自学教程：Linux netstat命令

Linux netstat命令用于显示网络状态。

利用netstat指令可让你得知整个Linux系统的网络情况。

语法

netstat [-acCeFghilMnNoprstuvVwx][-A<网络类型>][--ip]

参数说明：

• -a或--all 显示所有连线中的Socket。
• -A<网络类型>或--<网络类型> 列出该网络类型连线中的相关地址。
• -c或--continuous 持续列出网络状态。
• -C或--cache 显示路由器配置的快取信息。
• -e或--extend 显示网络其他相关信息。
• -F或--fib 显示FIB。
• -g或--groups 显示多重广播功能群组组员名单。
• -h或--help 在线帮助。
• -i或--interfaces 显示网络界面信息表单。
• -l或--listening 显示监控中的服务器的Socket。
• -M或--masquerade 显示伪装的网络连线。
• -n或--numeric 直接使用IP地址，而不通过域名服务器。
• -N或--netlink或--symbolic 显示网络硬件外围设备的符号连接名称。
• -o或--timers 显示计时器。
• -p或--programs 显示正在使用Socket的程序识别码和程序名称。
• -r或--route 显示Routing Table。
• -s或--statistice 显示网络工作信息统计表。
• -t或--tcp 显示TCP传输协议的连线状况。
• -u或--udp 显示UDP传输协议的连线状况。
• -v或--verbose 显示指令执行过程。
• -V或--version 显示版本信息。
• -w或--raw 显示RAW传输协议的连线状况。
• -x或--unix 此参数的效果和指定"-A unix"参数相同。
• --ip或--inet 此参数的效果和指定"-A inet"参数相同。

实例

显示详细的网络状况

# netstat -a

显示当前户籍UDP连接状况

# netstat -nu

显示UDP端口号的使用情况

# netstat -apuActive Internet connections (servers and established)Proto Recv-Q Send-Q Local Address        Foreign Address       State    PID/Program name  udp    0   0 *:32768           *:*                   -          udp    0   0 *:nfs            *:*                   -          udp    0   0 *:641            *:*                   3006/rpc.statd   udp    0   0 192.168.0.3:netbios-ns   *:*                   3537/nmbd      udp    0   0 *:netbios-ns        *:*                   3537/nmbd      udp    0   0 192.168.0.3:netbios-dgm   *:*                   3537/nmbd      udp    0   0 *:netbios-dgm        *:*                   3537/nmbd      udp    0   0 *:tftp           *:*                   3346/xinetd     udp    0   0 *:999            *:*                   3366/rpc.rquotad  udp    0   0 *:sunrpc          *:*                   2986/portmap    udp    0   0 *:ipp            *:*                   6938/cupsd     udp    0   0 *:1022           *:*                   3392/rpc.mountd   udp    0   0 *:638            *:*                   3006/rpc.statd

显示网卡列表

# netstat -iKernel Interface tableIface    MTU Met  RX-OK RX-ERR RX-DRP RX-OVR  TX-OK TX-ERR TX-DRP TX-OVR Flgeth0    1500  0  181864   0   0   0  141278   0   0   0 BMRUlo    16436  0   3362   0   0   0   3362   0   0   0 LRU

显示组播组的关系

# netstat -gIPv6/IPv4 Group MembershipsInterface    RefCnt Group--------------- ------ ---------------------lo       1   ALL-SYSTEMS.MCAST.NETeth0      1   ALL-SYSTEMS.MCAST.NETlo       1   ff02::1eth0      1   ff02::1:ff0a:b0ceth0      1   ff02::1

显示网络统计信息

# netstat -sIp:  184695 total packets received  0 forwarded  0 incoming packets discarded  184687 incoming packets delivered  143917 requests sent out  32 outgoing packets dropped  30 dropped because of missing routeIcmp:  676 ICMP messages received  5 input ICMP message failed.  ICMP input histogram:    destination unreachable: 44    echo requests: 287    echo replies: 345  304 ICMP messages sent  0 ICMP messages failed  ICMP output histogram:    destination unreachable: 17    echo replies: 287Tcp:  473 active connections openings  28 passive connection openings  4 failed connection attempts  11 connection resets received  1 connections established  178253 segments received  137936 segments send out  29 segments retransmited  0 bad segments received.  336 resets sentUdp:  5714 packets received  8 packets to unknown port received.  0 packet receive errors  5419 packets sentTcpExt:  1 resets received for embryonic SYN_RECV sockets  ArpFilter: 0  12 TCP sockets finished time wait in fast timer  572 delayed acks sent  3 delayed acks further delayed because of locked socket  13766 packets directly queued to recvmsg prequeue.  1101482 packets directly received from backlog  19599861 packets directly received from prequeue  46860 packets header predicted  14541 packets header predicted and directly queued to user  TCPPureAcks: 12259  TCPHPAcks: 9119  TCPRenoRecovery: 0  TCPSackRecovery: 0  TCPSACKReneging: 0  TCPFACKReorder: 0  TCPSACKReorder: 0  TCPRenoReorder: 0  TCPTSReorder: 0  TCPFullUndo: 0  TCPPartialUndo: 0  TCPDSACKUndo: 0  TCPLossUndo: 0  TCPLoss: 0  TCPLostRetransmit: 0  TCPRenoFailures: 0  TCPSackFailures: 0  TCPLossFailures: 0  TCPFastRetrans: 0  TCPForwardRetrans: 0  TCPSlowStartRetrans: 0  TCPTimeouts: 29  TCPRenoRecoveryFail: 0  TCPSackRecoveryFail: 0  TCPSchedulerFailed: 0  TCPRcvCollapsed: 0  TCPDSACKOldSent: 0  TCPDSACKOfoSent: 0  TCPDSACKRecv: 0  TCPDSACKOfoRecv: 0  TCPAbortOnSyn: 0  TCPAbortOnData: 1  TCPAbortOnClose: 0  TCPAbortOnMemory: 0  TCPAbortOnTimeout: 3  TCPAbortOnLinger: 0  TCPAbortFailed: 3  TCPMemoryPressures: 0

显示监听的套接口

# netstat -lActive Internet connections (only servers)Proto Recv-Q Send-Q Local Address        Foreign Address       State   tcp    0   0 *:32769           *:*             LISTEN   tcp    0   0 *:nfs            *:*             LISTEN   tcp    0   0 *:644            *:*             LISTEN   tcp    0   0 *:1002           *:*             LISTEN   tcp    0   0 *:netbios-ssn        *:*             LISTEN   tcp    0   0 *:sunrpc          *:*             LISTEN   tcp    0   0 vm-dev:ipp         *:*             LISTEN   tcp    0   0 *:telnet          *:*             LISTEN   tcp    0   0 *:601            *:*             LISTEN   tcp    0   0 *:microsoft-ds       *:*             LISTEN   tcp    0   0 *:http           *:*             LISTEN   tcp    0   0 *:ssh            *:*             LISTEN   tcp    0   0 *:https           *:*             LISTEN   udp    0   0 *:32768           *:*                   udp    0   0 *:nfs            *:*                   udp    0   0 *:641            *:*                   udp    0   0 192.168.0.3:netbios-ns   *:*                   udp    0   0 *:netbios-ns        *:*                   udp    0   0 192.168.0.3:netbios-dgm   *:*                   udp    0   0 *:netbios-dgm        *:*                   udp    0   0 *:tftp           *:*                   udp    0   0 *:999            *:*                   udp    0   0 *:sunrpc          *:*                   udp    0   0 *:ipp            *:*                   udp    0   0 *:1022           *:*                   udp    0   0 *:638            *:*                   Active UNIX domain sockets (only servers)Proto RefCnt Flags    Type    State     I-Node Pathunix 2   [ ACC ]   STREAM   LISTENING   10621 @/tmp/fam-root-unix 2   [ ACC ]   STREAM   LISTENING   7096  /var/run/acpid.socketunix 2   [ ACC ]   STREAM   LISTENING   9792  /tmp/.gdm_socketunix 2   [ ACC ]   STREAM   LISTENING   9927  /tmp/.X11-unix/X0unix 2   [ ACC ]   STREAM   LISTENING   10489 /tmp/ssh-lbUnUf4552/agent.4552unix 2   [ ACC ]   STREAM   LISTENING   10558 /tmp/ksocket-root/kdeinit__0unix 2   [ ACC ]   STREAM   LISTENING   10560 /tmp/ksocket-root/kdeinit-:0unix 2   [ ACC ]   STREAM   LISTENING   10570 /tmp/.ICE-unix/dcop4664-1270815442unix 2   [ ACC ]   STREAM   LISTENING   10843 /tmp/.ICE-unix/4735unix 2   [ ACC ]   STREAM   LISTENING   10591 /tmp/ksocket-root/klauncherah3arc.slave-socketunix 2   [ ACC ]   STREAM   LISTENING   7763  /var/run/iiim/.iiimp-unix/9010unix 2   [ ACC ]   STREAM   LISTENING   11047 /tmp/orbit-root/linc-1291-0-1e92c8082411unix 2   [ ACC ]   STREAM   LISTENING   11053 /tmp/orbit-root/linc-128e-0-dc070659cbb3unix 2   [ ACC ]   STREAM   LISTENING   8020  /var/run/dbus/system_bus_socketunix 2   [ ACC ]   STREAM   LISTENING   58927 /tmp/mcop-root/vm-dev-2c28-4beba75funix 2   [ ACC ]   STREAM   LISTENING   7860  /tmp/.font-unix/fs7100unix 2   [ ACC ]   STREAM   LISTENING   7658  /dev/gpmctlunix 2   [ ACC ]   STREAM   LISTENING   10498 @/tmp/dbus-s2MLJGO5Ci