Practical Uses of Netstat Command in Analyzing Connected Foreign Addresses
Netstat command is a DOS command used to find all active TCP connections between your computer and other network devices with port numbers and TCP connection state. By simply using this command on the command prompt, you will get the list of active TCP connections between local IP address(your computer) and foreign IP addresses. You can also find the port numbers open in those connections. With proper syntax, we can effectively use it to view how your computer is connected to foreign computers. It has many important uses in computer security. Check the image below to understand its simple use.
If you are working on computer security, it is very handy. There are many practical uses like finding any programs established a connection to the Internet without your knowledge, finding the IP address of a chat friend while sharing a file etc. Let us check some of such uses.
List of Common Netstat Command Syntax
- netstat -n: Displays addresses and port numbers in numerical form
- netstat -a: Displays all connections and listening ports
- netstat -b: Displays the executable involved in creating each connection or listening ports.
- netstat -e: Displays Ethernet statistics
- netstat -o: Displays the Process Identifier associated with each connection
- netstat -p: Shows connections for the specific protocol only
- netstat r: Displays the routing table
- netstat s: Displays per-protocol statistics
Practical Uses of Netstat Command
If you are working on computer security, it is very handy. There are many practical uses like finding any programs established a connection to the Internet without your knowledge, finding the IP address of a chat friend while sharing a file etc. Let us check some of such uses.
- Check Programs Established Connections
It is important to find the names of applications installed on your computer established a connection between your computer and a foreign address. Use the following format to find every application having an active TCP connection.
netstat -b
You just need to run Command Prompt in administrator mode to execute this command. To learn how to do this, visit the link below.
The Requested Operation Requires Elevation (Run as Administrator)
- Find Process Identifiers
With netstat -o command you can find active TCP connections made on your computer with exact Process Identifiers(PID).
- Find Absolute Domain name of Foreign Host
One of the important application is to find the absolute domain name or Fully Qualified Domain Name(FQDN) of the connected foreign address. It will give you a clear picture of the Internet foreign hosts who are connected to your computer. The syntax to find Fully Qualified Domain Name of foreign address is given below.
netstat -f
- Find the Offload
We can find the current offload state of TCP connections using it. The syntax to find current TCP chimney offload state is given below.
netstat -t
Suggested Readings
- I Can Ping Global DNS Server Address But Unable To Go Online
- How to find the Location of Your Yahoo Messenger Chat Friend
- Industry's Best Free Antivirus Software Products
- CMD Command To Open DOS In Any Drive