Netstat command in Linux with Examples

The netstat stands for network statistics. It allows users to display network-related information and diagnose various networking issues. The command has several options that can be combined to retrieve specific details.

• Find all ports in a LISTEN state to see what daemons or services are active.
• See who is connected to your machine and what your machine is connected to (ESTABLISHED).
• Identify which Process ID (PID) is responsible for a specific network port.

Syntax of `netstat`Command in Linux

Below is the general syntax of the netstat command:

netstat [options]

Let's explore some of the most commonly used options along with examples:

1) Show Both Listening and Non-listening Sockets Using netstat Command in Linux

-a -all : Show both listening and non-listening sockets. With the --interfaces option, show interfaces that are not up.

netstat -a | more 

2) List All TCP Ports Using netstat Command in Linux

This command specifically lists all TCP ports, giving you information about the TCP connections your system is engaged in.

netstat -at

3) List All UDP Ports Using netstat Command in Linux

Similar to the previous example, this command focuses on UDP ports, revealing details about UDP connections.

netstat -au

4) List Only Listening Ports Using netstat Command in Linux

By using this option, you can see only the ports that are actively listening for incoming connections

netstat -l

To list only the listening ports.

5) List Only Listening TCP Ports Using netstat Command in Linux

Narrowing it down further, this command specifically lists the TCP ports that are in a listening state.

netstat -lt

To list only the listening tcp ports.

6) List Only Listening UDP Ports Using netstat Command in Linux

Similarly, this command focuses on displaying only the UDP ports that are actively listening.

netstat -lu

To list only the listening udp ports.

7) List Only Listening UNIX Ports Using netstat Command in Linux

For those working with UNIX systems, this option shows only the UNIX ports that are in a listening state.

netstat -lx

To list only the listening UNIX ports.

8) List Statistics for All Ports Using netstat Command in Linux

This command provides statistical information for all ports, offering insights into network activity.

netstat -s 

To list the statistics for all ports.

9) List Statistics for TCP Ports Using netstat Command in Linux

For a more specific breakdown, this command displays statistics exclusively for TCP ports.

netstat -st

To list the statistics for TCP ports.

10) List Statistics for UDP Ports Using netstat Command in Linux

Similarly, this command focuses on the statistical information related to UDP ports.

netstat -su

List the statistics for UDP ports.

11) Display PID and Program Names Using netstat Command in Linux

This option enriches the output by displaying Process ID (PID) and program names associated with network connections.

netstat -pt

To display the PID and program names.

12) Print Netstat Information Continuously Using netstat Command in Linux

Executing this command continuously prints netstat information, updating at regular intervals to provide real-time insights.

netstat -c

To print the netstat information continuously.

13) Get Non-supportive Address Families Using netstat Command in Linux

To identify non-supportive address families on the system, use this command for a detailed overview.

netstat --verbose

To get the non-supportive address families in the system.

At the end, we have something like this.

14) Get Kernel Routing Information Using netstat Command in Linux

This command retrieves kernel routing information, displaying destination addresses, gateways, and interface details.

netstat -r

To get the kernel routing information.

15) Get Port on Which a Program is Running Using netstat Command in Linux

To find the port on which a specific program, in this case, SSH, is running, use this command.

netstat -ap | grep ssh

To get the port on which a program is running.

16) Identify Process Using a Particular Port Using netstat Command in Linux

This command helps identify the process associated with a given port, such as port 80 in this example.

netstat -an | grep ':80'

To get the process which is using the given port.

17) Get List of Network Interfaces Using netstat Command in Linux

Use this command to obtain a list of network interfaces, providing details about each interface's activities.

netstat -i

To get the list of network interfaces.

18) Display Extended Information on Interfaces Using netstat Command in Linux

For extended information on interfaces, similar to the output of the ifconfig command, use this option to gain comprehensive insights.

netstat -ie

To display extended information on the interfaces