一、显示netstat的帮助信息
执行命令【netstat /?】,得到帮助信息如下
C:\Users\Administrator>netstat /?
显示协议统计信息和当前 TCP/IP 网络连接。
NETSTAT [-a] [-b] [-e] [-f] [-n] [-o] [-p proto] [-r] [-s] [-t] [-x] [-y] [interval]
-a 显示所有连接和侦听端口。
-b 显示在创建每个连接或侦听端口时涉及的
可执行文件。在某些情况下,已知可执行文件托管
多个独立的组件,此时会
显示创建连接或侦听端口时
涉及的组件序列。在此情况下,可执行文件的
名称位于底部 [] 中,它调用的组件位于顶部,
直至达到 TCP/IP。注意,此选项
可能很耗时,并且可能因为你没有足够的
权限而失败。
-e 显示以太网统计信息。此选项可以与 -s 选项
结合使用。
-f 显示外部地址的完全限定
域名(FQDN)。
-n 以数字形式显示地址和端口号。
-o 显示拥有的与每个连接关联的进程 ID。
-p proto 显示 proto 指定的协议的连接;proto
可以是下列任何一个: TCP、UDP、TCPv6 或 UDPv6。如果与 -s
选项一起用来显示每个协议的统计信息,proto 可以是下列任何一个:
IP、IPv6、ICMP、ICMPv6、TCP、TCPv6、UDP 或 UDPv6。
-q 显示所有连接、侦听端口和绑定的
非侦听 TCP 端口。绑定的非侦听端口
不一定与活动连接相关联。
-r 显示路由表。
-s 显示每个协议的统计信息。默认情况下,
显示 IP、IPv6、ICMP、ICMPv6、TCP、TCPv6、UDP 和 UDPv6 的统计信息;
-p 选项可用于指定默认的子网。
-t 显示当前连接卸载状态。
-x 显示 NetworkDirect 连接、侦听器和共享
终结点。
-y 显示所有连接的 TCP 连接模板。
无法与其他选项结合使用。
interval 重新显示选定的统计信息,各个显示间暂停的
间隔秒数。按 CTRL+C 停止重新显示
统计信息。如果省略,则 netstat 将打印当前的
配置信息一次。
二、各种状态字符串的含义
状态「LISTENING」表示正在监听,等待连接也即没有建立连接的状态。
状态「ESTABLISHED」表示已经建立连接。
状态「TIME_WAIT」表示正在主动关闭。
状态「CLOSE_WAIT」表示正在被动关闭。
状态「LAST_ACK」表示等待状态。
三、显示所有连接和监听端口(参数-a)
执行命令【netstat -a】,便可显示所有连接和监听端口。
C:\Users\Administrator>netstat -a
活动连接
协议 本地地址 外部地址 状态
TCP 0.0.0.0:21 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 0.0.0.0:80 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 0.0.0.0:135 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 0.0.0.0:445 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 0.0.0.0:5040 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 0.0.0.0:5357 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 0.0.0.0:7680 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 0.0.0.0:8080 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 0.0.0.0:33212 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 0.0.0.0:49664 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 0.0.0.0:49665 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 0.0.0.0:49666 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 0.0.0.0:49667 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 0.0.0.0:49668 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 0.0.0.0:49672 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 0.0.0.0:49673 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 0.0.0.0:49674 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 127.0.0.1:1001 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 127.0.0.1:4012 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 127.0.0.1:4013 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 127.0.0.1:4301 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 127.0.0.1:5354 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 127.0.0.1:8680 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 127.0.0.1:15624 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 127.0.0.1:21440 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 127.0.0.1:21441 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 127.0.0.1:28317 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:49327 ESTABLISHED
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:49756 ESTABLISHED
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:49831 ESTABLISHED
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:50011 ESTABLISHED
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:50329 ESTABLISHED
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:50334 ESTABLISHED
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:50337 TIME_WAIT
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:50359 ESTABLISHED
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:50363 ESTABLISHED
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:53085 ESTABLISHED
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:63473 ESTABLISHED
TCP 127.0.0.1:33211 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 127.0.0.1:49327 DESKTOP-PQ3T9SJ:33210 ESTABLISHED
TCP 127.0.0.1:49756 DESKTOP-PQ3T9SJ:33210 ESTABLISHED
TCP 127.0.0.1:49831 DESKTOP-PQ3T9SJ:33210 ESTABLISHED
TCP 127.0.0.1:50011 DESKTOP-PQ3T9SJ:33210 ESTABLISHED
TCP 127.0.0.1:50319 DESKTOP-PQ3T9SJ:33210 TIME_WAIT
TCP 127.0.0.1:50329 DESKTOP-PQ3T9SJ:33210 ESTABLISHED
TCP 127.0.0.1:50334 DESKTOP-PQ3T9SJ:33210 ESTABLISHED
TCP 127.0.0.1:50337 DESKTOP-PQ3T9SJ:33210 TIME_WAIT
TCP 127.0.0.1:50351 DESKTOP-PQ3T9SJ:33210 TIME_WAIT
TCP 127.0.0.1:50359 DESKTOP-PQ3T9SJ:33210 ESTABLISHED
TCP 127.0.0.1:50363 DESKTOP-PQ3T9SJ:33210 ESTABLISHED
TCP 127.0.0.1:53085 DESKTOP-PQ3T9SJ:33210 ESTABLISHED
TCP 127.0.0.1:54095 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 127.0.0.1:63473 DESKTOP-PQ3T9SJ:33210 ESTABLISHED
TCP 127.0.0.1:64283 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 127.0.0.1:64283 DESKTOP-PQ3T9SJ:64524 ESTABLISHED
TCP 127.0.0.1:64288 DESKTOP-PQ3T9SJ:65001 ESTABLISHED
TCP 127.0.0.1:64301 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 127.0.0.1:64383 DESKTOP-PQ3T9SJ:64384 ESTABLISHED
TCP 127.0.0.1:64384 DESKTOP-PQ3T9SJ:64383 ESTABLISHED
TCP 127.0.0.1:64491 DESKTOP-PQ3T9SJ:64492 ESTABLISHED
TCP 127.0.0.1:64492 DESKTOP-PQ3T9SJ:64491 ESTABLISHED
TCP 127.0.0.1:64524 DESKTOP-PQ3T9SJ:64283 ESTABLISHED
TCP 127.0.0.1:64891 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 127.0.0.1:65001 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 127.0.0.1:65001 DESKTOP-PQ3T9SJ:64288 ESTABLISHED
TCP 127.0.0.1:65061 DESKTOP-PQ3T9SJ:0 LISTENING
TCP 192.168.2.199:139 DESKTOP-PQ3T9SJ:0 LISTENING
注意,进入这个监听环境后,有任何的IP或端口方面的变动,都会在cmd窗口更新。
因此,如果需要停止监听,需要按下快捷键【ctrl+c】来退出。
四、以数字形式显示地址和端口号(参数-n)
执行命令【netstat -n】,显示信息如下。
C:\Users\Administrator>netstat -n
活动连接
协议 本地地址 外部地址 状态
TCP 127.0.0.1:33210 127.0.0.1:49327 ESTABLISHED
TCP 127.0.0.1:33210 127.0.0.1:49756 ESTABLISHED
TCP 127.0.0.1:33210 127.0.0.1:49831 ESTABLISHED
TCP 127.0.0.1:33210 127.0.0.1:50011 ESTABLISHED
TCP 127.0.0.1:33210 127.0.0.1:50329 ESTABLISHED
TCP 127.0.0.1:33210 127.0.0.1:50334 ESTABLISHED
TCP 127.0.0.1:33210 127.0.0.1:50337 TIME_WAIT
TCP 127.0.0.1:33210 127.0.0.1:50359 ESTABLISHED
TCP 127.0.0.1:33210 127.0.0.1:50363 ESTABLISHED
TCP 127.0.0.1:33210 127.0.0.1:53085 ESTABLISHED
TCP 127.0.0.1:33210 127.0.0.1:63473 ESTABLISHED
TCP 127.0.0.1:49327 127.0.0.1:33210 ESTABLISHED
TCP 127.0.0.1:49756 127.0.0.1:33210 ESTABLISHED
TCP 127.0.0.1:49831 127.0.0.1:33210 ESTABLISHED
TCP 127.0.0.1:50011 127.0.0.1:33210 ESTABLISHED
TCP 127.0.0.1:50319 127.0.0.1:33210 TIME_WAIT
TCP 127.0.0.1:50329 127.0.0.1:33210 ESTABLISHED
TCP 127.0.0.1:50334 127.0.0.1:33210 ESTABLISHED
TCP 127.0.0.1:50337 127.0.0.1:33210 TIME_WAIT
TCP 127.0.0.1:50351 127.0.0.1:33210 TIME_WAIT
TCP 127.0.0.1:50359 127.0.0.1:33210 ESTABLISHED
TCP 127.0.0.1:50363 127.0.0.1:33210 ESTABLISHED
TCP 127.0.0.1:53085 127.0.0.1:33210 ESTABLISHED
TCP 127.0.0.1:63473 127.0.0.1:33210 ESTABLISHED
TCP 127.0.0.1:64283 127.0.0.1:64524 ESTABLISHED
TCP 127.0.0.1:64288 127.0.0.1:65001 ESTABLISHED
TCP 127.0.0.1:64383 127.0.0.1:64384 ESTABLISHED
TCP 127.0.0.1:64384 127.0.0.1:64383 ESTABLISHED
TCP 127.0.0.1:64491 127.0.0.1:64492 ESTABLISHED
TCP 127.0.0.1:64492 127.0.0.1:64491 ESTABLISHED
TCP 127.0.0.1:64524 127.0.0.1:64283 ESTABLISHED
TCP 127.0.0.1:65001 127.0.0.1:64288 ESTABLISHED
TCP 192.168.2.199:49196 112.90.80.126:993 ESTABLISHED
TCP 192.168.2.199:49197 120.232.27.226:8080 ESTABLISHED
TCP 192.168.2.199:49198 111.30.187.192:443 ESTABLISHED
TCP 192.168.2.199:49199 36.155.208.117:443 ESTABLISHED
TCP 192.168.2.199:49270 111.30.170.241:14000 ESTABLISHED
TCP 192.168.2.199:49319 120.241.150.69:8080 ESTABLISHED
TCP 192.168.2.199:49322 119.45.78.254:80 CLOSE_WAIT
TCP 192.168.2.199:49328 121.51.248.210:443 ESTABLISHED
TCP 192.168.2.199:49350 121.51.36.50:443 CLOSE_WAIT
TCP 192.168.2.199:49354 119.45.78.254:80 CLOSE_WAIT
TCP 192.168.2.199:49380 119.45.78.254:80 CLOSE_WAIT
TCP 192.168.2.199:49381 121.51.36.50:443 CLOSE_WAIT
TCP 192.168.2.199:49393 121.51.36.50:443 CLOSE_WAIT
TCP 192.168.2.199:49432 182.254.54.218:443 CLOSE_WAIT
TCP 192.168.2.199:49433 119.45.78.254:80 CLOSE_WAIT
TCP 192.168.2.199:49492 113.96.210.18:993 ESTABLISHED
TCP 192.168.2.199:49551 52.98.65.2:993 ESTABLISHED
TCP 192.168.2.199:49678 40.99.10.34:993 ESTABLISHED
TCP 192.168.2.199:49757 103.98.243.104:443 ESTABLISHED
TCP 192.168.2.199:49832 154.8.217.108:7826 ESTABLISHED
TCP 192.168.2.199:50012 120.131.2.207:443 ESTABLISHED
TCP 192.168.2.199:50244 183.47.101.192:993 ESTABLISHED
TCP 192.168.2.199:50302 121.46.148.52:8081 ESTABLISHED
TCP 192.168.2.199:50330 116.129.254.250:16202 ESTABLISHED
TCP 192.168.2.199:50335 39.97.4.86:443 ESTABLISHED
TCP 192.168.2.199:50352 52.168.112.67:443 TIME_WAIT
TCP 192.168.2.199:50358 121.51.36.101:443 CLOSE_WAIT
TCP 192.168.2.199:50360 8.134.32.222:443 ESTABLISHED
TCP 192.168.2.199:50364 116.129.254.250:16202 ESTABLISHED
TCP 192.168.2.199:50366 116.129.254.250:16202 ESTABLISHED
TCP 192.168.2.199:50837 59.36.89.146:443 CLOSE_WAIT
TCP 192.168.2.199:50941 119.45.78.254:80 CLOSE_WAIT
TCP 192.168.2.199:52434 14.18.180.247:443 CLOSE_WAIT
TCP 192.168.2.199:52436 119.45.78.254:80 CLOSE_WAIT
TCP 192.168.2.199:55553 121.51.36.112:443 CLOSE_WAIT
TCP 192.168.2.199:57899 121.46.148.54:8081 ESTABLISHED
TCP 192.168.2.199:63474 103.98.81.100:443 ESTABLISHED
TCP 192.168.2.199:64110 103.98.80.231:80 CLOSE_WAIT
TCP 192.168.2.199:64111 103.98.80.231:80 CLOSE_WAIT
TCP 192.168.2.199:64258 40.90.189.152:443 ESTABLISHED
TCP 192.168.2.199:64323 121.51.140.150:443 ESTABLISHED
TCP 192.168.2.199:64353 60.191.83.7:443 ESTABLISHED
TCP 192.168.2.199:64388 113.108.239.161:443 CLOSE_WAIT
TCP 192.168.2.199:64845 121.51.36.101:443 CLOSE_WAIT
TCP 192.168.2.199:64848 121.51.36.101:443 CLOSE_WAIT
TCP 192.168.2.199:64849 121.51.36.101:443 CLOSE_WAIT
TCP 192.168.2.199:64850 121.51.36.101:443 CLOSE_WAIT
我们可以知道,它本质上就是把本地计算机名显示成了「127.0.0.1」,等等。
而我们执行命令【netstat -an】,其实也相当于执行【netstat -a -n】。
我没想到的是,执行命令【netstat -an】得到的项中竟然有【netstat -a】和【netstat -n】得不到的项。
C:\Users\Administrator>netstat -na
活动连接
协议 本地地址 外部地址 状态
TCP 0.0.0.0:21 0.0.0.0:0 LISTENING
TCP 0.0.0.0:80 0.0.0.0:0 LISTENING
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 0.0.0.0:5040 0.0.0.0:0 LISTENING
TCP 0.0.0.0:5357 0.0.0.0:0 LISTENING
TCP 0.0.0.0:7680 0.0.0.0:0 LISTENING
TCP 0.0.0.0:8080 0.0.0.0:0 LISTENING
TCP 0.0.0.0:33212 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49664 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49665 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49666 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49667 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49668 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49672 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49673 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49674 0.0.0.0:0 LISTENING
TCP 127.0.0.1:1001 0.0.0.0:0 LISTENING
TCP 127.0.0.1:4012 0.0.0.0:0 LISTENING
TCP 127.0.0.1:4013 0.0.0.0:0 LISTENING
TCP 127.0.0.1:4301 0.0.0.0:0 LISTENING
TCP 127.0.0.1:5354 0.0.0.0:0 LISTENING
TCP 127.0.0.1:8680 0.0.0.0:0 LISTENING
TCP 127.0.0.1:15624 0.0.0.0:0 LISTENING
TCP 127.0.0.1:21440 0.0.0.0:0 LISTENING
TCP 127.0.0.1:21441 0.0.0.0:0 LISTENING
TCP 127.0.0.1:28317 0.0.0.0:0 LISTENING
TCP 127.0.0.1:33210 0.0.0.0:0 LISTENING
TCP 127.0.0.1:33210 127.0.0.1:49327 ESTABLISHED
TCP 127.0.0.1:33210 127.0.0.1:49756 ESTABLISHED
TCP 127.0.0.1:33210 127.0.0.1:49831 ESTABLISHED
TCP 127.0.0.1:33210 127.0.0.1:50011 ESTABLISHED
TCP 127.0.0.1:33210 127.0.0.1:50287 TIME_WAIT
TCP 127.0.0.1:33210 127.0.0.1:50312 TIME_WAIT
TCP 127.0.0.1:33210 127.0.0.1:50319 ESTABLISHED
TCP 127.0.0.1:33210 127.0.0.1:50329 ESTABLISHED
TCP 127.0.0.1:33210 127.0.0.1:50334 ESTABLISHED
TCP 127.0.0.1:33210 127.0.0.1:50337 ESTABLISHED
TCP 127.0.0.1:33210 127.0.0.1:53085 ESTABLISHED
TCP 127.0.0.1:33210 127.0.0.1:63473 ESTABLISHED
TCP 127.0.0.1:33211 0.0.0.0:0 LISTENING
TCP 127.0.0.1:49327 127.0.0.1:33210 ESTABLISHED
TCP 127.0.0.1:49756 127.0.0.1:33210 ESTABLISHED
TCP 127.0.0.1:49831 127.0.0.1:33210 ESTABLISHED
TCP 127.0.0.1:50011 127.0.0.1:33210 ESTABLISHED
TCP 127.0.0.1:50319 127.0.0.1:33210 ESTABLISHED
TCP 127.0.0.1:50329 127.0.0.1:33210 ESTABLISHED
TCP 127.0.0.1:50334 127.0.0.1:33210 ESTABLISHED
TCP 127.0.0.1:50337 127.0.0.1:33210 ESTABLISHED
TCP 127.0.0.1:53085 127.0.0.1:33210 ESTABLISHED
TCP 127.0.0.1:54095 0.0.0.0:0 LISTENING
TCP 127.0.0.1:63473 127.0.0.1:33210 ESTABLISHED
TCP 127.0.0.1:64283 0.0.0.0:0 LISTENING
TCP 127.0.0.1:64283 127.0.0.1:64524 ESTABLISHED
TCP 127.0.0.1:64288 127.0.0.1:65001 ESTABLISHED
TCP 127.0.0.1:64301 0.0.0.0:0 LISTENING
TCP 127.0.0.1:64383 127.0.0.1:64384 ESTABLISHED
TCP 127.0.0.1:64384 127.0.0.1:64383 ESTABLISHED
TCP 127.0.0.1:64491 127.0.0.1:64492 ESTABLISHED
TCP 127.0.0.1:64492 127.0.0.1:64491 ESTABLISHED
TCP 127.0.0.1:64524 127.0.0.1:64283 ESTABLISHED
TCP 127.0.0.1:64891 0.0.0.0:0 LISTENING
TCP 127.0.0.1:65001 0.0.0.0:0 LISTENING
TCP 127.0.0.1:65001 127.0.0.1:64288 ESTABLISHED
TCP 127.0.0.1:65061 0.0.0.0:0 LISTENING
TCP 192.168.2.199:139 0.0.0.0:0 LISTENING
TCP 192.168.2.199:49196 112.90.80.126:993 ESTABLISHED
TCP 192.168.2.199:49197 120.232.27.226:8080 ESTABLISHED
TCP 192.168.2.199:49198 111.30.187.192:443 ESTABLISHED
TCP 192.168.2.199:49199 36.155.208.117:443 ESTABLISHED
TCP 192.168.2.199:49270 111.30.170.241:14000 ESTABLISHED
TCP 192.168.2.199:49319 120.241.150.69:8080 ESTABLISHED
TCP 192.168.2.199:49322 119.45.78.254:80 CLOSE_WAIT
TCP 192.168.2.199:49328 121.51.248.210:443 ESTABLISHED
TCP 192.168.2.199:49350 121.51.36.50:443 CLOSE_WAIT
TCP 192.168.2.199:49354 119.45.78.254:80 CLOSE_WAIT
TCP 192.168.2.199:49380 119.45.78.254:80 CLOSE_WAIT
TCP 192.168.2.199:49381 121.51.36.50:443 CLOSE_WAIT
TCP 192.168.2.199:49393 121.51.36.50:443 CLOSE_WAIT
TCP 192.168.2.199:49432 182.254.54.218:443 CLOSE_WAIT
TCP 192.168.2.199:49433 119.45.78.254:80 CLOSE_WAIT
TCP 192.168.2.199:49492 113.96.210.18:993 ESTABLISHED
TCP 192.168.2.199:49551 52.98.65.2:993 ESTABLISHED
TCP 192.168.2.199:49678 40.99.10.34:993 ESTABLISHED
TCP 192.168.2.199:49757 103.98.243.104:443 ESTABLISHED
TCP 192.168.2.199:49832 154.8.217.108:7826 ESTABLISHED
TCP 192.168.2.199:50012 120.131.2.207:443 ESTABLISHED
TCP 192.168.2.199:50244 183.47.101.192:993 ESTABLISHED
TCP 192.168.2.199:50300 121.51.36.101:443 CLOSE_WAIT
TCP 192.168.2.199:50302 121.46.148.52:8081 ESTABLISHED
TCP 192.168.2.199:50315 111.19.184.84:80 LAST_ACK
TCP 192.168.2.199:50320 103.98.243.224:443 ESTABLISHED
TCP 192.168.2.199:50323 183.2.143.108:443 ESTABLISHED
TCP 192.168.2.199:50324 183.2.143.108:443 ESTABLISHED
TCP 192.168.2.199:50325 183.2.143.108:443 ESTABLISHED
TCP 192.168.2.199:50327 183.2.143.108:443 ESTABLISHED
TCP 192.168.2.199:50328 111.30.187.252:80 CLOSE_WAIT
TCP 192.168.2.199:50330 116.129.254.250:16202 ESTABLISHED
TCP 192.168.2.199:50335 39.97.4.86:443 ESTABLISHED
TCP 192.168.2.199:50338 119.3.33.86:443 ESTABLISHED
TCP 192.168.2.199:50837 59.36.89.146:443 CLOSE_WAIT
TCP 192.168.2.199:50941 119.45.78.254:80 CLOSE_WAIT
TCP 192.168.2.199:52434 14.18.180.247:443 CLOSE_WAIT
TCP 192.168.2.199:52436 119.45.78.254:80 CLOSE_WAIT
TCP 192.168.2.199:55553 121.51.36.112:443 CLOSE_WAIT
TCP 192.168.2.199:57899 121.46.148.54:8081 ESTABLISHED
TCP 192.168.2.199:63474 103.98.81.100:443 ESTABLISHED
TCP 192.168.2.199:64110 103.98.80.231:80 CLOSE_WAIT
TCP 192.168.2.199:64111 103.98.80.231:80 CLOSE_WAIT
TCP 192.168.2.199:64258 40.90.189.152:443 ESTABLISHED
TCP 192.168.2.199:64323 121.51.140.150:443 ESTABLISHED
TCP 192.168.2.199:64353 60.191.83.7:443 ESTABLISHED
TCP 192.168.2.199:64388 113.108.239.161:443 CLOSE_WAIT
TCP 192.168.2.199:64845 121.51.36.101:443 CLOSE_WAIT
TCP 192.168.2.199:64848 121.51.36.101:443 CLOSE_WAIT
TCP 192.168.2.199:64849 121.51.36.101:443 CLOSE_WAIT
TCP 192.168.2.199:64850 121.51.36.101:443 CLOSE_WAIT
TCP [::]:21 [::]:0 LISTENING
TCP [::]:80 [::]:0 LISTENING
TCP [::]:135 [::]:0 LISTENING
TCP [::]:445 [::]:0 LISTENING
TCP [::]:5357 [::]:0 LISTENING
TCP [::]:7680 [::]:0 LISTENING
TCP [::]:8080 [::]:0 LISTENING
TCP [::]:33212 [::]:0 LISTENING
TCP [::]:49664 [::]:0 LISTENING
TCP [::]:49665 [::]:0 LISTENING
TCP [::]:49666 [::]:0 LISTENING
TCP [::]:49667 [::]:0 LISTENING
TCP [::]:49668 [::]:0 LISTENING
TCP [::]:49672 [::]:0 LISTENING
UDP 0.0.0.0:500 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:4027 *:*
UDP 0.0.0.0:4500 *:*
UDP 0.0.0.0:5050 *:*
UDP 0.0.0.0:5353 *:*
UDP 0.0.0.0:5353 *:*
UDP 0.0.0.0:5353 *:*
UDP 0.0.0.0:5353 *:*
UDP 0.0.0.0:5353 *:*
UDP 0.0.0.0:5353 *:*
UDP 0.0.0.0:5353 *:*
UDP 0.0.0.0:5355 *:*
UDP 0.0.0.0:49665 *:*
UDP 0.0.0.0:49667 *:*
UDP 0.0.0.0:59835 *:*
UDP 0.0.0.0:62178 *:*
UDP 127.0.0.1:1900 *:*
UDP 127.0.0.1:10010 *:*
UDP 127.0.0.1:33211 *:*
UDP 127.0.0.1:49664 *:*
UDP 127.0.0.1:53286 *:*
UDP 127.0.0.1:55772 *:*
UDP 127.0.0.1:55773 *:*
UDP 127.0.0.1:55774 *:*
UDP 127.0.0.1:55775 *:*
UDP 127.0.0.1:55776 *:*
UDP 127.0.0.1:55777 *:*
UDP 127.0.0.1:60027 *:*
UDP 127.0.0.1:62172 *:*
UDP 127.0.0.1:62173 *:*
UDP 127.0.0.1:62174 *:*
UDP 127.0.0.1:62175 *:*
UDP 192.168.2.199:137 *:*
UDP 192.168.2.199:138 *:*
UDP 192.168.2.199:1900 *:*
UDP 192.168.2.199:5353 *:*
UDP 192.168.2.199:5353 *:*
UDP 192.168.2.199:60026 *:*
UDP [::]:500 *:*
UDP [::]:3702 *:*
UDP [::]:3702 *:*
UDP [::]:4500 *:*
UDP [::]:5353 *:*
UDP [::]:5353 *:*
UDP [::]:5353 *:*
UDP [::]:5353 *:*
UDP [::]:5355 *:*
UDP [::]:49666 *:*
UDP [::]:49668 *:*
UDP [::]:62179 *:*
UDP [::1]:1900 *:*
UDP [::1]:5353 *:*
UDP [::1]:5353 *:*
UDP [::1]:60025 *:*
UDP [fe80::11e8:3fa6:964c:2e4%17]:1900 *:*
UDP [fe80::11e8:3fa6:964c:2e4%17]:60024 *:*
五、显示进程ID(参数-o)
执行命令【netstat -o】,可以发现得到的最右边那一列,就是PID端口号。
C:\Users\Administrator>netstat -o
活动连接
协议 本地地址 外部地址 状态 PID
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:49327 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:49756 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:49831 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:50399 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:50843 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:50848 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:50849 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:50850 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:50851 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:50852 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:50853 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:50854 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:50856 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51424 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51428 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51430 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51447 TIME_WAIT 0
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51454 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51457 TIME_WAIT 0
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51462 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51466 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51468 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51472 TIME_WAIT 0
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51486 TIME_WAIT 0
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51490 TIME_WAIT 0
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51509 TIME_WAIT 0
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51515 TIME_WAIT 0
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51516 TIME_WAIT 0
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51521 TIME_WAIT 0
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51529 TIME_WAIT 0
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51531 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51548 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51553 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51556 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51560 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51567 TIME_WAIT 0
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51569 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51571 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51573 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51575 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51577 ESTABLISHED 6092
TCP 127.0.0.1:33210 DESKTOP-PQ3T9SJ:51579 ESTABLISHED 6092
TCP 127.0.0.1:49327 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 4368
TCP 127.0.0.1:49756 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 16840
TCP 127.0.0.1:49831 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 14344
TCP 127.0.0.1:50399 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 16840
TCP 127.0.0.1:50843 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 10292
TCP 127.0.0.1:50848 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 10292
TCP 127.0.0.1:50849 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 10292
TCP 127.0.0.1:50850 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 10292
TCP 127.0.0.1:50851 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 10292
TCP 127.0.0.1:50852 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 10292
TCP 127.0.0.1:50853 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 10292
TCP 127.0.0.1:50854 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 10292
TCP 127.0.0.1:50856 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 10292
TCP 127.0.0.1:51424 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 14344
TCP 127.0.0.1:51428 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 14344
TCP 127.0.0.1:51430 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 14344
TCP 127.0.0.1:51454 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 14344
TCP 127.0.0.1:51457 DESKTOP-PQ3T9SJ:33210 TIME_WAIT 0
TCP 127.0.0.1:51459 DESKTOP-PQ3T9SJ:33210 TIME_WAIT 0
TCP 127.0.0.1:51462 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 14344
TCP 127.0.0.1:51464 DESKTOP-PQ3T9SJ:33210 TIME_WAIT 0
TCP 127.0.0.1:51466 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 14344
TCP 127.0.0.1:51468 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 14344
TCP 127.0.0.1:51492 DESKTOP-PQ3T9SJ:33210 TIME_WAIT 0
TCP 127.0.0.1:51494 DESKTOP-PQ3T9SJ:33210 TIME_WAIT 0
TCP 127.0.0.1:51496 DESKTOP-PQ3T9SJ:33210 TIME_WAIT 0
TCP 127.0.0.1:51499 DESKTOP-PQ3T9SJ:33210 TIME_WAIT 0
TCP 127.0.0.1:51507 DESKTOP-PQ3T9SJ:33210 TIME_WAIT 0
TCP 127.0.0.1:51511 DESKTOP-PQ3T9SJ:33210 TIME_WAIT 0
TCP 127.0.0.1:51513 DESKTOP-PQ3T9SJ:33210 TIME_WAIT 0
TCP 127.0.0.1:51515 DESKTOP-PQ3T9SJ:33210 TIME_WAIT 0
TCP 127.0.0.1:51519 DESKTOP-PQ3T9SJ:33210 TIME_WAIT 0
TCP 127.0.0.1:51521 DESKTOP-PQ3T9SJ:33210 TIME_WAIT 0
TCP 127.0.0.1:51522 DESKTOP-PQ3T9SJ:33210 TIME_WAIT 0
TCP 127.0.0.1:51529 DESKTOP-PQ3T9SJ:33210 TIME_WAIT 0
TCP 127.0.0.1:51531 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 14344
TCP 127.0.0.1:51548 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 14344
TCP 127.0.0.1:51553 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 14344
TCP 127.0.0.1:51556 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 16840
TCP 127.0.0.1:51558 DESKTOP-PQ3T9SJ:33210 TIME_WAIT 0
TCP 127.0.0.1:51560 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 10524
TCP 127.0.0.1:51569 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 14344
TCP 127.0.0.1:51571 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 14344
TCP 127.0.0.1:51573 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 14344
TCP 127.0.0.1:51575 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 14344
TCP 127.0.0.1:51577 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 14344
TCP 127.0.0.1:51579 DESKTOP-PQ3T9SJ:33210 ESTABLISHED 14344
TCP 127.0.0.1:64283 DESKTOP-PQ3T9SJ:64524 ESTABLISHED 1700
TCP 127.0.0.1:64288 DESKTOP-PQ3T9SJ:65001 ESTABLISHED 4160
TCP 127.0.0.1:64383 DESKTOP-PQ3T9SJ:64384 ESTABLISHED 12648
TCP 127.0.0.1:64384 DESKTOP-PQ3T9SJ:64383 ESTABLISHED 12648
TCP 127.0.0.1:64491 DESKTOP-PQ3T9SJ:64492 ESTABLISHED 12648
TCP 127.0.0.1:64492 DESKTOP-PQ3T9SJ:64491 ESTABLISHED 12648
TCP 127.0.0.1:64524 DESKTOP-PQ3T9SJ:64283 ESTABLISHED 14344
TCP 127.0.0.1:65001 DESKTOP-PQ3T9SJ:64288 ESTABLISHED 4160
同样,这个参数-o也可以与参数-a和-n结合,写成-ano。
六、查询被占用的端口的程序/进程(netstat和findstr)
在开发的时候,我们经常需要对某些端口进行测试;而如果这个端口被占用的话,是无法正常进行的。
所以我们需要先查询出被占用端口的程序是什么,以及关闭它之后,我们就可以继续开发了。
如何查询呢?
假设我们需要查询「9552」这个端口被什么进程或程序占用了。
执行命令【netstat -ano | findstr 9552】,结果中没有PID符合9552的
可能是因为这个进程号对应的程序是内核程序,比如说cmd.exe、regedit.exe就是这种。
也可能是因为这个进程号对应的程序没有必要和本地建立TCP或UDP连接,比如说剪贴板神器ditto.exe。
因此,我们还需要执行命令【tasklist | findstr 9552】,对所有的任务进程或程序进行搜索;如下图所示,这玩意果然是内核程序——注册表编辑器。
C:\Users\Administrator>tasklist | findstr 9552
regedit.exe 9552 Console 1 11,872 K
C:\Users\Administrator>
下面我们强制(/f)杀掉这个内核程序及其它附属的所有子程序(/t),执行命令【taskkill /T /F /PID 9552】。弹出拒绝访问?哈哈哈哈。
我再以管理员身份进入cmd窗口,再次执行同一命令。成功啦!!!
另外说点不相干的,如果想看直观版本的任务进程信息,可以在任务管理器中查看,对应的命令是【taskmgr】。