646372
- 71
- 5
2
votes
0 answers
Kernel TCP tuning for buffer overrun and packet collapse
We have a Nginx+Ruby application where the data between Nginx and the application are interfaced through a socket.
As part of performance improvement, when we analyzed the netstat statistics on the application side we saw these:
5334 packets…
madu
- 143
- 3
1
vote
0 answers
Iptables rule for limiting connections per ip
I'm usig the following iptable rule to limit the amount of simultaneous connections to 1 connection per ip, on port 4387.
/sbin/iptables -A INPUT -p tcp --syn --dport 3387 -m connlimit --connlimit-above 1 -j REJECT
Keeping in mind that there are…
NFC
- 11
- 1
1
vote
0 answers
IP Show on netstat -n
Could someone with more experience help me in this?
I have an idea in my head and i've been trying to put it into practice.
I have two machines, one where the application is hosted (I'll call it "Real Machine") and the other that would act as a…
Renan
- 11
- 1
1
vote
0 answers
Duplicate Local Port in Virtual Guest's /proc/net/tcp
I'd like to understand the following two entries in my VirtualBox's guest's /proc/net/tcp:
6: 00000000:18EB 00000000:0000 0A 00000000:00000000 00:00000000 00000000 0 0 9581 1 0000000000000000 100 0 0 10 0
39: 6C38A8C0:18EB…
jimmytann
- 111
- 1
1
vote
1 answer
Local webserver with long response time
We have set up a new infrastructure and all our Laptops/PCs have a the same error:
When trying to open a website from a local webserver, it takes between 10 and 30 seconds. During this time it does not even start to load the site.
Setup
Lenovo T…
Sven OS
- 11
- 3
1
vote
1 answer
netstat vs nmap to find IPs in a local network
I'm in a local network : IPv4 shared address space (100.x.x.x). Connected to a wifi hotspot. Ip ranges : 100.76.164.0/23
When I run :
nmap 100.76.164.0/23 : It says all the hosts are down
netstat -rn : it gives me a list of about 25 local ips…
Johnny Pralo
- 11
- 2
1
vote
1 answer
netstat shows connected socket with path to it, but path doesn't exist
Im inside a docker container and ran netstat -x | grep docker
which got me the:
unix 3 [ ] STREAM CONNECTED 62288711 /var/run/docker.sock
unix 3 [ ] STREAM CONNECTED 59416957 /var/run/docker.sock
unix 3 …
InsOp
- 113
- 4
1
vote
1 answer
Why is kjournald showing up 700 times in `netstat`?
AFAIK, kjournald is not a network program, but a program that deals with the journal of EXT3 (I am running EXT4 on Ubuntu 16.04). Still, when running sudo netstap -tapn it shows up almost 700 times, connecting to an IP belonging to some company in…
oligofren
- 641
- 2
- 8
- 23
1
vote
0 answers
How to configure Linux to close the connection if Send-Q is never sent?
There is a TCP client-server connection. The application on the server is sending data regularly. Client machine is then reset physically. Netstat shows Send-Q on the server is filling up, the connection is in the ESTABLISHED state. How to make it…
Velkan
- 344
- 3
- 19
1
vote
1 answer
What are all these DGRAM items in NETSTAT?
I am assigned a server that has been sending tons of data ourside and isn't used. So, it is most likely compromised. Nothing really seems to be out of order on the server except, they're miles and miles of these DGRAM items in netstat.
unix 2 …
LUser
- 217
- 1
- 6
- 15
1
vote
1 answer
How to deal with TCP connections attack on Linux
My server is being flooded until apache becomes non-responsive, and I need some help finding and blocking the responsible IP address(es).
Normally, I don't have more than 150 connections. Now I have thousands:
netstat -nat | awk '{print $6}' | sort…
andreszs
- 709
- 1
- 6
- 16