Netstat Windows

Netstat (network statistics) is a command-line tool that displays network connections (both incoming and outgoing), routing tables, and a number of network interface statistics. It is available on Unix, Unix-like, and Windows NT-based operating systems.

Syntax and switches

The command syntax is

netstat [-a] [-b] [-e] [-f] [-n] [-o] [-p proto] [-r] [-s] [-t] [-v] [interval]

A brief description of the switches is given in below. Some switches are only in certain Windows versions.

Note that switches for Netstat use the dash symbol “-” rather than the slash “/”.



-a  Displays all connections and listening ports
-b Displays the executable involved in creating each connection or listening port. (Added in XP SP2.)
-e  Displays Ethernet statistics
-f    Displays Fully Qualified Domain Names for foreign addresses. (In Windows Vista/7 only)
-n  Displays addresses and port numbers in numerical form
-o  Displays the owning process ID associated with each connection
-p  proto Shows connections for the protocol specified by proto; proto may be any of: TCP, UDP, TCPv6, or UDPv6.
-r  Displays the routing table
-s  Displays per-protocol statistics
-t  Displays the current connection offload state, (Windows Vista/7)
-v When used in conjunction with -b, will display sequence of components involved in creating the connection or listening port for all executables. (Windows XP SP2, SP3)
[interval]  An integer used to display results multiple times with specified number of seconds between displays. Continues until stopped by command ctrl+c.


Komentar komentar

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s