24

On Ubuntu, how do I get a list of network connections my computer has made in the last few days? Is there a easy way to do this?

1
  • for future cases, you can set up your system as described in there.
    – sazary
    Jan 30, 2013 at 20:59

2 Answers 2

37

You can't get ended connections unless you were logging them. To get the current connections:

# sudo netstat -tupn

This will show the current opened source and destination ports with IPs.

To get more details about the contents of the connections, install tcpdump if it's not installed and run:

# sudo tcpdump -X -i eth0 

And you can run that in the background and write the output to a file.

4
  • Thanks @islam. Is there is a good way to automatically convert the ip address in netstat to their corresponding dns entries?
    – Saqib Ali
    Jan 30, 2013 at 22:31
  • 1
    In the netstat remove the argument 'n' which means don't resolve IPs to hostnames.
    – Islam
    Jan 31, 2013 at 8:00
  • I would recommend adding the -a (all) flag as well. Jan 31, 2013 at 10:58
  • 1
    sudo netstat -tupnc <-- added c for continuous if you need to watch it for live connections.
    – rjkunde
    Apr 29, 2020 at 1:09
1

If you are loooking for a list of ports you can use:

netstat -tupn | grep -E ":(22|80|8000) .*"

or

netstat -tupn | grep -E ":(22|80|8000) .*ESTABLISHED"

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .