Netstat examples-优快云博客

本文链接：https://blog.youkuaiyun.com/zhanglizhuo/article/details/42580763

本文介绍如何使用netstat和lsof命令检查Linux系统中SSH (端口22) 和Apache HTTP服务 (端口80) 的状态。通过这些命令可以查看正在监听端口的进程PID、所属用户及连接状态。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

Checking SSH and Apache TCP ports in Linux using netstat:

Code:

lizhuo@ThinkPad-T400:~$ sudo netstat -netpul | grep -E ":22|:80"

tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      0          12031       877/sshd        

tcp6       0      0 :::80                   :::*                    LISTEN      0          12178       1125/apache2    

tcp6       0      0 :::22                   :::*                    LISTEN      0          12033       877/sshd        

lizhuo@ThinkPad-T400:~$

lizhuo@ThinkPad-T400:~$ sudo netstat -netpula | grep -E ":22|:80"
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      0          12031       877/sshd
tcp        0      0 10.8.12.245:39994       183.61.185.25:80        TIME_WAIT   0          0           -
tcp        0      0 10.8.12.245:45596       183.61.185.22:80        TIME_WAIT   0          0           -
tcp        0      0 10.8.12.245:60616       117.79.93.218:80        TIME_WAIT   0          0           -
tcp        0      0 10.8.12.245:60650       117.79.93.218:80        ESTABLISHED 1000       971862      21756/firefox
tcp        0      0 10.8.12.245:39271       117.79.92.146:80        TIME_WAIT   0          0           -
tcp        0      0 10.8.12.245:39993       183.61.185.25:80        TIME_WAIT   0          0           -
tcp        0      0 10.8.12.245:43367       14.17.69.22:80          TIME_WAIT   0          0           -
tcp        0      0 10.8.12.245:39997       183.61.185.25:80        TIME_WAIT   0          0           -
tcp        0      0 10.8.12.245:39990       183.61.185.25:80        TIME_WAIT   0          0           -
tcp        0      0 10.8.12.245:60645       117.79.93.218:80        TIME_WAIT   0          0           -
tcp        1      0 10.8.12.245:47155       54.217.236.18:80        CLOSE_WAIT 1000       886260      19515/java
tcp        0      0 10.8.12.245:34700       183.61.185.61:80        ESTABLISHED 1000       971592      21756/firefox
tcp        0      0 10.8.12.245:60641       117.79.93.218:80        ESTABLISHED 1000       971830      21756/firefox
tcp        0      0 10.8.12.245:39995       183.61.185.25:80        TIME_WAIT   0          0           -
tcp        0      0 10.8.12.245:60623       117.79.93.218:80        TIME_WAIT   0          0           -
tcp        0      0 10.8.12.245:60647       117.79.93.218:80        ESTABLISHED 1000       971859      21756/firefox
tcp        0      0 10.8.12.245:39992       183.61.185.25:80        TIME_WAIT   0          0           -
tcp6       0      0 :::80                   :::*                    LISTEN      0          12178       1125/apache2
tcp6       0      0 :::22                   :::*                    LISTEN      0          12033       877/sshd
lizhuo@ThinkPad-T400:~$

Displayed are the ID of the user that runs sshd & httpd, PID of the process and state (LISTEN).

Checking SSH and Apache TCP ports in Linux using lsof utility:

Code:

lizhuo@ThinkPad-T400:~$ lsof -Pni :22 -i :80

COMMAND   PID   USER   FD   TYPE DEVICE SIZE/OFF NODE NAME

java    19515 lizhuo   23u  IPv4 886260      0t0  TCP 10.8.12.245:47155->54.217.236.18:80 (CLOSE_WAIT)

firefox 21756 lizhuo   93u  IPv4 971592      0t0  TCP 10.8.12.245:34700->183.61.185.61:80 (ESTABLISHED)

firefox 21756 lizhuo   98u  IPv4 971862      0t0  TCP 10.8.12.245:60650->117.79.93.218:80 (ESTABLISHED)

lizhuo@ThinkPad-T400:~$

Another example:

lizhuo@ThinkPad-T400:~$ sudo netstat -tpen
Proto Recv-Q Send-Q Local Address           Foreign Address         State       User       Inode       PID/Program name
tcp       28      0 10.8.12.245:57002       91.189.92.23:443        CLOSE_WAIT 1000       844627      16819/gvfsd-http
tcp        0      0 10.8.12.245:60650       117.79.93.218:80        ESTABLISHED 1000       971862      21756/firefox
tcp       28      0 10.8.12.245:34240       91.189.92.10:443        CLOSE_WAIT 1000       971676      9575/unity-scope-ho
tcp       28      0 10.8.12.245:42480       91.189.92.24:443        CLOSE_WAIT 1000       966407      16819/gvfsd-http
tcp        0      0 10.8.12.245:39988       45.64.20.158:443        ESTABLISHED 1000       973440      21756/firefox
tcp        1      0 10.8.12.245:47155       54.217.236.18:80        CLOSE_WAIT 1000       886260      19515/java
tcp        0      0 10.8.12.245:34700       183.61.185.61:80        ESTABLISHED 1000       971592      21756/firefox
tcp       28      0 10.8.12.245:60459       91.189.92.10:443        CLOSE_WAIT 1000       844626      16819/gvfsd-http
tcp        0      0 10.8.12.245:34729       173.194.32.226:443      ESTABLISHED 1000       973431      21756/firefox
tcp        0      0 10.8.12.245:53092       161.64.72.2:5222        ESTABLISHED 1000       888613      20396/python2.7
tcp       28      0 10.8.12.245:42478       91.189.92.24:443        CLOSE_WAIT 1000       966405      16819/gvfsd-http
tcp       28      0 10.8.12.245:42479       91.189.92.24:443        CLOSE_WAIT 1000       966406      16819/gvfsd-http
tcp       28      0 10.8.12.245:56507       91.189.92.11:443        CLOSE_WAIT 1000       966880      16819/gvfsd-http
tcp       28      0 10.8.12.245:42482       91.189.92.24:443        CLOSE_WAIT 1000       966409      16819/gvfsd-http
tcp       28      0 10.8.12.245:42481       91.189.92.24:443        CLOSE_WAIT 1000       966408      16819/gvfsd-http
tcp       28      0 10.8.12.245:42483       91.189.92.24:443        CLOSE_WAIT 1000       966410      16819/gvfsd-http
tcp6       1      0 ::1:39765               ::1:631                 CLOSE_WAIT 0          13893       945/cups-browsed
lizhuo@ThinkPad-T400:~$