linux netstat 命令詳解
阿新 • • 發佈：2018-12-21
1.功能與說明
netstat 用於顯示linux中各種網路相關資訊。如網路連結 路由表 介面狀態連結 多播成員等等。
2.引數含義介紹
-a (all)顯示所有選項，預設不顯示LISTEN相關
-t (tcp)僅顯示tcp相關選項
-u (udp)僅顯示udp相關選項
-n 拒絕顯示別名，能顯示數字的全部轉化成數字。
-l 僅列出有在 Listen (監聽) 的服務狀態
-p 顯示建立相關連結的程式名
-r 顯示路由資訊，路由表
-e 顯示擴充套件資訊，例如uid等
-s 按各個協議進行統計
-c 每隔一個固定時間，執行該netstat命令。
提示：LISTEN和LISTENING的狀態只有用-a或者-l才能看到
3.常用例項
3.1 列出所有埠
netstat -a
[[email protected] jiehun]# netstat -a|more Active Internet connections (servers and established)Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 *:sunrpc *:* LISTEN tcp0 0 *:webcache *:* LISTEN tcp 0 0 *:http *:* LISTEN tcp 0 0 192.168.122.1:domain *:* LISTEN tcp 0 0 localhost.localdomain:d-s-n *:* LISTEN tcp0 0 *:ssh *:* LISTEN tcp 0 0 localhost.loc:simplifymedia *:* LISTEN
3.2 列出所有tcp埠
[[email protected] jiehun]# netstat -at|more Active Internet connections (servers and established)Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 *:sunrpc *:* LISTEN tcp 0 0 *:webcache *:* LISTEN tcp 0 0 *:http *:* LISTEN tcp 0 0 192.168.122.1:domain *:* LISTEN tcp 0 0 localhost.localdomain:d-s-n *:* LISTEN tcp 0 0 *:ssh *:* LISTEN tcp 0 0 localhost.loc:simplifymedia *:* LISTEN
3.3 列出所有udp埠
netstat -au
[[email protected] jiehun]# netstat -au|more Active Internet connections (servers and established)Proto Recv-Q Send-Q Local Address Foreign Address State udp 0 0 *:ideafarm-panic *:* udp 0 0 *:47005 *:* udp 0 0 localhost.loca:memcache *:* udp 0 0 *:55276 *:* udp 0 0 192.168.122.1:domain *:* udp 0 0 *:bootps *:* udp 0 0 *:bootpc *:* udp 0 0 *:sunrpc *:* udp 0 0 *:ipp *:* udp 0 0 *:44236 *:* udp 0 0 *:722 *:*
3.4 只顯示監聽埠 netstat -l
[[email protected] jiehun]# netstat -lActive Internet connections (only servers)Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 *:sunrpc *:* LISTEN tcp 0 0 *:webcache *:* LISTEN tcp 0 0 *:http *:* LISTEN tcp 0 0 192.168.122.1:domain *:* LISTEN tcp 0 0 localhost.localdomain:d-s-n *:* LISTEN tcp 0 0 *:ssh *:* LISTEN tcp 0 0 localhost.loc:simplifymedia *:* LISTEN tcp 0 0 localhost.localdomain:ipp *:* LISTEN tcp 0 0 *:44343 *:* LISTEN tcp 0 0 localhost.localdomain:smtp *:* LISTEN
3.5 只顯示監聽的tcp埠 netstat -lt
[[email protected] jiehun]# netstat -ltActive Internet connections (only servers)Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 *:sunrpc *:* LISTEN tcp 0 0 *:webcache *:* LISTEN tcp 0 0 *:http *:* LISTEN tcp 0 0 192.168.122.1:domain *:* LISTEN tcp 0 0 localhost.localdomain:d-s-n *:* LISTEN tcp 0 0 *:ssh *:* LISTEN tcp 0 0 localhost.loc:simplifymedia *:* LISTEN tcp 0 0 localhost.localdomain:ipp *:* LISTEN tcp 0 0 *:44343 *:* LISTEN tcp 0 0 localhost.localdomain:smtp *:* LISTEN
3.6 只顯示所有監聽udp埠 netstat -lu
[[email protected] jiehun]# netstat -luActive Internet connections (only servers)Proto Recv-Q Send-Q Local Address Foreign Address State udp 0 0 *:ideafarm-panic *:* udp 0 0 *:47005 *:* udp 0 0 *:47551 *:* udp 0 0 localhost.loca:memcache *:* udp 0 0 *:55276 *:* udp 0 0 192.168.122.1:domain *:* udp 0 0 *:bootps *:* udp 0 0 *:bootpc *:* udp 0 0 *:sunrpc *:*
3.7 只列出所有監聽unix埠 netstat -lx
[[email protected] jiehun]# netstat -lxActive UNIX domain sockets (only servers)Proto RefCnt Flags Type State I-Node Pathunix 2 [ ACC ] STREAM LISTENING 21941 /tmp/.X11-unix/X0unix 2 [ ACC ] STREAM LISTENING 34096 /tmp/orbit-haozheng/linc-cd2-0-5b33fa1ecf0c9unix 2 [ ACC ] STREAM LISTENING 22263 @/tmp/gdm-greeter-cBlQsyRFunix 2 [ ACC ] STREAM LISTENING 32728 /tmp/.ICE-unix/3103unix 2 [ ACC ] STREAM LISTENING 36866 @/tmp/dbus-AcJrBlWFunix 2 [ ACC ] STREAM LISTENING 20454 /tmp/mysql.sock
3.8 顯示所有埠的統計資訊 netstat -s
[[email protected] jiehun]# netstat -sIp: 1943780 total packets received 2 forwarded 0 incoming packets discarded 1769532 incoming packets delivered 1121573 requests sent out 132 outgoing packets dropped 45867 dropped because of missing routeTcp: 64002 active connections openings 7632 passive connection openings 2309 failed connection attempts 498 connection resets received 8 connections established 1018564 segments received 1022700 segments send out 16835 segments retransmited 2 bad segments received. 552 resets sentUdp: 133420 packets received 7845 packets to unknown port received. 0 packet receive errors 74841 packets sent 0 receive buffer errors 0 send buffer errors
3.9 顯示所有tcp(netstat -st)或udp(netstat -su)的統計資訊
[[email protected] jiehun]# netstat -suIcmpMsg: InType0: 11 InType3: 13506 OutType3: 13679 OutType8: 11Udp: 133462 packets received 7869 packets to unknown port received. 0 packet receive errors 74888 packets sent 0 receive buffer errors 0 send buffer errorsUdpLite:IpExt: InNoRoutes: 991 InMcastPkts: 24308 OutMcastPkts: 2353 InBcastPkts: 630615 OutBcastPkts: 1546 InOctets: 755319900 OutOctets: 296705252 InMcastOctets: 2908748 OutMcastOctets: 93173 InBcastOctets: 99500419 OutBcastOctets: 299980
3.10 顯示pid/程序名稱 netstat -p -p可以與其他引數一起使用 比如 顯示tcp的程序id資訊
[[email protected] jiehun]# netstat -ptActive Internet connections (w/o servers)Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 192.168.0.52:44784 123.150.49.20:http FIN_WAIT2 4207/VirtualBox tcp 0 0 192.168.0.52:46715 ie-in-f125.1e100.net:https ESTABLISHED 4207/VirtualBox tcp 0 0 192.168.0.52:43415 geotrust-ocsp-mtv.veri:http FIN_WAIT2 4207/VirtualBox
3.11 在 netstat 輸出中不顯示主機，埠和使用者名稱 (host, port or user)當你不想讓主機，埠和使用者名稱顯示，使用 netstat -n。將會使用數字代替那些名稱。同樣可以加速輸出，因為不用進行比對查詢。netstat -ntpl 顯示tcp的監聽埠 不顯示主機埠使用者名稱 用數字代替
[[email protected] jiehun]# netstat -ptnlActive Internet connections (only servers)Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 971/rpcbind tcp 0 0 0.0.0.0:8080 0.0.0.0:* LISTEN 1526/nginx: master tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 1526/nginx: master tcp 0 0 192.168.122.1:53 0.0.0.0:* LISTEN 1248/dnsmasq tcp 0 0 127.0.0.1:8086 0.0.0.0:* LISTEN 1553/python tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1163/sshd tcp 0 0 127.0.0.1:8087 0.0.0.0:* LISTEN 1553/python tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 1140/cupsd tcp 0 0 0.0.0.0:44343 0.0.0.0:* LISTEN 1151/rpc.statd tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 18573/sendmail: acc tcp 0 0 127.0.0.1:3002 0.0.0.0:* LISTEN 1004/ruby tcp 0 0 0.0.0.0:8000 0.0.0.0:* LISTEN 1526/nginx: master
3.12 一秒鐘輸出一次tcp監聽埠資訊 netstat -ntplc
Active Internet connections (only servers)Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 971/rpcbind tcp 0 0 0.0.0.0:8080 0.0.0.0:* LISTEN 1526/nginx: master tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 1526/nginx: master tcp 0 0 192.168.122.1:53 0.0.0.0:* LISTEN 1248/dnsmasq tcp 0 0 127.0.0.1:8086 0.0.0.0:* LISTEN 1553/python tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1163/sshd
3.13 顯示路由資訊 netstat -r
[[email protected] jiehun]# netstat -rKernel IP routing tableDestination Gateway Genmask Flags MSS Window irtt Ifacedefault vrouter 0.0.0.0 UG 0 0 0 eth0192.168.0.0 * 255.255.255.0 U 0 0 0 eth0192.168.122.0 * 255.255.255.0 U 0 0 0 virb
3.14 顯示網路介面列表 netstat -i
[[email protected] jiehun]# netstat -iKernel Interface tableIface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flgeth0 1500 0 4943885 0 0 0 901773 0 0 0 BMRUlo 16436 0 236931 0 0 0 236931 0 0 0 LRUvirbr0 1500 0 0 0 0 0 0 0 0 0 BMU