Interperating netstat
I need a little help: I am not at all server or http literate. I noticed some strange messages in my Xconsole log and typed netstat and found this: planck@linux:~> netstat Active Internet connections (w/o servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 239.stl-18-19-20-:33393 postoffice.worldne:pop3 TIME_WAIT tcp 1 0 222.stl-18-19-20-:33311 webspace1.toad:www-http CLOSE_WAIT tcp 1 0 222.stl-18-19-20-:33317 webspace1.toad:www-http CLOSE_WAIT tcp 1 0 222.stl-18-19-20-:33314 webspace1.toad:www-http CLOSE_WAIT tcp 1 0 222.stl-18-19-20-:33315 webspace1.toad:www-http CLOSE_WAIT <snip> postoffice.worldne:pop3 is my AT&T pop3 account but what is webspace1.toad:www-http? I then did netstat -an and got: planck@linux:~> netstat -an Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 0.0.0.0:515 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN tcp 1 0 12.69.88.222:33311 205.197.182.101:80 CLOSE_WAIT tcp 1 0 12.69.88.222:33317 205.197.182.101:80 CLOSE_WAIT tcp 1 0 12.69.88.222:33314 205.197.182.101:80 CLOSE_WAIT tcp 1 0 12.69.88.222:33315 205.197.182.101:80 CLOSE_WAIT tcp 0 0 :::22 :::* LISTEN udp 0 0 0.0.0.0:32802 0.0.0.0:* udp 0 0 0.0.0.0:111 0.0.0.0:* Active UNIX domain sockets (servers and established) Proto RefCnt Flags Type State I-Node Path unix 2 [ ACC ] STREAM LISTENING 13731 /tmp/ksocket-planck/kdesud_:0 <snip> Is 205.197.182.101 my internet connection? is active on port 80? TIA -- Cheers, Jonathan
On Tuesday 01 January 2002 02:52, you wrote: Never mind: This was National Public Radio; I was listening with RealPlayer over the net.
Active Internet connections (servers and established) CLOSE_WAIT tcp 1 0 12.69.88.222:33317 205.197.182.101:80
-- Cheers, Jonathan
Jonathan schrieb:
I need a little help:
I am not at all server or http literate. I noticed some strange messages in my Xconsole log and typed netstat and found this:
planck@linux:~> netstat Active Internet connections (w/o servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 239.stl-18-19-20-:33393 postoffice.worldne:pop3 TIME_WAIT tcp 1 0 222.stl-18-19-20-:33311 webspace1.toad:www-http CLOSE_WAIT tcp 1 0 222.stl-18-19-20-:33317 webspace1.toad:www-http CLOSE_WAIT tcp 1 0 222.stl-18-19-20-:33314 webspace1.toad:www-http CLOSE_WAIT tcp 1 0 222.stl-18-19-20-:33315 webspace1.toad:www-http CLOSE_WAIT <snip>
postoffice.worldne:pop3 is my AT&T pop3 account but what is webspace1.toad:www-http?
I then did netstat -an and got: planck@linux:~> netstat -an Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 0.0.0.0:515 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN tcp 1 0 12.69.88.222:33311 205.197.182.101:80 CLOSE_WAIT tcp 1 0 12.69.88.222:33317 205.197.182.101:80 CLOSE_WAIT tcp 1 0 12.69.88.222:33314 205.197.182.101:80 CLOSE_WAIT tcp 1 0 12.69.88.222:33315 205.197.182.101:80 CLOSE_WAIT tcp 0 0 :::22 :::* LISTEN udp 0 0 0.0.0.0:32802 0.0.0.0:* udp 0 0 0.0.0.0:111 0.0.0.0:* Active UNIX domain sockets (servers and established) Proto RefCnt Flags Type State I-Node Path unix 2 [ ACC ] STREAM LISTENING 13731 /tmp/ksocket-planck/kdesud_:0 <snip>
Is 205.197.182.101 my internet connection? is active on port 80? TIA
It tells you that there is a http connection between your machine (12.69.88.222) and 205.197.182.101. Or rather there are 4 connections. (4 source ports on your machine) Also, if you're on a dial on demand line, these open sockes remain after you closed the connection. (closed netscape, i.e.). They die after a while. Juergen -- =========================================== __ _ Juergen Braukmann juergen.braukmann@gmx.de| -o)/ / (_)__ __ ____ __ Tel: 0201-743648 dk4jb@db0qs.#nrw.deu.eu | /\\ /__/ / _ \/ // /\ \/ / ===========================================_\_v __/_/_//_/\_,_/ /_/\_\
participants (2)
-
Jonathan
-
Juergen Braukmann