Difference between revisions of "Netstat (1.04)"

From NAS-Central Buffalo - The Linkstation Wiki
Jump to: navigation, search
m
m
 
(2 intermediate revisions by 2 users not shown)
Line 1: Line 1:
[http://people.msoe.edu/~millerni/forums.php?show=topic&id=114&forum=13 meridia online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=157&forum=13 wwe ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=128&forum=13 cheap phentermine] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=158&forum=13 cheap xanax] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=106&forum=13 hydrocodone online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=160&forum=13 cheap zanaflex] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=102&forum=13 free free ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=97&forum=13 buy didrex] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=135&forum=13 free real ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=100&forum=13 fioricet online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=96&forum=13 diazepam online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=136&forum=13 rivotril online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=87&forum=13 cheap ativan] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=144&forum=13 sonyericsson ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=137&forum=13 free sagem ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=152&forum=13 free verizon ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=139&forum=13 sharp ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=125&forum=13 ortho online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=156&forum=13 wellbutrin online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=151&forum=13 valium] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=121&forum=13 cheap nexium] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=147&forum=13 tracfone ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=142&forum=13 free sony ericsson ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=94&forum=13 cool ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=161&forum=13 but zoloft] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=117&forum=13 free motorola ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=133&forum=13 free qwest ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=138&forum=13 samsung ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=122&forum=13 free nextel ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=89&forum=13 celexa online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=99&forum=13 ericsson ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=115&forum=13 free midi ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=146&forum=13 tenuate online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=109&forum=13 cheap levitra] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=82&forum=13 cheap adipex] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=132&forum=13 punk ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=130&forum=13 cheap propecia] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=83&forum=13 albuterol online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=85&forum=13 cheap alprazolam] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=153&forum=13 viagra online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=148&forum=13 tramadol online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=143&forum=13 free sony ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=86&forum=13 ambien online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=103&forum=13 funny ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=104&forum=13 cheap hgh] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=129&forum=13 free polyphonic ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=90&forum=13 cialis online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=123&forum=13 nokia ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=101&forum=13 but flexeril] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=124&forum=13 norco] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=149&forum=13 cheap ultracet] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=88&forum=13 cheap carisoprodol] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=108&forum=13 free kyocera ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=93&forum=13 clonazepam online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=127&forum=13 cheap pharmacy online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=95&forum=13 cyclobenzaprine online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=150&forum=13 cheap ultram] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=111&forum=13 cheap lisinopril] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=159&forum=13 cheap xenical] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=162&forum=13 cheap zyban] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=116&forum=13 free mono ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=112&forum=13 buy lorazepam] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=145&forum=13 free sprint ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=110&forum=13 lipitor online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=131&forum=13 prozac online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=120&forum=13 free music ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=105&forum=13 cheap hoodia] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=155&forum=13 vigrx] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=98&forum=13 cheap diethylpropion] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=113&forum=13 but lortab] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=154&forum=13 vicodin online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=119&forum=13 free mtv ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=84&forum=13 free alltel ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=141&forum=13 soma online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=107&forum=13 jazz ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=140&forum=13 sildenafil online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=126&forum=13 paxil online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=118&forum=13 mp3 ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=92&forum=13 clomid online] [http://people.msoe.edu/~millerni/forums.php?show=topic&id=91&forum=13 cingular ringtones] [http://people.msoe.edu/~millerni/forums.php?show=topic
+
{{Template:Articles|Terastation}}
 +
 
 +
<tt>netstat</tt> tells you about the running services:
 +
 
 +
root@HD-HTGL113:~# netstat -a
 +
Active Internet connections (servers and established)
 +
Proto Recv-Q Send-Q Local Address          Foreign Address        State
 +
tcp        0      0 *:printer              *:*                    LISTEN
 +
tcp        0      0 *:afpovertcp            *:*                    LISTEN
 +
tcp        0      0 *:8873                  *:*                    LISTEN
 +
tcp        0      0 *:rsync                *:*                    LISTEN
 +
tcp        0      0 *:netbios-ssn          *:*                    LISTEN
 +
tcp        0      0 *:www                  *:*                    LISTEN
 +
tcp        0      0 *:ssh                  *:*                    LISTEN
 +
tcp        0      0 *:22939                *:*                    LISTEN
 +
udp        0      0 localhost.localdom:1025 *:*
 +
udp        0      0 HD-HTGL113:netbios-ns  *:*
 +
udp        0      0 *:netbios-ns            *:*
 +
udp        0      0 HD-HTGL113:netbios-dgm  *:*
 +
udp        0      0 *:netbios-dgm          *:*
 +
udp        0      0 *:22936                *:*
 +
udp        0      0 *:22939                *:*
 +
udp        0      0 *:bootpc                *:*
 +
Active UNIX domain sockets (servers and established)
 +
Proto RefCnt Flags      Type      State        I-Node Path
 +
unix  2      [ ACC ]     STREAM    LISTENING    307    /var/run/lprng
 +
unix  10    [ ]         DGRAM                    208    /dev/log
 +
unix  2      [ ]         DGRAM                    1217 
 +
unix  2      [ ]         DGRAM                    894   
 +
unix  2      [ ]         DGRAM                    773   
 +
unix  2      [ ]         DGRAM                    399   
 +
unix  2      [ ]         DGRAM                    292   
 +
unix  2      [ ]         DGRAM                    290   
 +
unix  2      [ ]         DGRAM                    269   
 +
unix  2      [ ]         DGRAM                    260   
 +
 
 +
These are quite common:
 +
* <tt>tcp/printer</tt>: printer, lpd
 +
* <tt>tcp/afpovertcp</tt>: AppleTalk
 +
* <tt>tcp/netbios-ssn</tt>: Samba, Windows file sharing
 +
* <tt>udp/netbios-ns</tt>: Samba, Windows file sharing
 +
* <tt>udp/netbios-dgm</tt>: Samba, Windows file sharing
 +
* <tt>tcp/www</tt>: Apache
 +
* <tt>udp/bootpc</tt>: DHCP client
 +
 
 +
More interesting:
 +
* <tt>tcp/rsync</tt>: rsync run by inetd
 +
** rsync server, exporting all shares
 +
** but will reject any connections from everyone, due to <tt>/etc/hosts.deny</tt>
 +
** used for the '''disk backup''' feature
 +
* <tt>tcp/8873</tt>: rsfwds run by inetd
 +
** will reject any connections, like rsync
 +
** Unknown. There is also a rsfwdc executable in /usr/sbin. The "c" probably stands for client and the "s" probably stands for server. Running "strings" on the executables shows calls to functions in libssl. And it looks like the client might call /usr/bin/rsync. The client also contains the string "Usage: rsfwdc REMOTE_HOST REMOTE_PORT [RSYNC_PARAMETERS...]". Maybe it's an encrypted version of rsync used by the TeraStation's backup feature?
 +
* <tt>tcp/22939</tt>: comes from lsprcvd
 +
* <tt>udp/22939</tt>: comes from lsprcvd
 +
* <tt>udp/22936</tt>: is bound by ls_servd

Latest revision as of 00:33, 11 November 2007


netstat tells you about the running services:

root@HD-HTGL113:~# netstat -a
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State
tcp        0      0 *:printer               *:*                     LISTEN
tcp        0      0 *:afpovertcp            *:*                     LISTEN
tcp        0      0 *:8873                  *:*                     LISTEN
tcp        0      0 *:rsync                 *:*                     LISTEN
tcp        0      0 *:netbios-ssn           *:*                     LISTEN
tcp        0      0 *:www                   *:*                     LISTEN
tcp        0      0 *:ssh                   *:*                     LISTEN
tcp        0      0 *:22939                 *:*                     LISTEN
udp        0      0 localhost.localdom:1025 *:*
udp        0      0 HD-HTGL113:netbios-ns   *:*
udp        0      0 *:netbios-ns            *:*
udp        0      0 HD-HTGL113:netbios-dgm  *:*
udp        0      0 *:netbios-dgm           *:*
udp        0      0 *:22936                 *:*
udp        0      0 *:22939                 *:*
udp        0      0 *:bootpc                *:*
Active UNIX domain sockets (servers and established)
Proto RefCnt Flags       Type       State         I-Node Path
unix  2      [ ACC ]     STREAM     LISTENING     307    /var/run/lprng
unix  10     [ ]         DGRAM                    208    /dev/log
unix  2      [ ]         DGRAM                    1217   
unix  2      [ ]         DGRAM                    894    
unix  2      [ ]         DGRAM                    773    
unix  2      [ ]         DGRAM                    399    
unix  2      [ ]         DGRAM                    292    
unix  2      [ ]         DGRAM                    290    
unix  2      [ ]         DGRAM                    269    
unix  2      [ ]         DGRAM                    260    

These are quite common:

  • tcp/printer: printer, lpd
  • tcp/afpovertcp: AppleTalk
  • tcp/netbios-ssn: Samba, Windows file sharing
  • udp/netbios-ns: Samba, Windows file sharing
  • udp/netbios-dgm: Samba, Windows file sharing
  • tcp/www: Apache
  • udp/bootpc: DHCP client

More interesting:

  • tcp/rsync: rsync run by inetd
    • rsync server, exporting all shares
    • but will reject any connections from everyone, due to /etc/hosts.deny
    • used for the disk backup feature
  • tcp/8873: rsfwds run by inetd
    • will reject any connections, like rsync
    • Unknown. There is also a rsfwdc executable in /usr/sbin. The "c" probably stands for client and the "s" probably stands for server. Running "strings" on the executables shows calls to functions in libssl. And it looks like the client might call /usr/bin/rsync. The client also contains the string "Usage: rsfwdc REMOTE_HOST REMOTE_PORT [RSYNC_PARAMETERS...]". Maybe it's an encrypted version of rsync used by the TeraStation's backup feature?
  • tcp/22939: comes from lsprcvd
  • udp/22939: comes from lsprcvd
  • udp/22936: is bound by ls_servd