TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
just to add something that may make things quicker for you, especially
if you have a server and/or lots of connections:
C:\>netstat -a |FIND "ESTABLISHED"
this will show you only the established connections
C:\>netstat -a |FIND "LISTENING"
this will show you only the listening connections, and one that I find
very useful!
hope it helps!
thomas
-----Original Message-----
From: Taylor, Robert G
To: 'thum aun'; [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED];
[EMAIL PROTECTED]
Sent: 10/9/00 5:03 PM
Subject: RE: Netstat -a help !
TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message
to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
problems!
------------------------------------------------------------------------
----
The output of the netstat command is fairly simple. The -a option says
to
include in the netstat output the ports that your current machine is
listening for connections on. Without it, it would just list active
connections.
The first column (Proto) lists to protocol of the connection/listening
socket (TCP or UDP)
The second column is the local address (the machine that netstat is
being
run on) and the port number. Most outbound connections have source ports
over 1024.
The third column is the address of the other machine in this connection
and
the port number. since 80 is the standard web port, I would assume that
your
machine has a web browser running and these are the ip addresses of the
web
servers that you are connected to. I believe that 5190 is the standard
port
for AIM, so you might be running a copy of AOL Instant Messenger on your
machine as well.
The fourth column is the connection state. This lists whether the
connection
is just being set up, established, or being torn down. Established
connections are currently active, while this time_wait connection I
believe
has closed and is just waiting for packets that may still be floating
around
the network.
If the word listening was in the STATE column, then you would be running
some tcp service that would be willing to answer a connection, such as a
web
server, or ftp server.
I believe that *:* next to the udp stuff indicates that your machine is
willing to accept packets on those ports.
C:\WINDOWS>netstat -a
Active Connections
Proto Local Address Foreign Address State
TCP thum:1363 gfx.law7.hotmail.com:80 TIME_WAIT
TCP thum:1374 63.85.84.140:80 ESTABLISHED
TCP thum:1375 63.85.84.140:80 ESTABLISHED
TCP thum:1210 195.219.48.9:80 ESTABLISHED
TCP thum:1211 195.219.48.9:80 ESTABLISHED
TCP thum:1247 205.188.4.217:5190 ESTABLISHED
UDP thum:sytek *:*
UDP thum:nbname *:*
UDP thum:nbdatagram *:*
UDP thum:1032 *:*
C:\WINDOWS>
can someone out therre please explain to me all the stuff above ? or
recommend some source that i can refer to for detail info about this
"netstat -a" command ?
thousand thanks to you !
best regards,
Kelvin
________________________________________________________________________
_
Get Your Private, Free E-mail from MSN Hotmail at
http://www.hotmail.com.
Share information about yourself, create your own public profile at
http://profiles.msn.com.
