Legal Information
GOOD2USE Knowledge Network PC Netstat

Good Knowledge Is Good2Use
Netstat (network statistics) is a command-line network utility that displays network connections for TCP (both incoming and outgoing), routing tables, and a number of network interface (network interface controller or software-defined network interface) and network protocol statistics. It is used for finding problems in the network and to determine the amount of traffic on the network as a performance measurement. Netstat commands for Windows
[OPTION] Command Description
  netstat Standard listing of all active connections
-a netstat -a Displays all active ports
-b netstat -b Displays the executable file of a connection or listening port (requires administrator rights)
-e netstat -e Shows statistics about your network connection (received and sent data packets, etc.)
-f netstat -f Displays the fully qualified domain name (FQDN) of remote addresses
-I netstat -I Brings up the netstat overview menu
-n netstat -n Numerical display of addresses and port numbers
-o netstat -o Displays the process identifier (PID) associated with each displayed connection
-p Protokol netstat -p TCPDisplays the connections for the specified protocol, in this case TCP (also possible: UDP, TCPv6, or UDPv6)
-q netstat -q Lists all connections, all listening TCP ports, and all open TCP ports that are not listening
-r netstat -r Displays the IP routing table
-s netstat -s Retrieves statistics about the important network protocols such as TCP, IP, or UDP
-t netstat -t Shows the download status (TCP download to relieve the main processor) of active connections
-x netstat -x Informs about all connections, listeners, and shared endpoints for NetworkDirect
-y netstat -y Displays which connection templates were used for the active TCP connections
Interval netstat -p 10 Displays the respective statistics again after a selected number of seconds (here 10); can be combined as required (here with -p), [CTRL] + [C] ends the interval display

  In order to run Netstat with administrator rights, right click on command prompt and click Run as administrator

Checks for malware can be performed using the command

netstat -b
which will report the programs that are initiating connections.

Note that for this particular switch the command prompt has elevated privileges. Thts is it has to be run as administrator
It is better to check over a period of time and a number can be added that sets the command to run at fixed intervals. Also, it is best to create a written record of the connections that are made over some period of time. The command can then be written

netstat -b 5 > C:\connections.txt
As written, this command will run with five-second intervals until stopped by entering "Ctrl+c", which is a general command to exit.This can be fairly CPU intensive so it may cause a slower, single-core machine to run sluggishly. It is not usually noticeable on a dual-core machine.


Search Knowledge Base Feedback

If you like our web site refer a friend.
Your friends name.
Your friends email address.
Your Name
Your Email Address


© Copyright 1998-1999 GOOD2USE