Linux netstat介绍

欢迎访问我的个人博客网站：http://www.yanmin99.com/

一、netstat简介

• netstat 命令用于显示各种网络相关信息，如网络连接，路由表，接口状态 (Interface Statistics)，masquerade 连接，多播成员 (Multicast Memberships)等等。

二、netstat使用

• 1、命令的一般格式

netstat [选项]

• 2、参数介绍

-a (all)显示所有选项，默认不显示LISTEN相关
-t (tcp)仅显示tcp相关选项
-u (udp)仅显示udp相关选项
-n 拒绝显示别名，能显示数字的全部转化成数字。
-l 仅列出有在 Listen (监听) 的服務状态

-p 显示建立相关链接的程序名
-r 显示路由信息，路由表
-e 显示扩展信息，例如uid等
-s 按各个协议进行统计
-c 每隔一个固定时间，执行该netstat命令

• 3、实例

• A、列出所有端口

  • 列出所有端口

  root@iZ235ubl1arZ:/home/yanmin/blog# netstat -a | more
  Active Internet connections (servers and established)
  Proto Recv-Q Send-Q Local Address           Foreign Address         State
  tcp        0      0 *:http                  *:*                     LISTEN
  tcp        0      0 *:ssh                   *:*                     LISTEN
  

  • 列出所有tcp端口

  root@iZ235ubl1arZ:/home/yanmin/blog# netstat -at
  Active Internet connections (servers and established)
  Proto Recv-Q Send-Q Local Address           Foreign Address         State
  tcp        0      0 *:http                  *:*                     LISTEN
  tcp        0      0 *:ssh                   *:*                     LISTEN
  tcp        0      0 121.41.120.65:http      140.205.201.20:35425    TIME_WAIT
  

  • 列出所有udp端口

  root@iZ235ubl1arZ:/home/yanmin/blog# netstat -au
  Active Internet connections (servers and established)
  Proto Recv-Q Send-Q Local Address           Foreign Address         State
  udp        0      0 121.41.120.65:ntp       *:*
  udp        0      0 iZ235ubl1arZ:ntp        *:*
  udp        0      0 localhost:ntp           *:*
  udp        0      0 *:ntp                   *:*
  udp6       0      0 [::]:ntp                [::]:*
  

• B、列出所有处于监听状态的Sockets

  • 只显示监听端口netstat -l

  root@iZ235ubl1arZ:/home/yanmin/blog# netstat -l
  Active Internet connections (only servers)
  Proto Recv-Q Send-Q Local Address           Foreign Address         State
  tcp        0      0 *:http                  *:*                     LISTEN
  tcp        0      0 *:ssh                   *:*                     LISTEN
  udp        0      0 121.41.120.65:ntp       *:*
  udp        0      0 iZ235ubl1arZ:ntp        *:*
  udp        0      0 localhost:ntp           *:*
  

  • 只列出所有监听tcp端口netstat -lt

  root@iZ235ubl1arZ:/home/yanmin/blog# netstat -lt
  Active Internet connections (only servers)
  Proto Recv-Q Send-Q Local Address           Foreign Address         State
  tcp        0      0 *:http                  *:*                     LISTEN
  tcp        0      0 *:ssh                   *:*                     LISTEN
  

  • 只列出所有监听udp端口 netstat -lu

  root@iZ235ubl1arZ:/home/yanmin/blog# netstat -lu
  Active Internet connections (only servers)
  Proto Recv-Q Send-Q Local Address           Foreign Address         State
  udp        0      0 121.41.120.65:ntp       *:*
  udp        0      0 iZ235ubl1arZ:ntp        *:*
  udp        0      0 localhost:ntp           *:*
  udp        0      0 *:ntp                   *:*
  udp6       0      0 [::]:ntp                [::]:*
  

  • 只列出所有监听UNIX端口 netstat -lx

  root@iZ235ubl1arZ:/home/yanmin/blog# netstat -lx
  Active UNIX domain sockets (only servers)
  Proto RefCnt Flags       Type       State         I-Node   Path
  unix  2      [ ACC ]     STREAM     LISTENING     9506     /var/run/nscd/socket
  unix  2      [ ACC ]     STREAM     LISTENING     8267     /var/run/dbus/system_bus_socket
  unix  2      [ ACC ]     SEQPACKET  LISTENING     7769     /run/udev/control
  unix  2      [ ACC ]     STREAM     LISTENING     7592     @/com/ubuntu/upstart
  

• C、在netstat 输出中显示PID和进程名称netstat -p

  root@iZ235ubl1arZ:/home/yanmin/blog# netstat -p
  Active Internet connections (w/o servers)
  Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
  tcp        0    316 121.41.120.65:ssh       58.246.62.146:54175     ESTABLISHED 17558/sshd: yanmin
  tcp        0      0 121.41.120.65:ssh       58.246.62.146:52592     ESTABLISHED 14538/sshd: yanmin
  Active UNIX domain sockets (w/o servers)
  Proto RefCnt Flags       Type       State         I-Node   PID/Program name    Path
  unix  10     [ ]         DGRAM                    8286     682/rsyslogd        /dev/log
  unix  3      [ ]         STREAM     CONNECTED     307127   17558/sshd: yanmin
  

• D、显示核心路由信息 netstat -r

  yanmin:blog yanmin$ netstat -r
  Routing tables
  
  Internet:
  Destination        Gateway            Flags        Refs      Use   Netif Expire
  default            10.96.150.1        UGSc           21        0     en0
  10.16/14           10.254.254.81      UGSc            0        0   utun1
  10.16.0.222/32     10.254.254.81      UGSc            1        0   utun1