GOOD2USE Knowledge Network PC Netstat Program Connections

GOOD2USE Knowledge Network PC Netstat Program Connections

Good Knowledge Is Good2Use

The following is an example of the type of output that the netstat -b command produces

Proto The protocol TCP or UDP
Local address The IP address of the local computer and the port number being used. The name of the local computer that corresponds to the IP address and the name of the port is shown unless the -n parameter is specified.
If the port is not yet established, the port number is shown as an asterisk (*).
Foreign address The IP address and port number of the remote computer to which the socket is connected. The names that corresponds to the IP address and the port are shown unless the -n parameter is specified. If the port is not yet established, the port number is shown as an asterisk (*).
State Indicates the state of a TCP connection

Active Connections
Proto	Local Address	Foreign Address	State
TCP	127.0.0.1:5354	eddie-PC:49161	ESTABLISHED
[mDNSResponder.exe]
TCP	127.0.0.1:5354	eddie-PC:49162	ESTABLISHED
[mDNSResponder.exe]
TCP	127.0.0.1:27015	eddie-PC:49160	ESTABLISHED
[AppleMobileDeviceService.exe]
TCP	127.0.0.1:49160	eddie-PC:27015	ESTABLISHED
[iTunesHelper.exe]
TCP	127.0.0.1:49161	eddie-PC:5354	ESTABLISHED
[AppleMobileDeviceService.exe]
TCP	127.0.0.1:49162	eddie-PC:5354	ESTABLISHED
[AppleMobileDeviceService.exe]
TCP	127.0.0.1:49225	eddie-PC:49226	ESTABLISHED
[firefox.exe]
TCP	127.0.0.1:49226	eddie-PC:49225	ESTABLISHED
[firefox.exe]
TCP	127.0.0.1:49227	eddie-PC:49228	ESTABLISHED
[firefox.exe]
TCP	127.0.0.1:49228	eddie-PC:49227	ESTABLISHED
[firefox.exe]
TCP	127.0.0.1:55988	eddie-PC:21322	TIME_WAIT
TCP	192.168.1.100:49743	fra02-002:http	ESTABLISHED
[AVGSvc.exe]
TCP	192.168.1.100:51664	wn-in-f188:5228	ESTABLISHED
[chrome.exe]
TCP	192.168.1.100:51737	102.132.108.16:https	ESTABLISHED
[chrome.exe]
TCP	192.168.1.100:51752	102.132.108.16:https	ESTABLISHED
[chrome.exe]
TCP	192.168.1.100:54712	vip142:https	ESTABLISHED
[chrome.exe]
TCP	192.168.1.100:55319	64.210.156.114:https	ESTABLISHED
[chrome.exe]
TCP	192.168.1.100:55340	a104-127-39-10:https	CLOSE_WAIT
[vprot.exe]
TCP	192.168.1.100:55784	69.94.77.206:https	CLOSE_WAIT
[AVGSvc.exe]
TCP	192.168.1.100:55833	fra07s27-in-f136:https	TIME_WAIT
TCP	192.168.1.100:55855	185.29.132.23:https	TIME_WAIT
TCP	192.168.1.100:55897	lhr48s08-in-f2:https	ESTABLISHED
[firefox.exe]
TCP	192.168.1.100:55941	a23-217-6-140:https	ESTABLISHED
[firefox.exe]
TCP	192.168.1.100:55984	102.132.108.35:https	ESTABLISHED
[chrome.exe]
TCP	192.168.1.100:55985	a23-217-6-140:https	ESTABLISHED
[firefox.exe]
TCP	192.168.1.100:55986	ec2-52-47-132-40:https	ESTABLISHED
[firefox.exe]
TCP	192.168.1.100:55987	lhr25s12-in-f8:https	ESTABLISHED
[firefox.exe]

Note that the Process ID (PID) is given when using Windows XP. In Windows Vista/7, the switch "o' has to be added to display PIDs.

Proto	Local Address	Foreign Address	State	PID
TCP	127.0.0.1:5354	eddie-PC:49161	ESTABLISHED	3432

This command can be combined with other tools such as Task Manager to analyze what executable files and processes are active and are trying to make Internet connections.

Search Knowledge Base

Feedback

If you like our web site refer a friend.
Your friends name.	Your friends email address.
Your Name	Your Email Address