netstat/lsof/nmap端口检测

最新推荐文章于 2023-11-17 12:55:51 发布
最新推荐文章于 2023-11-17 12:55:51 发布
阅读量4.4k 收藏 1
点赞数
分类专栏： linux安全 文章标签： unix tcp sockets socket internet domain
原贴：http://blog.chinaunix.net/u/13329/showart.php?id=84731

 
netstat/lsof/nmap端口检测
 
 
·校验哪些端口正在监听
# nmap -sT -O localhost

Starting nmap 3.70 ( http://www.insecure.org/nmap/ ) at 2005-05-09 22:07 CST
Interesting ports on cnscn (127.0.0.1):
(The 1648 ports scanned but not shown below are in state: closed)
PORT           STATE   SERVICE
21/tcp         open       ftp
22/tcp         open       ssh
80/tcp         open       http
111/tcp       open       rpcbind
443/tcp       open       https
631/tcp       open       ipp
951/tcp       open       unknown
970/tcp       open       unknown
2049/tcp     open       nfs
3306/tcp     open        mysql
32771/tcp   open       sometimes-rpc5
32772/tcp   open       sometimes-rpc7
Device type: general purpose
Running: Linux 2.4.X|2.5.X|2.6.X
OS details: Linux 2.5.25 - 2.6.3 or Gentoo 1.2 Linux 2.4.19 rc1-rc7)
Uptime 0.081 days (since Mon May  9 20:11:26 2005)

Nmap run completed -- 1 IP address (1 host up) scanned in 3.014 seconds

-----------------------------------------------------------------------------------
[注]
#netstat
-t          显示tcp协议相关的进程
-u          显示udp协议相关的进程
-p          列出命令名称与进程号
-r          显示路由表
-n         列出服务的名称 | 端口号

·列出所有服务守护进程
# netstat -ap
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address               Foreign Address          State       PID/Program name   
tcp        0      0          *:32768                      *:*                         LISTEN      2208/rpc.statd      
tcp        0      0           *:32769                     *:*                         LISTEN      -                  
tcp        0      0           *:nfs                          *:*                         LISTEN      -                  
tcp        0      0     cnscn:32771                     *:*                         LISTEN      3300/ocssd.bin      
tcp        0      0     cnscn:32772                     *:*                         LISTEN      3300/ocssd.bin      
tcp        0      0           *:mysql                      *:*                          LISTEN      2556/mysqld         
tcp        0      0           *:970                        *:*                          LISTEN      2489/rpc.mountd     
tcp        0      0           *:sunrpc                    *:*                          LISTEN      2188/portmap        
tcp        0      0           *:ftp                         *:*                          LISTEN      2516/vsftpd         
tcp        0      0           *:951                        *:*                          LISTEN      2467/rpc.rquotad   
tcp        0      0     cnscn:ipp                         *:*                          LISTEN      2351/cupsd         
tcp        0      0           *:http                       *:*                          LISTEN      2660/httpd         
tcp        0      0           *:ssh                        *:*                          LISTEN      2438/sshd           
tcp        0      0           *:https                     *:*                          LISTEN      2660/httpd         
tcp        0   2448 ::ffff:211.167.237.199:ssh  ::ffff:221.216.165.189:1972 ESTABLISHED 3424/sshd: cnscn_ad
udp        0      0           *:32768                 *:*                                 2208/rpc.statd      
udp        0      0            *:nfs                    *:*                                 -                  
udp        0      0            *:32770               *:*                                 -                  
udp        0      0      cnscn:32771               *:*                                  3300/ocssd.bin      
udp        0      0      cnscn:32772               *:*                                  3300/ocssd.bin      
udp        0      0      cnscn:32773               *:*                                  3300/ocssd.bin      
udp        0      0            *:688                   *:*                                 2208/rpc.statd      
udp        0      0            *:948                   *:*                                 2467/rpc.rquotad   
udp        0      0            *:967                   *:*                                 2489/rpc.mountd     
udp        0      0            *:sunrpc                *:*                                 2188/portmap        
udp        0      0            *:ipp                     *:*                                 2351/cupsd         
Active UNIX domain sockets (servers and established)
Proto RefCnt Flags       Type       State         I-Node PID/Program name    Path
unix  2      [ ACC ]     STREAM     LISTENING     7602   3300/ocssd.bin      /var/tmp/.oracle/sOracle_CSS_LclLstnr_localhost_0
unix  8      [ ]           DGRAM                           4943   2165/syslogd        /dev/log
unix  2      [ ACC ]     STREAM     LISTENING     5985   2649/gpm            /dev/gpmctl
unix  2      [ ]         DGRAM                             6374   2796/hald           @/var/run/hal/hotplug_socket
unix  2      [ ACC ]     STREAM     LISTENING     5250   2320/acpid          /var/run/acpid.socket
unix  2      [ ]         DGRAM                             2617   1007/udevd          @udevd
unix  2      [ ACC ]     STREAM     LISTENING     6164   2735/xfs            /tmp/.font-unix/fs7100
unix  2      [ ACC ]     STREAM     LISTENING     8344   3426/0              /tmp/ssh-cgXAFE3426/agent.3426
unix  2      [ ACC ]     STREAM     LISTENING     5928   2556/mysqld         /var/lib/mysql/mysql.sock
unix  2      [ ACC ]     STREAM     LISTENING     6117   2689/htt_server     /var/run/iiim/.iiimp-unix/9010
unix  2      [ ACC ]     STREAM     LISTENING     6235   2771/dbus-daemon-1  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     8334   3424/sshd: cnscn_ad
unix  3      [ ]         STREAM     CONNECTED     8333   3426/0              
unix  3      [ ]         STREAM     CONNECTED     6373   2771/dbus-daemon-1  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     6372   2796/hald           
unix  3      [ ]         STREAM     CONNECTED     6341   2771/dbus-daemon-1  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     6340   2785/cups-config-da
unix  3      [ ]         STREAM     CONNECTED     6242   2771/dbus-daemon-1  
unix  3      [ ]         STREAM     CONNECTED     6241   2771/dbus-daemon-1  
unix  2      [ ]         DGRAM                             6205   2735/xfs            
unix  2      [ ]         DGRAM                             6077   2699/crond         
unix  2      [ ]         DGRAM                             5984   2649/gpm            
unix  2      [ ]         DGRAM                              5584   2453/xinetd         
unix  3      [ ]         STREAM     CONNECTED     5122   2241/rpc.idmapd     
unix  3      [ ]         STREAM     CONNECTED     5121   2241/rpc.idmapd     
unix  2      [ ]         DGRAM                             5009   2208/rpc.statd      
unix  2      [ ]         DGRAM                             4955   2169/klogd         

-----------------------------------------------------------------------------

# netstat  -anp
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name   
tcp        0      0         0.0.0.0:32768               0.0.0.0:*                   LISTEN      2208/rpc.statd      
tcp        0      0      127.0.0.1:32771               0.0.0.0:*                   LISTEN      3300/ocssd.bin      
tcp        0      0      127.0.0.1:32772               0.0.0.0:*                   LISTEN      3300/ocssd.bin      
tcp        0      0          0.0.0.0:3306                0.0.0.0:*                   LISTEN      2556/mysqld         
tcp        0      0          0.0.0.0:970                  0.0.0.0:*                   LISTEN      2489/rpc.mountd     
tcp        0      0          0.0.0.0:111                  0.0.0.0:*                   LISTEN      2188/portmap        
tcp        0      0          0.0.0.0:21                   0.0.0.0:*                   LISTEN      2516/vsftpd         
tcp        0      0          0.0.0.0:951                 0.0.0.0:*                   LISTEN      2467/rpc.rquotad   
tcp        0      0       127.0.0.1:631                 0.0.0.0:*                   LISTEN      2351/cupsd         
tcp        0      0                  :::80                            :::*                  LISTEN      2660/httpd         
tcp        0      0                  :::22                            :::*                  LISTEN      2438/sshd           
tcp        0      0                  :::443                          :::*                  LISTEN      2660/httpd         
tcp        0   2448  ::ffff:211.167.237.199:22   ::ffff:221.216.165.189:1972 ESTABLISHED 3424/sshd: cnscn_ad

udp        0      0        0.0.0.0:32768           0.0.0.0:*                           2208/rpc.statd      
udp        0      0     127.0.0.1:32771          0.0.0.0:*                           3300/ocssd.bin      
udp        0      0     127.0.0.1:32772          0.0.0.0:*                           3300/ocssd.bin      
udp        0      0     127.0.0.1:32773          0.0.0.0:*                           3300/ocssd.bin      
udp        0      0         0.0.0.0:688             0.0.0.0:*                           2208/rpc.statd      
udp        0      0         0.0.0.0:948             0.0.0.0:*                           2467/rpc.rquotad   
udp        0      0         0.0.0.0:967             0.0.0.0:*                           2489/rpc.mountd     
udp        0      0         0.0.0.0:111             0.0.0.0:*                           2188/portmap        
udp        0      0         0.0.0.0:631             0.0.0.0:*                           2351/cupsd         

Active UNIX domain sockets (servers and established)
Proto RefCnt Flags       Type       State         I-Node PID/Program name    Path
unix  2      [ ACC ]     STREAM     LISTENING     7602   3300/ocssd.bin      /var/tmp/.oracle/sOracle_CSS_LclLstnr_localhost_0
unix  8      [ ]            DGRAM                          4943   2165/syslogd        /dev/log
unix  2      [ ACC ]     STREAM     LISTENING     5985   2649/gpm            /dev/gpmctl
unix  2      [ ]            DGRAM                          6374   2796/hald           @/var/run/hal/hotplug_socket
unix  2      [ ACC ]     STREAM     LISTENING     5250   2320/acpid          /var/run/acpid.socket
unix  2      [ ]            DGRAM                          2617   1007/udevd          @udevd
unix  2      [ ACC ]     STREAM     LISTENING     6164   2735/xfs            /tmp/.font-unix/fs7100
unix  2      [ ACC ]     STREAM     LISTENING     8344   3426/0              /tmp/ssh-cgXAFE3426/agent.3426
unix  2      [ ACC ]     STREAM     LISTENING     5928   2556/mysqld         /var/lib/mysql/mysql.sock
unix  2      [ ACC ]     STREAM     LISTENING     6117   2689/htt_server     /var/run/iiim/.iiimp-unix/9010
unix  2      [ ACC ]     STREAM     LISTENING     6235   2771/dbus-daemon-1  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     8334   3424/sshd: cnscn_ad
unix  3      [ ]         STREAM     CONNECTED     8333   3426/0              
unix  3      [ ]         STREAM     CONNECTED     6373   2771/dbus-daemon-1  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     6372   2796/hald           
unix  3      [ ]         STREAM     CONNECTED     6341   2771/dbus-daemon-1  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     6340   2785/cups-config-da
unix  3      [ ]         STREAM     CONNECTED     6242   2771/dbus-daemon-1  
unix  3      [ ]         STREAM     CONNECTED     6241   2771/dbus-daemon-1  
unix  2      [ ]         DGRAM                             6205   2735/xfs            
unix  2      [ ]         DGRAM                            6077   2699/crond         
unix  2      [ ]         DGRAM                            5984   2649/gpm            
unix  2      [ ]         DGRAM                            5584   2453/xinetd         
unix  3      [ ]         STREAM     CONNECTED     5122   2241/rpc.idmapd     
unix  3      [ ]         STREAM     CONNECTED     5121   2241/rpc.idmapd     
unix  2      [ ]         DGRAM                             5009   2208/rpc.statd      
unix  2      [ ]         DGRAM                             4955   2169/klogd  

--------------------------------------------------------------------
# netstat  -r
Kernel IP routing table
Destination         Gateway               Genmask         Flags   MSS Window   irtt       Iface
211.167.237.0        *                  255.255.255.0      U        0      0          0         eth1
192.168.0.0            *                 255.255.255.0      U        0      0           0        eth0
169.254.0.0            *                 255.255.0.0          U        0     0           0         eth0
default          211.167.237.129        0.0.0.0             UG       0    0           0         eth1

--------------------------------------------------------------------

# netstat  -i
Kernel Interface table
Iface        MTU   Met    RX-OK  RX-ERR RX-DRP RX-OVR    TX-OK    TX-ERR   TX-DRP    TX-OVR    Flg
eth0       1500     0      5280       0         0          0           16          0            0            0        BMRU
eth1       1500     0     12139      0         0          0          2709        0            0            0        BMRU
lo        16436      0     14083      0         0           0        14083        0            0            0       LRU

--------------------------------------------------------------------

# netstat  -g
IPv6/IPv4 Group Memberships
Interface       RefCnt Group
--------------- ------ ---------------------
lo                    1      ALL-SYSTEMS.MCAST.NET
eth0               1      ALL-SYSTEMS.MCAST.NET
eth1               1      ALL-SYSTEMS.MCAST.NET
lo                    1      ff02::1
eth0               1      ff02::1:ff16:b985
eth0               1      ff02::1
eth1               1      ff02::1:ff16:ba87
eth1               1      ff02::1

--------------------------------------------------------------------
访问计时功能
# netstat  -o
Active Internet connections (w/o servers)
Proto Recv-Q    Send-Q         Local Address                     Foreign Address                      State            Timer
tcp        0         304       ::ffff:211.167.237.199:ssh     ::ffff:221.216.165.189:1972    ESTABLISHED    on (0.31/0/0)

--------------------------------------------------------------------
# netstat  -F
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State      
tcp        0    256 ::ffff:211.167.237.199:ssh  ::ffff:221.216.165.189:1972 ESTABLISHED
Active UNIX domain sockets (w/o servers)
Proto RefCnt Flags       Type       State         I-Node Path
unix  8      [ ]         DGRAM                             4943   /dev/log
unix  2      [ ]         DGRAM                             6374   @/var/run/hal/hotplug_socket
unix  2      [ ]         DGRAM                             2617   @udevd
unix  3      [ ]         STREAM     CONNECTED     8334   
unix  3      [ ]         STREAM     CONNECTED     8333   
unix  3      [ ]         STREAM     CONNECTED     6373   /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     6372   
unix  3      [ ]         STREAM     CONNECTED     6341   /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     6340   
unix  3      [ ]         STREAM     CONNECTED     6242   
unix  3      [ ]         STREAM     CONNECTED     6241   
unix  2      [ ]         DGRAM                             6205   
unix  2      [ ]         DGRAM                             6077   
unix  2      [ ]         DGRAM                             5984   
unix  2      [ ]         DGRAM                             5584   
unix  3      [ ]         STREAM     CONNECTED     5122   
unix  3      [ ]         STREAM     CONNECTED     5121   
unix  2      [ ]         DGRAM                             5009   
unix  2      [ ]         DGRAM                             4955   

-----------------------------------------------------------------------------

# netstat  -C
Active Internet connections (w/o servers)
Proto Recv-Q   Send-Q           Local Address                       Foreign Address                   State      
tcp        0         304      ::ffff:211.167.237.199:ssh     ::ffff:221.216.165.189:1972     ESTABLISHED
Active UNIX domain sockets (w/o servers)
Proto RefCnt Flags       Type       State         I-Node Path
unix  8      [ ]         DGRAM                            4943   /dev/log
unix  2      [ ]         DGRAM                            6374   @/var/run/hal/hotplug_socket
unix  2      [ ]         DGRAM                            2617   @udevd
unix  3      [ ]         STREAM     CONNECTED     8334   
unix  3      [ ]         STREAM     CONNECTED     8333   
unix  3      [ ]         STREAM     CONNECTED     6373   /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     6372   
unix  3      [ ]         STREAM     CONNECTED     6341   /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     6340   
unix  3      [ ]         STREAM     CONNECTED     6242   
unix  3      [ ]         STREAM     CONNECTED     6241   
unix  2      [ ]         DGRAM                             6205   
unix  2      [ ]         DGRAM                             6077   
unix  2      [ ]         DGRAM                             5984   
unix  2      [ ]         DGRAM                             5584   
unix  3      [ ]         STREAM     CONNECTED     5122   
unix  3      [ ]         STREAM     CONNECTED     5121   
unix  2      [ ]         DGRAM                             5009   
unix  2      [ ]         DGRAM                             4955   

--------------------------------------------------------------------
# netstat  -N
Active Internet connections (w/o servers)
Proto Recv-Q    Send-Q                 Local Address                       Foreign Address                   State      
tcp        0           256         ::ffff:211.167.237.199:ssh        ::ffff:221.216.165.189:1972     ESTABLISHED
Active UNIX domain sockets (w/o servers)
Proto RefCnt Flags       Type       State         I-Node Path
unix  8      [ ]         DGRAM                             4943   /dev/log
unix  2      [ ]         DGRAM                             6374   @/var/run/hal/hotplug_socket
unix  2      [ ]         DGRAM                             2617   @udevd
unix  3      [ ]         STREAM     CONNECTED     8334   
unix  3      [ ]         STREAM     CONNECTED     8333   
unix  3      [ ]         STREAM     CONNECTED     6373   /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     6372   
unix  3      [ ]         STREAM     CONNECTED     6341   /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     6340   
unix  3      [ ]         STREAM     CONNECTED     6242   
unix  3      [ ]         STREAM     CONNECTED     6241   
unix  2      [ ]         DGRAM                             6205   
unix  2      [ ]         DGRAM                             6077   
unix  2      [ ]         DGRAM                             5984   
unix  2      [ ]         DGRAM                             5584   
unix  3      [ ]         STREAM     CONNECTED     5122   
unix  3      [ ]         STREAM     CONNECTED     5121   
unix  2      [ ]         DGRAM                             5009   
unix  2      [ ]         DGRAM                             4955

---------------------------------------------------------------------
# netstat  -e
Active Internet connections (w/o servers)
Proto Recv-Q   Send-Q               Local Address                      Foreign Address                       State          User             Inode     
tcp        0         320           ::ffff:211.167.237.199:ssh        ::ffff:221.216.165.189:1972    ESTABLISHED          root             8312      
Active UNIX domain sockets (w/o servers)
Proto RefCnt Flags       Type       State         I-Node Path
unix  8      [ ]         DGRAM                             4943   /dev/log
unix  2      [ ]         DGRAM                             6374   @/var/run/hal/hotplug_socket
unix  2      [ ]         DGRAM                             2617   @udevd
unix  3      [ ]         STREAM     CONNECTED     8334   
unix  3      [ ]         STREAM     CONNECTED     8333   
unix  3      [ ]         STREAM     CONNECTED     6373   /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     6372   
unix  3      [ ]         STREAM     CONNECTED     6341   /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     6340   
unix  3      [ ]         STREAM     CONNECTED     6242   
unix  3      [ ]         STREAM     CONNECTED     6241   
unix  2      [ ]         DGRAM                             6205   
unix  2      [ ]         DGRAM                             6077   
unix  2      [ ]         DGRAM                             5984   
unix  2      [ ]         DGRAM                             5584   
unix  3      [ ]         STREAM     CONNECTED     5122   
unix  3      [ ]         STREAM     CONNECTED     5121   
unix  2      [ ]         DGRAM                             5009   
unix  2      [ ]         DGRAM                             4955   

--------------------------------------------------------------------
·列出现有监听进程
# netstat -l
Active Internet connections (only servers)
Proto Recv-Q   Send-Q     Local Address       Foreign Address             State      
tcp        0          0            *:32768                     *:*                         LISTEN      
tcp        0          0            *:32769                     *:*                         LISTEN      
tcp        0          0            *:nfs                          *:*                         LISTEN      
tcp        0          0      cnscn:32771                     *:*                         LISTEN      
tcp        0          0      cnscn:32772                     *:*                         LISTEN      
tcp        0          0            *:mysql                      *:*                         LISTEN      
tcp        0          0            *:970                        *:*                         LISTEN      
tcp        0           0            *:sunrpc                    *:*                         LISTEN      
tcp        0          0            *:ftp                          *:*                         LISTEN      
tcp        0          0            *:951                        *:*                         LISTEN      
tcp        0          0      cnscn:ipp                         *:*                         LISTEN      
tcp        0          0            *:http                       *:*                         LISTEN      
tcp        0          0            *:ssh                         *:*                         LISTEN      
tcp        0          0            *:https                      *:*                         LISTEN      
udp        0          0            *:32768                    *:*                                 
udp        0          0            *:nfs                         *:*                                 
udp        0          0            *:32770                    *:*                                 
udp        0          0      cnscn:32771                    *:*                                 
udp        0          0      cnscn:32772                    *:*                                 
udp        0          0      cnscn:32773                    *:*                                 
udp        0          0            *:688                       *:*                                 
udp        0          0            *:948                       *:*                                 
udp        0          0            *:967                       *:*                                 
udp        0          0            *:sunrpc                   *:*                                 
udp        0          0            *:ipp                        *:*                                 
Active UNIX domain sockets (only servers)
Proto RefCnt Flags       Type       State         I-Node Path
unix  2      [ ACC ]     STREAM     LISTENING     7602   /var/tmp/.oracle/sOracle_CSS_LclLstnr_localhost_0
unix  2      [ ACC ]     STREAM     LISTENING     5985   /dev/gpmctl
unix  2      [ ACC ]     STREAM     LISTENING     5250   /var/run/acpid.socket
unix  2      [ ACC ]     STREAM     LISTENING     6164   /tmp/.font-unix/fs7100
unix  2      [ ACC ]     STREAM     LISTENING     8344   /tmp/ssh-cgXAFE3426/agent.3426
unix  2      [ ACC ]     STREAM     LISTENING     5928   /var/lib/mysql/mysql.sock
unix  2      [ ACC ]     STREAM     LISTENING     6117   /var/run/iiim/.iiimp-unix/9010
unix  2      [ ACC ]     STREAM     LISTENING     6235   /var/run/dbus/system_bus_socket

---------------------------------------------------------------------

# netstat  -s
Ip:
    20033 total packets received
    0 forwarded
    0 incoming packets discarded
    19925 incoming packets delivered
    16887 requests sent out
Icmp:
    4 ICMP messages received
    1 input ICMP message failed.
    ICMP input histogram:
        destination unreachable: 1
        echo requests: 2
        echo replies: 1
    8 ICMP messages sent
    0 ICMP messages failed
    ICMP output histogram:
        destination unreachable: 6
        echo replies: 2
Tcp:
    1660 active connections openings
    77 passive connection openings
    0 failed connection attempts
    23 connection resets received
    1 connections established
    6042 segments received
    5977 segments send out
    32 segments retransmited
    1 bad segments received.
    1722 resets sent
Udp:
    10885 packets received
    6 packets to unknown port received.
    0 packet receive errors
    10885 packets sent
TcpExt:
    8 resets received for embryonic SYN_RECV sockets
    ArpFilter: 0
    56 TCP sockets finished time wait in fast timer
    93 delayed acks sent
    17 packets directly queued to recvmsg prequeue.
    419 packets header predicted
    TCPPureAcks: 1021
    TCPHPAcks: 298
    TCPRenoRecovery: 0
    TCPSackRecovery: 16
    TCPSACKReneging: 0
    TCPFACKReorder: 0
    TCPSACKReorder: 0
    TCPRenoReorder: 0
    TCPTSReorder: 0
    TCPFullUndo: 0
    TCPPartialUndo: 0
    TCPDSACKUndo: 0
    TCPLossUndo: 0
    TCPLoss: 1
    TCPLostRetransmit: 0
    TCPRenoFailures: 0
    TCPSackFailures: 7
    TCPLossFailures: 0
    TCPFastRetrans: 18
    TCPForwardRetrans: 0
    TCPSlowStartRetrans: 2
    TCPTimeouts: 5
    TCPRenoRecoveryFail: 0
    TCPSackRecoveryFail: 0
    TCPSchedulerFailed: 0
    TCPRcvCollapsed: 0
    TCPDSACKOldSent: 1
    TCPDSACKOfoSent: 0
    TCPDSACKRecv: 1
    TCPDSACKOfoRecv: 0
    TCPAbortOnSyn: 0
    TCPAbortOnData: 1655
    TCPAbortOnClose: 5
    TCPAbortOnMemory: 0
    TCPAbortOnTimeout: 0
    TCPAbortOnLinger: 0
    TCPAbortFailed: 0
    TCPMemoryPressures: 0

--------------------------------------------------------------------

·ports
# /home/tools/network/ports
1)TCP
Lcl port           Rmt port        Status        Rmt IP        Rmt host
------------------------------------------------------------------------------
32768= ?             0= zero      0A= LISTEN      0.0.0.0         local
32769= ?             0= zero      0A= LISTEN      0.0.0.0         local
2049= nfs           0= zero      0A= LISTEN      0.0.0.0         local
32771= ?             0= zero      0A= LISTEN      0.0.0.0         local
32772= ?             0= zero      0A= LISTEN      0.0.0.0         local
3306= mysql         0= zero      0A= LISTEN      0.0.0.0         local
  970= ?             0= zero      0A= LISTEN      0.0.0.0         local
  111= sunrpc        0= zero      0A= LISTEN      0.0.0.0         local
   21= ftp           0= zero      0A= LISTEN      0.0.0.0         local
  951= ?             0= zero      0A= LISTEN      0.0.0.0         local
  631= ipp           0= zero      0A= LISTEN      0.0.0.0         local

2)UDP
Lcl port           Rmt port        Status        Rmt IP        Rmt host
------------------------------------------------------------------------------
32768= ?             0= zero      07= CLOSE       0.0.0.0         local
2049= nfs           0= zero      07= CLOSE       0.0.0.0         local
32770= ?             0= zero      07= CLOSE       0.0.0.0         local
32771= ?             0= zero      07= CLOSE       0.0.0.0         local
32772= ?             0= zero      07= CLOSE       0.0.0.0         local
32773= ?             0= zero      07= CLOSE       0.0.0.0         local
  688= ?             0= zero      07= CLOSE       0.0.0.0         local
  948= ?             0= zero      07= CLOSE       0.0.0.0         local
  967= ?             0= zero      07= CLOSE       0.0.0.0         local
  111= sunrpc        0= zero      07= CLOSE       0.0.0.0         local
  631= ipp           0= zero      07= CLOSE       0.0.0.0         local


================================================================


·检查22端口的服务及访问连接
# lsof  -i:22
COMMAND  PID        USER   FD   TYPE DEVICE SIZE NODE NAME
sshd         2438        root    3u    IPv6             5543       TCP   *:ssh (LISTEN)
sshd         3424        root    3u    IPv6             8312       TCP    211.167.237.199:ssh->221.216.165.189:1972 (ESTABLISHED)

--------------------------------------------------------------------

·查询命令mysqld_sa的所有进程
# lsof  -c mysqld_sa
COMMAND    PID USER   FD    TYPE  DEVICE     SIZE     NODE    NAME
mysqld_sa   2529 root     txt    REG    3,5      616312   554965 /bin/bash
mysqld_sa   2529 root   mem    REG    3,5    1454835  424335 /lib/tls/libc-2.3.4.so
mysqld_sa   2529 root   255r    REG    3,5       10912   865383 /usr/bin/mysqld_safe

--------------------------------------------------------------------

·查询一个进程在进行的命令
# lsof  -p 1007
COMMAND  PID USER   FD   TYPE     DEVICE    SIZE    NODE NAME
udevd   1007 root  cwd    DIR        3,5    4096       2 /
udevd   1007 root  mem    REG        3,5   56320  424434 /lib/libselinux.so.1
udevd   1007 root    5u  unix 0xdf4f8300            2617 socket

---------------------------------------------------------------------

·按名称查询
# lsof   names   /var/log/httpd/error_log
lsof: status error on names: No such file or directory
COMMAND  PID   USER   FD   TYPE DEVICE  SIZE    NODE NAME
httpd   2660   root    2w   REG    3,5 18061 2515805 /var/log/httpd/error_log
httpd   2660   root    7w   REG    3,5 18061 2515805 /var/log/httpd/error_log

---------------------------------------------------------------------

# netstat  -h
usage: netstat [-veenNcCF] [<Af>] -r         
       netstat {-V|--version|-h|--help}
       netstat [-vnNcaeol] [<Socket> ...]
       netstat { [-veenNac] -i[<Iface>] | [-cnNe] -M | -s } [delay]

        -r, --route                display routing table
        -i, --interfaces=[<Iface>] display interface table
        -g, --groups               display multicast group memberships
        -s, --statistics           display networking statistics (like SNMP)
        -M, --masquerade           display masqueraded connections

        -v, --verbose              be verbose
        -n, --numeric              don't resolve names
        --numeric-hosts            don't resolve host names
        --numeric-ports            don't resolve port names
        --numeric-users            don't resolve user names
        -N, --symbolic             resolve hardware names
        -e, --extend               display other/more information
        -p, --programs             display PID/Program name for sockets
        -c, --continuous           continuous listing

        -l, --listening            display listening server sockets
        -a, --all, --listening     display all sockets (default: connected)
        -o, --timers               display timers
        -F, --fib                  display Forwarding Information Base (default)
        -C, --cache                display routing cache instead of FIB

  <Iface>: Name of interface to monitor/list.
  <Socket>={-t|--tcp} {-u|--udp} {-w|--raw} {-x|--unix} --ax25 --ipx --netrom
  <AF>=Use '-A <af>' or '--<af>'; default: inet
  List of possible address families (which support routing):
    inet (DARPA Internet) inet6 (IPv6) ax25 (AMPR AX.25)
    netrom (AMPR NET/ROM) ipx (Novell IPX) ddp (Appletalk DDP)
    x25 (CCITT X.25)



# netstat  -atuv | more
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address               Foreign Address             State      
tcp        0      0 *:32768                     *:*                         LISTEN      
tcp        0      0 *:32769                     *:*                         LISTEN      
tcp        0      0 *:nfs                       *:*                         LISTEN      
tcp        0      0 cnscn:32771                 *:*                         LISTEN      
tcp        0      0 cnscn:32772                 *:*                         LISTEN      
tcp        0      0 *:mysql                     *:*                         LISTEN      
tcp        0      0 *:970                       *:*                         LISTEN      
tcp        0      0 *:sunrpc                    *:*                         LISTEN      
tcp        0      0 *:ftp                       *:*                         LISTEN      
tcp        0      0 *:951                       *:*                         LISTEN      
tcp        0      0 cnscn:ipp                   *:*                         LISTEN      
tcp        0      0 *:http                      *:*                         LISTEN      
tcp        0      0 *:ssh                       *:*                         LISTEN      
tcp        0      0 *:https                     *:*                         LISTEN      
tcp        0      0 ::ffff:211.167.237.199:http ::ffff:221.216.165.189:2013 TIME_WAIT   
udp        0      0 *:32768                 *:*                                 
udp        0      0 *:nfs                   *:*                                 
udp        0      0 *:32770                 *:*                                 
udp        0      0 cnscn:32771             *:*                                 
udp        0      0 cnscn:32772             *:*                                 
udp        0      0 cnscn:32773             *:*                                 
udp        0      0 *:688                   *:*                                 
udp        0      0 *:948                   *:*                                 
udp        0      0 *:967                   *:*                                 
udp        0      0 *:sunrpc                *:*                                 
udp        0      0 *:ipp                   *:*         

·查看系统所有服务
# cat /etc/services
创建于： 2006-03-13 19:35:01，修改于： 2006-03-13 19:35:01，已浏览243次，有评论1条
 
linux查询命令 组播,linux查看所有加入组播
weixin_31508009的博客
04-28 2890
netstat -gIPv6/IPv4 Group MembershipsInterface RefCnt Group--------------- ------ ---------------------lo 1 all-systems.mcast.netenp179s0 1 all-systems.mcast.netenp...
Linux查看端口占用lsof -i:port的方法
09-15
下面小编就为大家带来一篇Linux查看端口占用lsof -i:port的方法。小编觉得挺不错的，现在就分享给大家，也给大家做个参考。一起跟随小编过来看看吧
Linux lsof详解
weixin_30565199的博客
02-22 411
简介 lsof(list open files)是一个列出当前系统打开文件的工具。在linux环境下，任何事物都以文件的形式存在，通过文件不仅仅可以访问常规数据，还可以访问网络连接和硬件。所以如传输控制协议 (TCP) 和用户数据报协议 (UDP) 套接字等，系统在后台都为该应用程序分配了一个文件描述符，无论这个文件的本质如何，该文件描述符为应用程序与基础操作系统之间的交互提供了通用接口。因为应...
linux下查看端口命令lsof
cqcq2013的博客
03-13 199
root@olivenan root]# lsof -i tcp:8080 -n root@olivenan root]# lsof -i :1521 -n from；http://blog.youkuaiyun.com/wonder4/...
查看端口占用情况可以使用 lsof 和 netstat 命令
tangsiqi130的博客
10-14 4624
查看端口占用情况可以使用 lsof 和 netstat 命令
linux 服务器进程、端口查找，nginx 配置日志查找，lsof 命令详解
热门推荐
tian830937的专栏
11-17 1万+
t：显示TCP连接-u：显示UDP连接-l：仅显示监听状态的连接-n：以数字形式显示端口号，而不是以服务名称显示通过管道符号|将netstat的输出结果传递给grep命令，用于过滤出包含指定端口号的行。执行命令后，终端将显示与该端口号相关的进程信息，包括进程ID（PID）和进程名称。-i：显示与网络相关的文件:端口号：过滤出指定端口号的结果执行命令后，终端将显示与该端口号相关的进程信息，包括进程ID（PID）和进程名称。
Linux下用netstat查看网络状态、端口状态
09-15
### Linux下使用Netstat命令查看网络与端口状态详解 #### 概述 在Linux操作系统中，`netstat`命令是用于监控TCP/IP网络的重要工具之一。它能够提供丰富的网络连接信息、路由表详情以及各个网络接口的状态，帮助...
检测端口是否被占用
10-25
在Linux或Unix系统中，可以使用"lsof -i :port_number"或"nmap -p port_number"来达到相同的目的。 在日常运维中，端口检测可以帮助我们诊断各种问题。比如，如果一个服务无法启动，可能是因为其默认使用的端口已被...
高效管理网络资源：机器空闲端口检测工具
- 网络管理软件，如Wireshark、Nmap，以及各种基于网络的监控工具和端口扫描器，它们提供了空闲端口检测功能。 - Windows系统自带的命令行工具，如netstat、telnet、PowerShell命令等，也可以用来检测端口状态。 ...
Java程序检测本机服务端口的实现方法
9. 端口占用信息获取：在Java中，除了使用ServerSocket检测端口外，还可以调用操作系统的命令行工具（如netstat或lsof）来获取端口占用信息。通过Java程序执行系统命令并解析输出结果，也是一种常见的做法。 10. ...
查看netstat 端口
最新发布
05-05
另外，引用中提到lsof和nmap，虽然用户主要问netstat，但可能补充这些工具作为备选方案，增强实用性。同时，常见问题如命令不存在的情况，需要提醒用户安装net-tools，适用于较新的Linux发行版。 需要注意结构清晰...
lsof 查看端口号对应的程序
cnbird's blog
01-18 993
lsof -i 
open 端口打开Linux,linux – nmap显示打开的端口,但netstat没有
weixin_30424461的博客
04-30 130
如果我使用nmap扫描我的服务器,则表明已打开21端口.但是当我登录到这个服务器并运行netstat时,我什么也看不见.$nmap -sT serverStarting Nmap 4.76 ( http://nmap.org ) at 2009-06-24 11:54 MSDInteresting ports on server (x.x.x.x):Not shown: 994 filtered ...
ubuntu 当前服务和监听端口
Shanks
10-16 7797
转载自https://www.jianshu.com/p/d2cd1740fab0 有几种方法来查看当前服务和端口 1、使用lsof命令 axing@ax:/usr/local$ sudo lsof -i -P -n | grep LISTEN nrpe 1243 nagios 4u IPv4 15903 0t0 TCP *:5666 (LISTEN) nrpe 1243 nagios 5u IPv6 15904 ..
Nmap神器使用
Hacker_octopus的博客
08-08 1805
各位大佬，最近好么 最近大家有在看《亲爱的，热爱的》吗？有没有被其中CTF比赛的氛围所吸引？ 通过电视剧推广网络安全的方式的确不错，但是画面中比赛用到的命令实在不敢让人恭维… nmap -sT -A操作已经是最容易暴露自己的扫描方式，并且最后的localhost是什么鬼？扫描自己就可以抵挡攻击？这波神操作身为技术小白的我实在欣赏不来。 nmap是网络扫描和嗅探工具包，是网络管理员必备工具之一...
netstat(8) command
Dablelv 的博客专栏。
02-01 3014
1.简介 netstat命令用来打印Linux系统的网络状态信息，包括网络连接、路由表、网络接口设备统计信息、伪装连接和多播成员信息等，可让你得知整个Linux系统的网络情况。 2.输出结果整体说明 执行netstat命令输出： Active Internet connections (w/o servers) Proto Recv-Q Send-Q Local Address ............
查询linux下的业务端口,Linux系统查询显示端口信息用什么命令
weixin_35523135的博客
04-30 288
有时Linux系统需要查看端口信息和状态，用一个命令就能实现，就是netstat命令，不过用法有很多，可以用来查询网络状况，连接状况等，具体怎么用呢，下面由学习啦小编为大家整理了linux的端口查询命令的相关知识，希望对大家有帮助!linux的端口查询命令详解显示详细的网络状况# netstat -a显示当前户籍UDP连接状况# netstat -nu显示UDP端口号的使用情况# netstat ...
Linux netstat 未找到命令
肝码的博客
09-30 8673
在使用netstat命令是，出现-bash: netstat: 未找到命令，说明网络工具没有安装。安装完毕，再次执行netstat命令没有问题。-bash: netstat: 未找到命令。yum：自动化简单化地管理rpm包的命令。net-tools：网络工具。install：安装。
记一次线上排查问题之Arthas
cj_eryue的博客
09-28 800
Arthas是阿里开源的java诊断工具。所以有直接的中文官网可以查看，很是方便。 为了让用户理解arthas能做什么，arthas官网给出了很典型的问题场景，如下： 这个类从哪个 jar 包加载的？为什么会报各种类相关的 Exception？ 我改的代码为什么没有执行到？难道是我没 commit？分支搞错了？ 遇到问题无法在线上 debug，难道只能通过加日志再重新发布吗？ 线上遇到某个用户的数据处理有问题，但线上同样无法 debug，线下无法重现！ 是否有一个全局视角来查看系统的运行状况？
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值