[SOLVED] Help interpreting netstat

Darkade · 2012-07-25 17:05:19

I'm trying to identify where a program connects and I've successfully identified the process in netstat. The problem is There's no IP address, or rather I don't know what to make of it since, as you can see, it separated by hyphens. I've tried to connect to 50.57.180.241 and this server does exists, however I'm not sure if that's where I should be pointing at.

Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State
tcp        0      0 ip-10-161-23-145.us-w:49675 50-57-180-241.static.c:http ESTABLISHED

Thanks

Last edited by Darkade (2012-07-25 18:03:37)

aias · 2012-07-25 17:26:03

can you see if you have "ss" installed by typing "ss" at the prompt and see what it gives?

Darkade · 2012-07-25 17:30:21

State       Recv-Q Send-Q                       Local Address:Port                           Peer Address:Port
LAST-ACK    1      1                            10.161.23.145:34865                         50.57.180.241:8008

So I guess that's the IP address right?

Last edited by Darkade (2012-07-25 17:31:27)

aias · 2012-07-25 17:38:12

yes. also, it appears that it _may_ be a server being hosted by Rackspace.

Darkade · 2012-07-25 17:40:10

Any ideas why netstat is giving the hyphened address?

aias · 2012-07-25 17:45:36

unsure. maybe it's got something to do with the canonical host name?
from the man page:

Unless the --numeric (-n) option is specified, the socket address is resolved to its canonical host name (FQDN), and the port number is translated into the corresponding service name.

you could try netstat -n and see if that changes it.

Darkade · 2012-07-25 18:02:40

Wow, I didn't know about this canonical host name. The -n option gave me the ip-address resolved trough ss.

Thanks

Arch Linux

#1 2012-07-25 17:05:19

[SOLVED] Help interpreting netstat

#2 2012-07-25 17:26:03

Re: [SOLVED] Help interpreting netstat

#3 2012-07-25 17:30:21

Re: [SOLVED] Help interpreting netstat

#4 2012-07-25 17:38:12

Re: [SOLVED] Help interpreting netstat

#5 2012-07-25 17:40:10

Re: [SOLVED] Help interpreting netstat

#6 2012-07-25 17:45:36

Re: [SOLVED] Help interpreting netstat

#7 2012-07-25 18:02:40

Re: [SOLVED] Help interpreting netstat

Board footer