On Ubuntu, how do I get a list of network connections my computer has made in the last few days? Is there a easy way to do this?

  • for future cases, you can set up your system as described in there. – sazary Jan 30 '13 at 20:59

You can't get ended connections unless you were logging them. To get the current connections:

# sudo netstat -tupn

This will show the current opened source and destination ports with IPs.

To get more details about the contents of the connections, install tcpdump if it's not installed and run:

# sudo tcpdump -X -i eth0 

And you can run that in the background and write the output to a file.

  • Thanks @islam. Is there is a good way to automatically convert the ip address in netstat to their corresponding dns entries? – Saqib Ali Jan 30 '13 at 22:31
  • 1
    In the netstat remove the argument 'n' which means don't resolve IPs to hostnames. – Islam Jan 31 '13 at 8:00
  • I would recommend adding the -a (all) flag as well. – cupojavashort Jan 31 '13 at 10:58

If you are loooking for a list of ports you can use:

netstat -tupn | grep -E ":(22|80|8000) .*"


netstat -tupn | grep -E ":(22|80|8000) .*ESTABLISHED"

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.