Questions tagged [netstat]
analysis tool for statistics about active connections, open sockets, routing tables; in general the networking subsystem.
71
questions
15
votes
2
answers
37k
views
netstat: command not found
I installed xampp to run a server as part of a guide, but it wasn't working. After trying to run it from command line, I got the following output:
$ sudo ./xampp start panel
Starting XAMPP for Linux 8....
0
votes
1
answer
225
views
How to determine what's listening to port 25 on localhost?
How do I determine what's running on port 25 below?
nicholas@mordor:~$
nicholas@mordor:~$ ss -tlpn sport 25
State Recv-Q Send-Q ...
- 136k
0
votes
2
answers
73
views
Universal Way to Know Router's Address
How can I know what the router's address is when I am on multiple interface?
I know by using netstat -rn I can have the dominate interface's gateway, which is the router's address. But what about ...
- 982
0
votes
2
answers
2k
views
Why shows netstat an entry for ipv6 although it 's already disabled?
I've disabled ipv6 according to the description in: http://askubuntu.com/a/484487/229026, (As far I know, this article should also apply to Ubuntu 16.04) but netstat -nautp is still displaying the ...
- 101
0
votes
1
answer
833
views
UFW port open, netstat does not show it
the result of ufw status
is
To Action From
-- ------ ----
22/tcp ALLOW Anywhere
80/tcp ALLOW ...
2
votes
1
answer
258
views
Oneliner to get the command which started a process on a certain port
I would need a one-line command which, given a port number, returns information on the command which started the process running on that port.
Usually, I get this information by running a sudo netstat
...
- 32.3k
41
votes
3
answers
70k
views
has netstat been replaced with a new tool?
Has netstat been replaced by a newer program?
I noticed netstat is part of the nettools package which was replaced by ip command.
What program should i be using to check see open/listening ports on ...
- 741
3
votes
2
answers
5k
views
Strange output for netstat command
I'm getting a strange output for the netstat -tup. What I mean by strange is I never got this output before when nothing connected to the network/internet (connected to the network, but not using it, ...
54
votes
2
answers
234k
views
What's the difference between port status "LISTENING", "TIME_WAIT", " CLOSE_WAIT" and "ESTABLISHED"?
I use netstat to check my port status.
I was wondering what's the difference between port status LISTENING, TIME_WAIT, CLOSE_WAIT, FIN_WAIT1 and ESTABLISHED?
1
vote
1
answer
306
views
How to prevent flood of unwanted established connections - iptables
There seem to be a flood of unwanted, established port 22 connections to my server. When running sudo netstat -natup | grep 'ESTABLISHED' as root, I get a long list of unwanted established connections,...
4
votes
1
answer
147
views
A strange path is being printed for an entry when netstat command is used?
When I used the netstat -a command to check for active connections, I encountered this entry under active unix domains sockets(servers and established)
Proto Refcnt Flags Type State ...
- 129
1
vote
2
answers
3k
views
netstat command on WSL doesn't give any messages
$ netstat -nap
(No info could be read for "-p": geteuid()=1000 but you should be root.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign ...
- 11
2
votes
0
answers
336
views
What is listening on ports 2049, 34117 and 36105?
fadedbee@ubuntu18:~$ sudo netstat -lntp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 ...
- 808
4
votes
2
answers
1k
views
Difference between netstat and ss and how to convert commands?
what's the equivalent using ss command ?
netstat -antp
netstat -lntp
what's the difference if we use ss with no hyphen and with ss -a ?
what does this command do for us ss -antlp ?
2
votes
2
answers
3k
views
How can I check if a port is busy or closed?
I'm on Ubuntu 12.04 LTS and this error appeared:
ChannelException: Failed to bind to: 0.0.0.0/0.0.0.0:6702
I need help to check where the problem is.
Can I check if the port are busy or closed? If ...
- 70.5k
1
vote
0
answers
45
views
ID process making HTTP request
My firewall is detecting my ubuntu server calling a URL on port 80 sporadically. I'd like to ID the process making the callout, but the connection is always gone by the time I can run a netstat.
A lot ...
- 11
0
votes
0
answers
212
views
strace, netstat or tcpdump to identify unknown network activity and program
I've been trying to uncover the origin of some network calls, specifically to ip addresss associated with bc.googleusercontent.com
I'm a bit curious why this network activity only happens when using ...
- 459
-3
votes
1
answer
795
views
What is the difference between route and netstat? [closed]
It seems that route and netstat return almost the same results. What is the difference between them? Why are there two commands giving redundant results? Isn't it better to consolidate the duplication ...
- 62.4k
0
votes
0
answers
2k
views
Netstat doesn't show a process for port 53, how can I unbind the port and stop listening on it?
I am trying to install AdGuardHome but it is unable to bind to 0.0.0.0:53 because it is already being used. I tried their automated fix, as well as manually following their instructions:
Deactivate ...
0
votes
1
answer
597
views
How is 0.0.0.0:22 under the column local address of netstat command related to ip address?
I have a Ubuntu server and I connect to it from home computer using SSH. Once I connected, on the terminal of the server, netstat shows under the column "local address", 0.0.0.0:22
For example, say ...
- 204
3
votes
2
answers
10k
views
Linphone: could not start tls transport on port 5060, maybe this port is already used?
update:
Probably this is because of NAT, although that might an Ekiga specific problem.
I've tried multiple clients on this machine, cannot get any SIP clients to work for me. On the same network, ...
0
votes
2
answers
3k
views
How to auto ban an IP when he access some ports?
I have a vps, which host some service only I used.
Today, I found someone scaning my vps by
netstat -ntu | awk '{print $5}' |sort | uniq -c | sort -n
And found some result(I have removed my ip from ...
0
votes
0
answers
414
views
what does mean 0.0.0.0:22 under the column local address of netstat command?
I read that 0.0.0.0:22 means that access to port 22 is allowed from any ip addresses (any other computers). However, the column "local address" of netstat only refers to ip of local addresses (local ...
- 41
1
vote
1
answer
224
views
kdeconncted connections?
I have a number of Ubuntu Bionic hosts on a network. I noticed a connection between two of them (in netstat) that showed a connection between two of the hosts.
In syslog, I see that it's seeking out ...
- 383
0
votes
1
answer
1k
views
ssh connection refused; netstat LISTEN; nmap closed
My Setup
Ubuntu server 18.04 on local hardware
A laptop from which I want to ssh into the server over local network
My Problem
Every once in a while right after boot, I can ssh into the machine ...
- 3,377
8
votes
3
answers
45k
views
What does the -tulpn option mean for netstat?
For finding out which ports of the machine are being opening by which services, I used:
netstat -tulpn
I checked the man page for netstat command, but I found nothing about this option. What's the ...
CommunityBot
- 1
-1
votes
1
answer
313
views
Hide Real IP - Ubuntu
Can i hide the real IP of my machine in "netstat -n"?
Perhaps using the iptables masquerade function?
(When the user is logged into the application and runs the netstat -n command, he can view the ...
- 6,799
1
vote
1
answer
661
views
Something blocking port 80
So I'm trying to get Apache to run on AWS server again and I'm running into this error:
(98)Address already in use: AH00073: make_sock: unable to listen for connections on address [::]:80
(98)Address ...
- 29.9k
1
vote
0
answers
415
views
Need to set default route to upstream DHCP interface on Ubuntu Server 18.04 LTS
I'm building an edge router using Ubuntu Server 18.04.03 LTS and need to configure the routing table to define the default route as being the upstream / WAN interface, which gets its IP address and (...
- 519
0
votes
1
answer
1k
views
How to see the address dnsmasq is listening to without netstat
I used to run sudo netstat -tulpen | grep dnsmasq, but netstat is outdated. This answer says to use ss as an alternative, but I cannot get the desired output. I.e. ss -ltu | grep dnsmasq does not ...
- 8,706
0
votes
1
answer
2k
views
What does Netstat -tlnp mean and do
What does netstat -tlnp do and mean? I have read the man pages for netstat however can only find a answer for -l not the other options
- 8,706
168
votes
8
answers
867k
views
How to check opened/closed ports on my computer?
How to check the opened/closed ports on my computer?
I used netstat -a on command line.
Does the port status "LISTENING" indicate that the port is open?
Is any port, that is not shown in the output, ...
- 17.7k
1
vote
1
answer
175
views
What PID/program is this?
I ran the netstat command and I got a program with PID/program description as 3061/host. The protocol was udp. The local address was 0.0.0.0:37089.
The foreign address was 0.0.0.0:*
Is ...
- 129
1
vote
0
answers
36
views
Get Network status for each interface separately
I'm trying to get statistics for each interface (NIC)and protocol separately, I know about nstat and netstats but they give me all interfaces and protocols statics together, is there any way to get ...
- 11
109
votes
3
answers
158k
views
netstat or alternative in docker ubuntu server 16.04 container
Was netstat removed in 16.04? Is there an alternative to netstat available in 16.04? Or how do I install netstat in 16.04?
I am running an ubuntu:16.04 container in docker for Windows, it seems that ...
- 283
0
votes
2
answers
278
views
I am trying to find out if someone is running a server on my Ubuntu without my knowledge
I know this sounds a bit odd. But I have been having hacking done on my computer and I am locked out of my "su" user now for some reason. My computer cpu is running abnormally high and I think there ...
- 62.4k
1
vote
0
answers
229
views
Glassfish - MongoDB - Too many open files
I am having a backend deployment running on a glassfish server, the frontend of my application sends REST request when it needs some data. Also the backend is connected to a mongo database:
...
- 111
1
vote
0
answers
450
views
OpenSuSE removed netstat and ifconfig. What are the plans for ubuntu?
OpenSuSE removed netstat and ifconfig. What are the plans for Ubuntu?
Will Ubuntu remove these commands, too?
- 1,787
0
votes
1
answer
223
views
Ubuntu 17.10 with two NICs: routing requests to correct NIC
I have done a bunch of searches about this, and found a lot of answers that don't quite seem to fit my question. If this question has been answered already, I apologize.
My PC has Ubuntu 17.10, and ...
- 36.5k
11
votes
1
answer
28k
views
How to show listening ports and TCP connections to the ports
Does anyone know what exact netstat commands in Ubuntu Server to use to show:
Ports listening on on the server
Current TCP connections to those ports
- 136k
0
votes
2
answers
463
views
checking established ports
Is the command which I am using is wrong to check a port is established or not?
count=$(netstat -an | awk '$4 ~ /:'"$PORT"'$/ && $6 == "ESTABLISHED" {print $0}'| wc -l)
And taking the $count ...
- 40.1k
3
votes
1
answer
5k
views
What does 'unix 3 [] STREAM CONNECTED 438037 29037/python' mean?
I'm using netstat to monitor my Ubuntu server and I've found things as below:
tcp 1 0 localhost:48604 localhost:11311 CLOSE WAIT 29511/st
atic transf
tcp 0 0 ...
- 10.2k
0
votes
0
answers
373
views
How to list processes communicating with the Internet
I'm trying to detect if my target processes are communicating with the Internet.
Here is what I edit my script named test.sh:
a=$(pgrep -f $1)
a=$(echo $a | sed -e 's/ /\\|/g')
a="'${a}'"
cmd="...
- 1,288
0
votes
1
answer
444
views
What does `netstat -antupe` mean?
What does the command
netstat -antupe
actually mean?
I understand that netstat is used to view the status of the Network but what does the -antupe flag do?
- 70.5k
2
votes
1
answer
2k
views
Access nodejs application port from external IP
I have an application with port 9901 and hosted in online server.
If i check this application from the same server with http://127.0.0.1:9901/ or http://127.0.0.1:9901/ the application is run ...
- 111
-1
votes
1
answer
2k
views
Open ports - Netstat
I am running these commands to get a list of all open ports on my Ubuntu 16 server. I was wondering why ports 1-25 appear to be open? Is this a security risk or is this normal for an Ubuntu server?
...
- 589
1
vote
1
answer
2k
views
Can I use `netstat` to find adware, spyware, malware or ransomware?
First off I ran netstat -a to list all but it's 1,000 lines of 80+ chars / line and won't fit into a question. So I narrowed it down to netstat -l -e to list connections that are "listening" to my ...
- 198k
0
votes
1
answer
2k
views
netstat distinct values
how can I check netstats on ubuntu for a specific port? example
netstat -? grep: 80
but with a twist so it does this as well
it should show only distinct ip addresses but any duplicated ip ...
- 4,660
7
votes
4
answers
27k
views
Get current ssh session's originating IP without being superuser
I am trying to find out the current ssh session's originating IP address. I found the following to be useful, but it requires sudo:
$ sudo netstat -tapen | grep ssh | awk '{ print $5}' | sed '/0.0.0....
- 111
2
votes
1
answer
3k
views
Is ipv6 disabled or not
I tried to completely disable IPv6 on my Ubuntu 14.04 according to this post But netstat shows it is in use. Why?
~ > sudo sysctl -p|grep ipv6
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf....
