http://www.cnblogs.com/txw1958/archive/2012/07/26/linux-netstat.html
功能说明:Netstat用于显示与IP、TCP、UDP和ICMP协议相关的统计数据,一般用于检验本机各端口的网络连接情况。
语 法:netstat [-acCeFghilMnNoprstuvVwx][-A<网络类型>][--ip]
补充说明:利用netstat指令可让你得知整个Linux系统的网络情况。
参 数:
-a或–all 显示所有连线中的Socket。
-A<网络类型>或–<网络类型> 列出该网络类型连线中的相关地址。
-c或–continuous 持续列出网络状态。
-C或–cache 显示路由器配置的快取信息。
-e或–extend 显示网络其他相关信息。
-F或–fib 显示FIB。
-g或–groups 显示多重广播功能群组组员名单。
-h或–help 在线帮助。
-i或–interfaces 显示网络界面信息表单。
-l或–listening 显示监控中的服务器的Socket。
-M或–masquerade 显示伪装的网络连线。
-n或–numeric 直接使用IP地址,而不通过域名服务器。
-N或–netlink或–symbolic 显示网络硬件外围设备的符号连接名称。
-o或–timers 显示计时器。
-p或–programs 显示正在使用Socket的程序识别码和程序名称。
-r或–route 显示Routing Table。
-s或–statistice 显示网络工作信息统计表。
-t或–tcp 显示TCP传输协议的连线状况。
-u或–udp 显示UDP传输协议的连线状况。
-v或–verbose 显示指令执行过程。
-V或–version 显示版本信息。
-w或–raw 显示RAW传输协议的连线状况。
-x或–unix 此参数的效果和指定”-A unix”参数相同。
–ip或–inet 此参数的效果和指定”-A inet”参数相同
netstat 的一些常用选项
netstat -s
本选项能够按照各个协议分别显示其统计数据。如果我们的应用程序(如Web浏览器)运行速度比较慢,或者不能显示Web页之类的数据,那么我们就可以用本选项来查看一下所显示的信息。我们需要仔细查看统计数据的各行,找到出错的关键字,进而确定问题所在。
[root@SM155 proc]# netstat -s
Ip:
total packets received
forwarded
incoming packets discarded
incoming packets delivered
requests sent out
fragments dropped after timeout
reassemblies required
packets reassembled ok
packet reassembles failed
Icmp:
ICMP messages received
input ICMP message failed.
ICMP input histogram:
destination unreachable: 4362
echo requests: 11661
ICMP messages sent
ICMP messages failed
ICMP output histogram:
destination unreachable: 7815
echo replies: 11661
Tcp:
active connections openings
passive connection openings
failed connection attempts
connection resets received
connections established
segments received
segments send out
segments retransmited
bad segments received.
resets sent
Udp:
packets received
packets to unknown port received.
packet receive errors
packets sent
TcpExt:
ArpFilter: 0
TCP sockets finished time wait in fast timer
time wait sockets recycled by time stamp
delayed acks sent
delayed acks further delayed because of locked socket
Quick ack mode was activated 12 times
packets directly queued to recvmsg prequeue.
packets directly received from prequeue
packets header predicted
packets header predicted and directly queued to user
TCPPureAcks: 249691
TCPHPAcks: 1235152
TCPRenoRecovery: 0
TCPSackRecovery: 1
TCPSACKReneging: 0
TCPFACKReorder: 0
TCPSACKReorder: 0
netstat -e
本选项用于显示关于以太网的统计数据。它列出的项目包括传送的数据报的总字节数、错误数、删除数、数据报的数量和广播的数量。这些统计数据既有发送的数据报数量,也有接收的数据报数量。这个选项可以用来统计一些基本的网络流量)。
[root@SM155 proc]# netstat -e
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State User Inode
tcp 0 0 10.90.243.155:49182 10.90.243.27:32931 ESTABLISHED root 382858
tcp 0 0 localhost.localdomain:49176 localhost.localdomain:39918 ESTABLISHED root 24542
tcp 1 0 10.90.243.155:64766 10.90.243.27:951 CLOSE_WAIT root 3239351
tcp 0 0 localhost.localdomain:39015 localhost.localdomain:49178 ESTABLISHED root 24546
tcp 0 0 localhost.localdomain:39016 localhost.localdomain:49179 ESTABLISHED root 24548
tcp 0 0 10.90.243.155:ssh 10.88.22.243:3672 ESTABLISHED root 6062002
netstat -r
本选项可以显示关于路由表的信息,类似于后面所讲使用route print命令时看到的 信息。除了显示有效路由外,还显示当前有效的连接。
[root@SM155 proc]# netstat -r
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
10.90.243.0 * 255.255.255.0 U 0 0 0 eth0
10.10.10.0 * 255.255.255.0 U 0 0 0 eth1
169.254.0.0 * 255.255.0.0 U 0 0 0 eth1
default 10.90.243.1 0.0.0.0 UG 0 0 0 eth0
[root@SM155 proc]#
netstat -a
本选项显示一个所有的有效连接信息列表,包括已建立的连接(ESTABLISHED),也包括监听连接请(LISTENING)的那些连接。
[root@SM155 proc]# netstat -a
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 10.90.243.155:39010 *:* LISTEN
tcp 0 0 *:shell *:* LISTEN
tcp 0 0 10.90.243.155:39011 *:* LISTEN
tcp 0 0 *:39012 *:* LISTEN
tcp 0 0 *:39015 *:* LISTEN
tcp 0 0 *:49159 *:* LISTEN
tcp 0 0 localhost.localdomain:39016 *:* LISTEN
tcp 0 0 *:49166 *:* LISTEN
tcp 0 0 *:39918 *:* LISTEN
tcp 0 0 *:sunrpc *:* LISTEN
tcp 0 0 *:49173 *:* LISTEN
tcp 0 0 *:ftp *:* LISTEN
tcp 0 0 *:ssh *:* LISTEN
tcp 0 0 *:13819 *:* LISTEN
tcp 0 0 *:2812 *:* LISTEN
tcp 0 0 10.90.243.155:49182 *:* LISTEN
tcp 0 0 10.90.243.155:49182 10.90.243.27:32931 ESTABLISHED
tcp 0 0 localhost.localdomain:49176 localhost.localdomain:39918 ESTABLISHED
tcp 1 0 10.90.243.155:64766 10.90.243.27:951 CLOSE_WAIT
tcp 0 0 localhost.localdomain:39015 localhost.localdomain:49178 ESTABLISHED
tcp 0 0 localhost.localdomain:39016 localhost.localdomain:49179 ESTABLISHED
netstat -n
显示所有已建立的有效连接。
[root@SM155 proc]# netstat -n
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 10.90.243.155:49182 10.90.243.27:32931 ESTABLISHED
tcp 0 0 127.0.0.1:49176 127.0.0.1:39918 ESTABLISHED
tcp 1 0 10.90.243.155:64766 10.90.243.27:951 CLOSE_WAIT
tcp 0 0 127.0.0.1:39015 127.0.0.1:49178 ESTABLISHED
tcp 0 0 127.0.0.1:39016 127.0.0.1:49179 ESTABLISHED
tcp 0 0 127.0.0.1:39918 127.0.0.1:49176 ESTABLISHED
tcp 0 0 10.90.243.155:58692 10.90.243.155:39010 ESTABLISHED
tcp 0 0 10.90.243.155:39012 10.90.243.155:49168 ESTABLISHED
tcp 0 0 127.0.0.1:39012 127.0.0.1:49174 ESTABLISHED
tcp 0 0 10.90.243.155:39012 10.90.243.155:49175 ESTABLISHED
tcp 0 0 127.0.0.1:39012 127.0.0.1:49160 ESTABLISHED
tcp 0 0 10.90.243.155:39012 10.90.243.155:49161 ESTABLISHED
tcp 0 0 127.0.0.1:39012 127.0.0.1:49167 ESTABLISHED
tcp 0 0 10.90.243.155:49185 10.90.243.155:39011 ESTABLISHED
tcp 0 0 127.0.0.1:49174 127.0.0.1:39012 ESTABLISHED
tcp 0 0 10.90.243.155:49175 10.90.243.155:39012 ESTABLISHED
tcp 0 0 10.90.243.155:49168 10.90.243.155:39012 ESTABLISHED
tcp 0 0 127.0.0.1:49167 127.0.0.1:39012 ESTABLISHED
tcp 0 0 127.0.0.1:49160 127.0.0.1:39012 ESTABLISHED
tcp 0 0 10.90.243.155:49161 10.90.243.155:39012 ESTABLISHED
tcp 0 0 10.90.243.155:49159 10.90.243.155:58726 ESTABLISHED
tcp 0 0 127.0.0.1:49178 127.0.0.1:39015 ESTABLISHED
netstat -tunlp 显示监听端口状态
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:5000 0.0.0.0:* LISTEN 22696/uwsgi
tcp 0 0 127.0.0.1:52072 0.0.0.0:* LISTEN 22660/uwsgi
tcp 0 0 127.0.0.1:6379 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:54321 0.0.0.0:* LISTEN 1126/uwsgi
tcp 0 0 127.0.0.1:58740 0.0.0.0:* LISTEN 22696/uwsgi
tcp 0 0 127.0.0.1:40597 0.0.0.0:* LISTEN 31151/uwsgi
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:12345 0.0.0.0:* LISTEN 22675/uwsgi
tcp 101 0 127.0.0.1:56217 0.0.0.0:* LISTEN 1126/uwsgi
tcp 0 0 127.0.0.1:12346 0.0.0.0:* LISTEN 22660/uwsgi
tcp 0 0 127.0.0.1:34242 0.0.0.0:* LISTEN 22675/uwsgi
tcp 0 0 127.0.0.1:5059 0.0.0.0:* LISTEN 22675/uwsgi
tcp 0 0 127.0.0.1:9572 0.0.0.0:* LISTEN 31151/uwsgi
tcp 0 0 127.0.0.1:5060 0.0.0.0:* LISTEN 1126/uwsgi
tcp 0 0 127.0.0.1:5061 0.0.0.0:* LISTEN 31151/uwsgi
tcp 0 0 127.0.0.1:44486 0.0.0.0:* LISTEN 1135/uwsgi
tcp6 0 0 :::3306 :::* LISTEN -
udp 0 0 115.28.233.190:123 0.0.0.0:* -
udp 0 0 10.161.57.32:123 0.0.0.0:* -
udp 0 0 127.0.0.1:123 0.0.0.0:* -
udp 0 0 0.0.0.0:123 0.0.0.0:* -
udp6 0 0 :::123 :::* -