1. netstat命令简介

netstat 命令用于显示各种网络相关信息,如网络连接,路由表,接口状态 (interface statistics),masquerade 连接,多播成员 (multicast memberships) 等等。

netstat命令简介

2. 查看netstat 所有状态

[root@zcwyou ~]# netstat -a

active internet connections (servers and established)

proto recv-q send-q local address foreign address state

tcp 0 0 my_public_ip:9016 0.0.0.0:* listen

tcp 0 0 my_public_ip:9017 0.0.0.0:* listen

tcp 0 0 localhost:smtp 0.0.0.0:* listen

tcp 0 0 my_public_ip:9018 0.0.0.0:* listen

tcp 0 0 my_public_ip:pptp 0.0.0.0:* listen

tcp 0 0 my_public_ip:9019 0.0.0.0:* listen

3. 查看所有tcp连接

[root@zcwyou ~]# netstat -at

active internet connections (servers and established)

proto recv-q send-q local address foreign address state

tcp 0 0 my_public_ip:9016 0.0.0.0:* listen

tcp 0 0 my_public_ip:9017 0.0.0.0:* listen

tcp 0 0 localhost:smtp 0.0.0.0:* listen

tcp 0 0 my_public_ip:9018 0.0.0.0:* listen

tcp 0 0 my_public_ip:pptp 0.0.0.0:* listen

tcp 0 0 my_public_ip:9019 0.0.0.0:* listen

tcp 0 0 my_public_ip:tambora 0.0.0.0:* listen

tcp 0 0 my_public:etlservicemgr 0.0.0.0:* listen

tcp 0 0 my_public_ip:dynamid 0.0.0.0:* listen

tcp 0 0 my_public_ip:9003 0.0.0.0:* listen

4. 禁用反向域名解析,加快查询速度

[root@zcwyou ~]# netstat -ant

tcp 0 0 113.105.164.151:42342 202.46.36.30:9001 close_wait

tcp 0 0 113.105.164.151:49472 202.46.36.30:9001 established

tcp 0 0 113.105.164.151:43470 202.46.36.30:9001 close_wait

tcp 0 0 113.105.164.151:43576 202.46.36.30:9001 close_wait

tcp 0 0 113.105.164.151:9001 120.84.140.61:6290 fin_wait2

tcp 0 0 113.105.164.151:9015 183.14.29.69:6809 fin_wait2

tcp 0 0 113.105.164.151:35424 202.46.36.30:9002 close_wait

tcp 0 0 113.105.164.151:38074 202.46.36.30:9001 close_wait

tcp 0 0 113.105.164.151:9001 118.112.75.246:2710 fin_wait2

tcp 0 0 113.105.164.151:45124 202.46.36.30:9001 close_wait

tcp 0 0 113.105.164.151:37202 202.46.36.30:9001 close_wait

tcp 0 0 113.105.164.151:52640 202.46.36.30:9001 close_wait

5. 持续刷新信息

我们可以使用 netstat 的 -c 选项持续输出信息。

[root@zcwyou ~]# netstat -ct

6. 常见用法

6.1 查看所有tcp监听端口

[root@zcwyou ~]# netstat -lntp

linux查看所有tcp监听端口

6.2 查看所有的tcp连接情况

[root@zcwyou ~]# netstat -antp

6.3 查看所有udp连接情况

[root@zcwyou ~]# netstat -anp |sed -n '2p;/^udp/p'

6.4 查看所有已经建立的tcp连接

[root@zcwyou ~]# netstat -antp |sed -n '2p;/established/p'

linux查看所有已经建立的tcp连接

6.5 查看系统当前tcp连接数:

[root@zcwyou ~]# netstat -antp |sed -n '2p;/established/p' |wc -l

6.6 查看tcp半开连接,正常情况下,应该看不到有数据

[root@zcwyou ~]# netstat -nap | grep syn_recv

6.7 查看tcp半开连接数,正常情况下应该为0

[root@zcwyou ~]# netstat -nap | grep syn_recv |wc -l

6.8 查看网络统计信息

[root@zcwyou ~]# netstat -s