Home > Archive > General Discussion > October 2001 > netstat





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author netstat
sentme_mail

2001-09-28, 9:42 pm

hi
when i run netstat a pc it shows:

Active Connections

Proto Local Address Foreign Address State
TCP ronnie:epmap ronnie:0 LISTENING
TCP ronnie:microsoft-ds ronnie:0 LISTENING
TCP ronnie:1025 ronnie:0 LISTENING
TCP ronnie:1026 ronnie:0 LISTENING
TCP ronnie:1028 ronnie:0 LISTENING
TCP ronnieop3 ronnie:0 LISTENING
TCP ronnie:netbios-ssn ronnie:0 LISTENING
UDP ronnie:epmap *:*
UDP ronnie:microsoft-ds *:*
UDP ronnie:1027 *:*
UDP ronnie:1043 *:*
UDP ronnie:netbios-ns *:*
UDP ronnie:netbios-dgm *:*

can any body explain what does it means???
mir92

2001-09-30, 8:12 am

What type of system set up do you have?
esexon

2001-10-02, 5:08 pm

mmm
never seen this before
TCP ronnieop3 ronnie:0 LISTENING
How did that smiley get in there?:>
dmaftei

2001-10-02, 6:47 pm

quote:
Originally posted by esexon
mmm
never seen this before
TCP ronnieop3 ronnie:0 LISTENING
How did that smiley get in there?:>


It got in there because the board software blindly renders (that is a ":" followed by a "p"). The correct line is:

TCP ronnie:POP3 ronnie:0 LISTENING

except that in the real output POP is not in capitals.
dmaftei

2001-10-02, 6:51 pm

quote:
Originally posted by sentme_mail
can any body explain what does it means???

Exactly what don't you understand? If you look at the header line (Proto Local Address Foreign Address State), it should be self-explanatory.
sentme_mail

2001-10-02, 7:07 pm

TCP ronnie:netbios-ssn ronnie:0 LISTENING
UDP ronnie:epmap *:*
UDP ronnie:microsoft-ds *:*
UDP ronnie:1027 *:*
UDP ronnie:1043 *:*
UDP ronnie:netbios-ns *:*
UDP ronnie:netbios-dgm *:*
i don't know what are the functions of these lines above.

quote:
Originally posted by dmaftei

Exactly what don't you understand? If you look at the header line (Proto Local Address Foreign Address State), it should be self-explanatory.

dmaftei

2001-10-02, 7:25 pm

quote:
Originally posted by sentme_mail
i don't know what are the functions of these lines above.

Those are not functions. What comes after the protocol (TCP or UDP) is a socket. A socket has four parts: a source IP address, a source port, a destination IP address and a destination port. Again, look at the header line:

Proto Local Address Foreign Address State

Now take one of the lines in the output:

TCP ronnie:netbios-ssn ronnie:0 LISTENING

For this line:
- Proto is TCP
- Local Address is ronnie:netbios-ssn (in this case your IP address is resolved to your hostname, ronnie, and the port number is resolved to the service name, netbios-ssn)
- Foreign Address is ronnie:0
- State is LISTENING

The UDP lines don't have a state because UDP doesn't implement a finite state machine (TCP does).

If you want to see IP addresses instead of host names and port numbers instead of service names do a netstat -n. You will see something like:

TCP 192.168.1.1:139 192.168.1.1:0 LISTENING

There are more details to this, which I don't think you want to hear now...
Sponsored Links





Free Braindumps | MCSE braindumps software forum

Copyright 2003 - 2008 examnotes.net