欢迎访问我的个人博客网站：http://www.yanmin99.com/
一、netstat简介
- netstat 命令用于显示各种网络相关信息，如网络连接，路由表，接口状态 (Interface Statistics)，masquerade 连接，多播成员 (Multicast Memberships)等等。
二、netstat使用
- 1、命令的一般格式
netstat [选项]
- 2、参数介绍
-a (all)显示所有选项，默认不显示LISTEN相关
-t (tcp)仅显示tcp相关选项
-u (udp)仅显示udp相关选项
-n 拒绝显示别名，能显示数字的全部转化成数字。
-l 仅列出有在 Listen (监听) 的服務状态
-p 显示建立相关链接的程序名
-r 显示路由信息，路由表
-e 显示扩展信息，例如uid等
-s 按各个协议进行统计
-c 每隔一个固定时间，执行该netstat命令
3、实例
-
A、列出所有端口
- 列出所有端口
root@iZ235ubl1arZ:/home/yanmin/blog# netstat -a | more Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 *:http *:* LISTEN tcp 0 0 *:ssh *:* LISTEN- 列出所有tcp端口
root@iZ235ubl1arZ:/home/yanmin/blog# netstat -at Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 *:http *:* LISTEN tcp 0 0 *:ssh *:* LISTEN tcp 0 0 121.41.120.65:http 140.205.201.20:35425 TIME_WAIT- 列出所有udp端口
root@iZ235ubl1arZ:/home/yanmin/blog# netstat -au Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State udp 0 0 121.41.120.65:ntp *:* udp 0 0 iZ235ubl1arZ:ntp *:* udp 0 0 localhost:ntp *:* udp 0 0 *:ntp *:* udp6 0 0 [::]:ntp [::]:* -
B、列出所有处于监听状态的Sockets
- 只显示监听端口netstat -l
root@iZ235ubl1arZ:/home/yanmin/blog# netstat -l Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 *:http *:* LISTEN tcp 0 0 *:ssh *:* LISTEN udp 0 0 121.41.120.65:ntp *:* udp 0 0 iZ235ubl1arZ:ntp *:* udp 0 0 localhost:ntp *:*- 只列出所有监听tcp端口netstat -lt
root@iZ235ubl1arZ:/home/yanmin/blog# netstat -lt Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 *:http *:* LISTEN tcp 0 0 *:ssh *:* LISTEN- 只列出所有监听udp端口 netstat -lu
root@iZ235ubl1arZ:/home/yanmin/blog# netstat -lu Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State udp 0 0 121.41.120.65:ntp *:* udp 0 0 iZ235ubl1arZ:ntp *:* udp 0 0 localhost:ntp *:* udp 0 0 *:ntp *:* udp6 0 0 [::]:ntp [::]:*- 只列出所有监听UNIX端口 netstat -lx
root@iZ235ubl1arZ:/home/yanmin/blog# netstat -lx Active UNIX domain sockets (only servers) Proto RefCnt Flags Type State I-Node Path unix 2 [ ACC ] STREAM LISTENING 9506 /var/run/nscd/socket unix 2 [ ACC ] STREAM LISTENING 8267 /var/run/dbus/system_bus_socket unix 2 [ ACC ] SEQPACKET LISTENING 7769 /run/udev/control unix 2 [ ACC ] STREAM LISTENING 7592 @/com/ubuntu/upstart -
C、在netstat 输出中显示PID和进程名称netstat -p
root@iZ235ubl1arZ:/home/yanmin/blog# netstat -p Active Internet connections (w/o servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 316 121.41.120.65:ssh 58.246.62.146:54175 ESTABLISHED 17558/sshd: yanmin tcp 0 0 121.41.120.65:ssh 58.246.62.146:52592 ESTABLISHED 14538/sshd: yanmin Active UNIX domain sockets (w/o servers) Proto RefCnt Flags Type State I-Node PID/Program name Path unix 10 [ ] DGRAM 8286 682/rsyslogd /dev/log unix 3 [ ] STREAM CONNECTED 307127 17558/sshd: yanmin -
D、显示核心路由信息 netstat -r
yanmin:blog yanmin$ netstat -r Routing tables Internet: Destination Gateway Flags Refs Use Netif Expire default 10.96.150.1 UGSc 21 0 en0 10.16/14 10.254.254.81 UGSc 0 0 utun1 10.16.0.222/32 10.254.254.81 UGSc 1 0 utun1
