{"id":14512,"date":"2013-11-23T18:29:44","date_gmt":"2013-11-23T18:29:44","guid":{"rendered":"http:\/\/www.beautifulwork.org\/?p=14512"},"modified":"2013-11-23T18:29:44","modified_gmt":"2013-11-23T18:29:44","slug":"netstat-print-network-connections-routing-tables-interface-statistics-masquerade-connections-and-multicast-memberships","status":"publish","type":"post","link":"https:\/\/www.trueangle.org\/index.php\/2013\/11\/23\/netstat-print-network-connections-routing-tables-interface-statistics-masquerade-connections-and-multicast-memberships\/","title":{"rendered":"What does the command “netstat ” do ?"},"content":{"rendered":"

ABOUT netstat<\/p>\n

\nIn computing, netstat (network statistics) is a command-line network utility tool that displays network connections for the Transmission Control Protocol (both incoming and outgoing), routing tables, and a number of network interface (network interface controller or software-defined network interface) and network protocol statistics. It is available on Unix-like operating systems including macOS, Linux, Solaris, and BSD, and is available on Windows NT-based operating systems including Windows XP, Windows Vista, Windows 7, Windows 8 and Windows 10.\n\nIt is used for finding problems in the network and to determine the amount of traffic on the network as a performance measurement.[1] On Linux this program is mostly obsolete, although still included in many distributions.\n\nOn Linux, netstat (part of \"net-tools\") is superseded by ss (part of iproute2). Replacement for netstat -r is ip route. Replacement for netstat -i is ip -s link, replacement for netstat -g is ip maddr, all of which are recommended instead\n<\/pre>\n
RELATED SHELL SESSION EXPOSURE
\n[bash light=”true”]
\n$netstat –tcp
\nActive Internet connections (w\/o servers)
\nProto Recv-Q Send-Q Local Address           Foreign Address         State
\ntcp        0      0 debian.local:39585      74.125.169.8:http       ESTABLISHED
\ntcp        0      0 debian.local:39586      74.125.169.8:http       ESTABLISHED
\ntcp        0      0 debian.local:47951      maa03s17-in-f6.1e:https ESTABLISHED
\ntcp        0      0 debian.local:47203      maa03s17-in-f0.1e1:http ESTABLISHED
\n$
\n$netstat –tcp –numeric
\nActive Internet connections (w\/o servers)
\nProto Recv-Q Send-Q Local Address           Foreign Address         State
\ntcp        1      0 192.168.0.101:54541     46.22.210.18:80         CLOSE_WAIT
\ntcp        0      0 192.168.0.101:54542     46.22.210.18:80         ESTABLISHED
\ntcp        0      0 192.168.0.101:39585     74.125.169.8:80         ESTABLISHED
\ntcp        0      0 192.168.0.101:39586     74.125.169.8:80         TIME_WAIT
\ntcp        0      0 192.168.0.101:47951     74.125.236.198:443      ESTABLISHED
\ntcp        0      0 192.168.0.101:47203     74.125.236.192:80       ESTABLISHED
\n$netstat –tcp –numeric
\nActive Internet connections (w\/o servers)
\nProto Recv-Q Send-Q Local Address           Foreign Address         State
\ntcp        0      0 192.168.0.101:54542     46.22.210.18:80         TIME_WAIT
\ntcp        0      0 192.168.0.101:39585     74.125.169.8:80         ESTABLISHED
\ntcp        0      0 192.168.0.101:39586     74.125.169.8:80         TIME_WAIT
\ntcp        0      0 192.168.0.101:47951     74.125.236.198:443      ESTABLISHED
\ntcp        0      0 192.168.0.101:47203     74.125.236.192:80       ESTABLISHED
\n$netstat –tcp –listen
\nActive Internet connections (only servers)
\nProto Recv-Q Send-Q Local Address           Foreign Address         State
\ntcp        0      0 *:35436                 *:*                     LISTEN
\ntcp        0      0 *:sunrpc                *:*                     LISTEN
\ntcp        0      0 *:ssh                   *:*                     LISTEN
\ntcp        0      0 localhost:smtp          *:*                     LISTEN
\ntcp6       0      0 [::]:sunrpc             [::]:*                  LISTEN
\ntcp6       0      0 [::]:501100              [::]:*                  LISTEN
\ntcp6       0      0 [::]:ssh                [::]:*                  LISTEN
\ntcp6       0      0 localhost:smtp          [::]:*                  LISTEN
\n$netstat –tcp –listen
\nActive Internet connections (only servers)
\nProto Recv-Q Send-Q Local Address           Foreign Address         State
\ntcp        0      0 *:35436                 *:*                     LISTEN
\ntcp        0      0 *:sunrpc                *:*                     LISTEN
\ntcp        0      0 *:ssh                   *:*                     LISTEN
\ntcp        0      0 localhost:smtp          *:*                     LISTEN
\ntcp6       0      0 [::]:sunrpc             [::]:*                  LISTEN
\ntcp6       0      0 [::]:501100              [::]:*                  LISTEN
\ntcp6       0      0 [::]:ssh                [::]:*                  LISTEN
\ntcp6       0      0 localhost:smtp          [::]:*                  LISTEN
\n$netstat –tcp –program
\n(Not all processes could be identified, non-owned process info
\n will not be shown, you would have to be root to see it all.)
\nActive Internet connections (w\/o servers)
\nProto Recv-Q Send-Q Local Address           Foreign Address         State       PID\/Program name
\ntcp        0      0 debian.local:39600      74.125.169.8:http       ESTABLISHED 3846\/chrome
\ntcp        0      0 debian.local:47951      maa03s17-in-f6.1e:https ESTABLISHED 3846\/chrome
\ntcp        0      0 debian.local:47203      maa03s17-in-f0.1e1:http ESTABLISHED 3846\/chrome
\n$
\n$netstat –tcp –route
\nKernel IP routing table
\nDestination     Gateway         Genmask         Flags   MSS Window  irtt Iface
\ndefault         192.168.0.1     0.0.0.0         UG        0 0          0 eth0
\n192.168.0.0     *               255.255.255.0   U         0 0          0 eth0
\n$netstat –tcp –statistics
\nIcmpMsg:
\n    OutType3: 1
\nTcp:
\n    522 active connections openings
\n    0 passive connection openings
\n    14 failed connection attempts
\n    16 connection resets received
\n    2 connections established
\n    60302 segments received
\n    41524 segments send out
\n    22 segments retransmited
\n    21 bad segments received.
\n    140 resets sent
\nUdpLite:
\nTcpExt:
\n    190 TCP sockets finished time wait in fast timer
\n    495 delayed acks sent
\n    1 delayed acks further delayed because of locked socket
\n    Quick ack mode was activated 32 times
\n    47899 packet headers predicted
\n    1353 acknowledgments not containing data payload received
\n    406 predicted acknowledgments
\n    7 congestion windows recovered without slow start after partial ack
\n    22 other TCP timeouts
\n    32 DSACKs sent for old packets
\n    3 DSACKs sent for out of order packets
\n    5 DSACKs received
\n    25 connections reset due to unexpected data
\n    16 connections reset due to early user close
\n    TCPSackShiftFallback: 2
\n    TCPChallengeACK: 21
\n    TCPSYNChallenge: 21
\nIpExt:
\n    InMcastPkts: 929
\n    OutMcastPkts: 42
\n    InBcastPkts: 16
\n    OutBcastPkts: 14
\n    InOctets: 83827635
\n    OutOctets: 2776707
\n    InMcastOctets: 332300
\n    OutMcastOctets: 5264
\n    InBcastOctets: 1808
\n    OutBcastOctets: 1006
\n$<\/p>\n
[\/bash]
\nLINKS
\nhttps:\/\/en.wikipedia.org\/wiki\/Netstat<\/a>
\nhttps:\/\/stackoverflow.com\/tags\/netstat\/info<\/a><\/p>\n
Bash – netstat  ( network statistics related )  –  Video Tutorial Related <\/u><\/h4>\n
[ source : http:\/\/www.youtube.com\/user\/metalx1000<\/a> ]<\/p>\n
\n[youtube https:\/\/www.youtube.com\/watch?v=wcrQgKNUD10?rel=0&w=560&h=315]\n<\/pre>\n","protected":false},"excerpt":{"rendered":"
ABOUT netstat In computing, netstat (network statistics) is a command-line network utility tool that displays network connections for the Transmission Control Protocol (both incoming and outgoing), routing tables, and a number of network interface (network interface controller or software-defined network interface) and network protocol statistics. It is available on Unix-like operating systems including macOS, Linux, … <\/p>\n
Continue reading “What does the command  “netstat ” do ?”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[7,91],"tags":[457,832,1157],"_links":{"self":[{"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/posts\/14512"}],"collection":[{"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/comments?post=14512"}],"version-history":[{"count":0,"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/posts\/14512\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/media?parent=14512"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/categories?post=14512"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.trueangle.org\/index.php\/wp-json\/wp\/v2\/tags?post=14512"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}