Questions tagged [netstat]
analysis tool for statistics about active connections, open sockets, routing tables; in general the networking subsystem.
73
questions
0
votes
0
answers
34
views
Cant reach opened port on Oracle ubuntu
like i wrote in topic, i cant reach opened port 25565 but i can reach opened port 4000 like below. On port 4000 i have nomachine service and everything works fine.
PS C:\Users\WONSZ> Test-...
- 1
0
votes
0
answers
21
views
Determinine how long ufw was disabled for?
I booted my computer today and noticed that ufw was disabled.
I always keep ufw enabled with default deny incoming.
I am trying to determine when it was disabled.
I tried checking the logs using tail -...
- 23
0
votes
0
answers
21
views
Server is making connection to itself?
I am often doing netstat analysis, and checking for number of connections to my servers.
However, what is confusing me that all is normal, but my server by itself is making the most connections.
When ...
- 1
2
votes
1
answer
226
views
Oneliner to get the command which started a process on a certain port
I would need a one-line command which, given a port number, returns information on the command which started the process running on that port.
Usually, I get this information by running a sudo netstat
...
- 247
11
votes
2
answers
18k
views
netstat: command not found
I installed xampp to run a server as part of a guide, but it wasn't working. After trying to run it from command line, I got the following output:
$ sudo ./xampp start panel
Starting XAMPP for Linux 8....
- 988
0
votes
1
answer
596
views
UFW port open, netstat does not show it
the result of ufw status
is
To Action From
-- ------ ----
22/tcp ALLOW Anywhere
80/tcp ALLOW ...
- 71
1
vote
1
answer
212
views
How to prevent flood of unwanted established connections - iptables
There seem to be a flood of unwanted, established port 22 connections to my server. When running sudo netstat -natup | grep 'ESTABLISHED' as root, I get a long list of unwanted established connections,...
- 31
2
votes
0
answers
253
views
What is listening on ports 2049, 34117 and 36105?
fadedbee@ubuntu18:~$ sudo netstat -lntp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 ...
- 778
1
vote
0
answers
41
views
ID process making HTTP request
My firewall is detecting my ubuntu server calling a URL on port 80 sporadically. I'd like to ID the process making the callout, but the connection is always gone by the time I can run a netstat.
A lot ...
- 11
0
votes
0
answers
170
views
strace, netstat or tcpdump to identify unknown network activity and program
I've been trying to uncover the origin of some network calls, specifically to ip addresss associated with bc.googleusercontent.com
I'm a bit curious why this network activity only happens when using ...
- 449
-4
votes
1
answer
691
views
What is the difference between route and netstat? [closed]
It seems that route and netstat return almost the same results. What is the difference between them? Why are there two commands giving redundant results? Isn't it better to consolidate the duplication ...
- 941
0
votes
0
answers
2k
views
Netstat doesn't show a process for port 53, how can I unbind the port and stop listening on it?
I am trying to install AdGuardHome but it is unable to bind to 0.0.0.0:53 because it is already being used. I tried their automated fix, as well as manually following their instructions:
Deactivate ...
4
votes
1
answer
129
views
A strange path is being printed for an entry when netstat command is used?
When I used the netstat -a command to check for active connections, I encountered this entry under active unix domains sockets(servers and established)
Proto Refcnt Flags Type State ...
- 41
0
votes
1
answer
515
views
How is 0.0.0.0:22 under the column local address of netstat command related to ip address?
I have a Ubuntu server and I connect to it from home computer using SSH. Once I connected, on the terminal of the server, netstat shows under the column "local address", 0.0.0.0:22
For example, say ...
- 41
0
votes
0
answers
304
views
what does mean 0.0.0.0:22 under the column local address of netstat command?
I read that 0.0.0.0:22 means that access to port 22 is allowed from any ip addresses (any other computers). However, the column "local address" of netstat only refers to ip of local addresses (local ...
- 41
4
votes
2
answers
970
views
Difference between netstat and ss and how to convert commands?
what's the equivalent using ss command ?
netstat -antp
netstat -lntp
what's the difference if we use ss with no hyphen and with ss -a ?
what does this command do for us ss -antlp ?
- 67
7
votes
3
answers
38k
views
What does the -tulpn option mean for netstat?
For finding out which ports of the machine are being opening by which services, I used:
netstat -tulpn
I checked the man page for netstat command, but I found nothing about this option. What's the ...
- 261
3
votes
2
answers
4k
views
Strange output for netstat command
I'm getting a strange output for the netstat -tup. What I mean by strange is I never got this output before when nothing connected to the network/internet (connected to the network, but not using it, ...
- 31
-1
votes
1
answer
279
views
Hide Real IP - Ubuntu
Can i hide the real IP of my machine in "netstat -n"?
Perhaps using the iptables masquerade function?
(When the user is logged into the application and runs the netstat -n command, he can view the ...
- 1
1
vote
1
answer
528
views
Something blocking port 80
So I'm trying to get Apache to run on AWS server again and I'm running into this error:
(98)Address already in use: AH00073: make_sock: unable to listen for connections on address [::]:80
(98)Address ...
- 11
1
vote
0
answers
386
views
Need to set default route to upstream DHCP interface on Ubuntu Server 18.04 LTS
I'm building an edge router using Ubuntu Server 18.04.03 LTS and need to configure the routing table to define the default route as being the upstream / WAN interface, which gets its IP address and (...
- 459
1
vote
1
answer
217
views
kdeconncted connections?
I have a number of Ubuntu Bionic hosts on a network. I noticed a connection between two of them (in netstat) that showed a connection between two of the hosts.
In syslog, I see that it's seeking out ...
- 151
0
votes
1
answer
1k
views
How to see the address dnsmasq is listening to without netstat
I used to run sudo netstat -tulpen | grep dnsmasq, but netstat is outdated. This answer says to use ss as an alternative, but I cannot get the desired output. I.e. ss -ltu | grep dnsmasq does not ...
- 103
1
vote
2
answers
3k
views
netstat command on WSL doesn't give any messages
$ netstat -nap
(No info could be read for "-p": geteuid()=1000 but you should be root.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign ...
- 147
0
votes
1
answer
2k
views
What does Netstat -tlnp mean and do
What does netstat -tlnp do and mean? I have read the man pages for netstat however can only find a answer for -l not the other options
- 455
1
vote
1
answer
161
views
What PID/program is this?
I ran the netstat command and I got a program with PID/program description as 3061/host. The protocol was udp. The local address was 0.0.0.0:37089.
The foreign address was 0.0.0.0:*
Is ...
- 129
1
vote
0
answers
33
views
Get Network status for each interface separately
I'm trying to get statistics for each interface (NIC)and protocol separately, I know about nstat and netstats but they give me all interfaces and protocols statics together, is there any way to get ...
- 11
0
votes
1
answer
1k
views
ssh connection refused; netstat LISTEN; nmap closed
My Setup
Ubuntu server 18.04 on local hardware
A laptop from which I want to ssh into the server over local network
My Problem
Every once in a while right after boot, I can ssh into the machine ...
- 171
0
votes
2
answers
264
views
I am trying to find out if someone is running a server on my Ubuntu without my knowledge
I know this sounds a bit odd. But I have been having hacking done on my computer and I am locked out of my "su" user now for some reason. My computer cpu is running abnormally high and I think there ...
- 198
1
vote
0
answers
219
views
Glassfish - MongoDB - Too many open files
I am having a backend deployment running on a glassfish server, the frontend of my application sends REST request when it needs some data. Also the backend is connected to a mongo database:
...
- 111
1
vote
0
answers
446
views
OpenSuSE removed netstat and ifconfig. What are the plans for ubuntu?
OpenSuSE removed netstat and ifconfig. What are the plans for Ubuntu?
Will Ubuntu remove these commands, too?
- 2,997
37
votes
3
answers
55k
views
has netstat been replaced with a new tool?
Has netstat been replaced by a newer program?
I noticed netstat is part of the nettools package which was replaced by ip command.
What program should i be using to check see open/listening ports on ...
- 585
0
votes
1
answer
221
views
Ubuntu 17.10 with two NICs: routing requests to correct NIC
I have done a bunch of searches about this, and found a lot of answers that don't quite seem to fit my question. If this question has been answered already, I apologize.
My PC has Ubuntu 17.10, and ...
- 1
11
votes
1
answer
27k
views
How to show listening ports and TCP connections to the ports
Does anyone know what exact netstat commands in Ubuntu Server to use to show:
Ports listening on on the server
Current TCP connections to those ports
- 143
0
votes
2
answers
439
views
checking established ports
Is the command which I am using is wrong to check a port is established or not?
count=$(netstat -an | awk '$4 ~ /:'"$PORT"'$/ && $6 == "ESTABLISHED" {print $0}'| wc -l)
And taking the $count ...
- 773
3
votes
1
answer
5k
views
What does 'unix 3 [] STREAM CONNECTED 438037 29037/python' mean?
I'm using netstat to monitor my Ubuntu server and I've found things as below:
tcp 1 0 localhost:48604 localhost:11311 CLOSE WAIT 29511/st
atic transf
tcp 0 0 ...
- 1,248
0
votes
0
answers
321
views
How to list processes communicating with the Internet
I'm trying to detect if my target processes are communicating with the Internet.
Here is what I edit my script named test.sh:
a=$(pgrep -f $1)
a=$(echo $a | sed -e 's/ /\\|/g')
a="'${a}'"
cmd="...
- 1,248
0
votes
1
answer
2k
views
Why shows netstat an entry for ipv6 although it 's already disabled?
I've disabled ipv6 according to the description in: http://askubuntu.com/a/484487/229026, (As far I know, this article should also apply to Ubuntu 16.04) but netstat -nautp is still displaying the ...
- 1,087
0
votes
1
answer
330
views
What does `netstat -antupe` mean?
What does the command
netstat -antupe
actually mean?
I understand that netstat is used to view the status of the Network but what does the -antupe flag do?
- 1
-1
votes
1
answer
2k
views
Open ports - Netstat
I am running these commands to get a list of all open ports on my Ubuntu 16 server. I was wondering why ports 1-25 appear to be open? Is this a security risk or is this normal for an Ubuntu server?
...
- 135
1
vote
1
answer
2k
views
Can I use `netstat` to find adware, spyware, malware or ransomware?
First off I ran netstat -a to list all but it's 1,000 lines of 80+ chars / line and won't fit into a question. So I narrowed it down to netstat -l -e to list connections that are "listening" to my ...
- 100k
0
votes
2
answers
3k
views
How to auto ban an IP when he access some ports?
I have a vps, which host some service only I used.
Today, I found someone scaning my vps by
netstat -ntu | awk '{print $5}' |sort | uniq -c | sort -n
And found some result(I have removed my ip from ...
- 2,221
0
votes
1
answer
1k
views
netstat distinct values
how can I check netstats on ubuntu for a specific port? example
netstat -? grep: 80
but with a twist so it does this as well
it should show only distinct ip addresses but any duplicated ip ...
- 1
1
vote
1
answer
2k
views
A more efficient way to sort the result of netstat command
I was trying to sort only the IP addresses not related to firefox and write them in a file. I ended up with this command line, did the job but I am wondering if there is a way to do better.
netstat -...
- 147
0
votes
1
answer
200
views
How to get information out of netstat's results
I wanted to know the servers behind my connections and with a browser closed this is the result of my netstat command.
tcp 0 0 xxx.xxx.xxx.xxx:xxxxx ec2-54-229-105-92:https TIME_WAIT ...
- 593
0
votes
1
answer
334
views
What is netstat -r command used for?What does the different flags mean: MSS, window, etc [closed]
What does the different flags mean: MSS, window, etc
3
votes
2
answers
10k
views
Linphone: could not start tls transport on port 5060, maybe this port is already used?
update:
Probably this is because of NAT, although that might an Ekiga specific problem.
I've tried multiple clients on this machine, cannot get any SIP clients to work for me. On the same network, ...
- 4,451
2
votes
1
answer
11k
views
Using Nmap to port scan [closed]
I'm trying out Nmap and have encountered a problem. Before anything, I would like to tell you that I am using this on my own laptops at home :)
When I use Nmap <target_IPAddress> it shows me ...
- 313
0
votes
0
answers
3k
views
netstat not listing apache IPv4 listen sockets
My apache is listening for *.80 and *.443 connections. And it works fine:
** root@syslog-ng ** /etc ** Mon Nov 07 13:33:51
# telnet 127.0.0.1 80
Trying 127.0.0.1...
Connected to localhost.
Escape ...
- 243
5
votes
2
answers
12k
views
Format of IPv6 addresses in the netstat output
When I use netstat -n, it won't display the whole IPv6 addresses. The local ip address is in this format xxxx:xxxx:xxxx:xxxx:portNum, so just a part of the address is displayed. Also the foreign ...
- 153