Netstat (network statistics) is a command-line tool that displays network connections (both incoming and outgoing), routing tables, and a number of network interface statistics. It is available on Unix, Unix-like, and Windows NT-based operating systems.
Syntax and switches
The command syntax is
netstat [-a] [-b] [-e] [-f] [-n] [-o] [-p proto] [-r] [-s] [-t] [-v] [interval]
A brief description of the switches is given in below. Some switches are only in certain Windows versions.
Note that switches for Netstat use the dash symbol “-” rather than the slash “/”.
|-a||Displays all connections and listening ports|
|-b||Displays the executable involved in creating each connection or listening port. (Added in XP SP2.)|
|-e||Displays Ethernet statistics|
|-f||Displays Fully Qualified Domain Names for foreign addresses. (In Windows Vista/7 only)|
|-n||Displays addresses and port numbers in numerical form|
|-o||Displays the owning process ID associated with each connection|
|-p proto||Shows connections for the protocol specified by proto; proto may be any of: TCP, UDP, TCPv6, or UDPv6.|
|-r||Displays the routing table|
|-s||Displays per-protocol statistics|
|-t||Displays the current connection offload state, (Windows Vista/7)|
|-v||When used in conjunction with -b, will display sequence of components involved in creating the connection or listening port for all executables. (Windows XP SP2, SP3)|
|[interval]||An integer used to display results multiple times with specified number of seconds between displays. Continues until stopped by command ctrl+c.|