List established connections on Unix servers Using netstat to list established connections on UNIX (BSD, Linux) boxes
Netstat is a very useful tool for showing network status. It displays the contents of various net-work-related data structures. There are a number of output formats, depending on the options for the information presented.
Netstat:
-a Show the state of all sockets and all routing table entries; normally, sockets used by server processes are not shown and only interface, host, network, and default routes are shown. -n Show network addresses and ports as numbers. Normally netstat attempts to resolve addresses and ports, and display them symbolically.
For Unix use: netstat -an | grep "ESTABLISHED". This will show established connections on port 80 (http) in this form:
$ netstat -an | grep "ESTABLISHED" | grep ".80 " tcp4 0 0 192.168.1.10.80 194.212.29.163.63154 ESTABLISHED tcp4 0 0 192.168.1.10.80 194.212.29.163.63154 ESTABLISHED tcp4 0 0 192.168.1.10.80 194.212.29.163.63154 ESTABLISHED tcp4 0 0 192.168.1.10.80 195.45.29.63.63154 ESTABLISHED tcp4 0 0 192.168.1.10.80 15.212.31.56.63154 ESTABLISHED
On FreeBSD you can also use sockstat -4c command, which is also very usefull to list connected sockets (established connections) on the server. It combines netstat with lsof.
$ man sockstat NAME sockstat -- list open sockets
SYNOPSIS sockstat [-46clu] [-p ports]
DESCRIPTION The sockstat command lists open Internet or UNIX domain sockets.
The following options are available:
-4 Show AF_INET (IPv4) sockets.
-6 Show AF_INET6 (IPv6) sockets.
-c Show connected sockets.
-l Show listening sockets.
-p ports Only show Internet sockets if either the local or foreign port number is on the specified list. The ports argument is a comma-separated list of port numbers and ranges specified as first and last port separated by a dash.
Of course, output from both commands sockstat -4c and netstat -an | grep "ESTABLISHED" can be redirected to grep or/and wc -l in order to count and/or filter established connections you are interested in.
Hello, Guest ! You can Login or Register to www.ivorde.ro!
Post comment:
1 comment(s) to List established connections on Unix servers:
1. Re: List established connections on Unix servers
sockstat can select port by itself by Dan Farrell
at September 07th, 2009 - 18:06
Rather than using grep, it makes a lot of sense to select interesting ports in sockstat directly. `sockstat -4cp 80` is equivilent to `sockstat -4c|grep 80`.
Designed and developed by Andrei Manescu. Optimized for Mozilla Firefox.
Copyright 2007 Andrei Manescu
All trademarks and copyrights on this page are owned by their respective owners. Comments are owned by those who posted them.