{"id":11313,"date":"2021-10-29T10:12:19","date_gmt":"2021-10-29T10:12:19","guid":{"rendered":"https:\/\/linuxways.net\/?p=11313"},"modified":"2021-10-29T10:12:19","modified_gmt":"2021-10-29T10:12:19","slug":"monitor-network-traffic-using-netstat-command-in-linux","status":"publish","type":"post","link":"https:\/\/linuxways.net\/de\/centos\/monitor-network-traffic-using-netstat-command-in-linux\/","title":{"rendered":"Monitor Network Traffic Using netstat Command in Linux"},"content":{"rendered":"

Netstat<\/strong> stands for Network statistics<\/strong>. This is a command-line tool used to show intensive deep information about how your system is communicating with other network devices or remote machines. Netstat command specifically displays the details of all individual network connections, protocol-oriented and overall statistics of the computer network. Using the netstat utility, you can easily troubleshoot your network problems. Netstat utility is a cross-platform command-line tool that is available for almost all Windows versions, Linux OS, and Mac operating systems.<\/p>\n

This article will provide the complete details about the usage of the netstat command. You will also learn how users can monitor network traffic using the netstat<\/a> command-line utility.<\/p>\n

Installation of Netstat command-line tool<\/strong><\/h2>\n

To use the netstat utility, you need to install net-tools on your Linux system using the following command:<\/p>\n

For Ubuntu \/ Debian operating distribution<\/p>\n

$ sudo apt install net-tools<\/pre>\n
For CentOS 8 and Fedora distribution<\/p>\n
$ sudo dnf install net-tools<\/pre>\n
How to use the Netstat command to monitor network traffic?<\/strong><\/h2>\n
The following syntax generally is used to run the netstat command:<\/p>\n
Netstat {options}<\/pre>\n
Now, explain the working of each option with the help of some examples:<\/p>\n
List all connections and ports<\/strong><\/h3>\n
To display the report of all active, established, and listening TCP, UDP connections use the following netstat command along with the option -i.<\/p>\n
$ netstat \u2013i<\/pre>\n
<\/p>\n
List all TCP \/ UDP Ports only<\/strong><\/h3>\n
To list all TCP ports run the below-mentioned command:<\/p>\n
$ netstat -at<\/pre>\n
<\/p>\n
Similarly, to list only all UDP ports, use the following command:<\/p>\n
$ netstat -au<\/pre>\n
<\/p>\n
List all TCP \/ UDP \/ UNIX listening ports<\/strong><\/h3>\n
Use the following command to display all listening TCP ports:<\/p>\n
$ netstat -lt<\/pre>\n
<\/p>\n
To display all listening UDP ports, run the following command:<\/p>\n
$ netstat -lu<\/pre>\n
To list all UNIX listening ports use the command as follows:<\/p>\n
$ netstat -lx<\/pre>\n
<\/p>\n
List statistics of all TCP \/ UDP ports<\/strong><\/h3>\n
The \u2018-s\u2019 option is to specifically print the statistics of your overall network. However, you can specifically display the statistics of TCP and UDP ports by using the following command:<\/p>\n
$ netstat -stu<\/pre>\n
<\/p>\n
List network interfaces transactions<\/strong><\/h3>\n
To list all MTU transferring and receiving packets information in the kernel interface table, use the below-mentioned command:<\/p>\n
$ netstat \u2013i<\/pre>\n
<\/p>\n
To display a more extended kernel interface table information use the command which is given below:<\/p>\n
$ netstat -ie<\/pre>\n
<\/p>\n
List summary of listening processes<\/strong><\/h3>\n
By combining different netstat options, you can do a more advanced search about listening connections as follows:<\/p>\n
$ sudo netstat \u2013tulpen<\/pre>\n
<\/p>\n
t – Shows TCP connections<\/p>\n
u – Shows UDP connections<\/p>\n
l – Displays all listening connections<\/p>\n
p – Shows the program name to which the listed connection belongs<\/p>\n
e – Displays the extended information<\/p>\n
n – Displays the users, addresses, and ports numerically.<\/p>\n
Similarly, if you want to display all sockets instead of display only the listening sockets replace the \u2018-l\u2019 option with \u2018-l\u2019 in the above-mentioned command:<\/p>\n
$ netstat -atupen<\/pre>\n
<\/p>\n
To only list the established connections from the above output, you can use the grep command for piping the output as follows:<\/p>\n
$ sudo netstat -atupen | grep ESTABLISHED<\/pre>\n
<\/p>\n
Display network details continuously<\/strong><\/h3>\n
To display the network information continuously after each second, use the below-mentioned command:<\/p>\n
$ netstat -c<\/pre>\n
<\/p>\n
To print all listening TCP connections continuously, use the command, which is given below:<\/p>\n
$ netstat -clt<\/pre>\n
<\/p>\n
Using \u2018Ctrl+c\u2019 to exit from continues output display.<\/p>\n
To view all unconfigured addresses, use the following command:<\/p>\n
$ netstat --verbose<\/pre>\n
<\/p>\n
You can also list a process that uses the specific port for example list programs using port 80.<\/p>\n
$ netstat -an | grep ':80'<\/pre>\n
<\/p>\n
To get more help related to netstat options and their usage, use the following command:<\/p>\n
$ netstat -h<\/pre>\n
<\/p>\n
Conclusion<\/strong><\/h2>\n
We have seen how to monitor network traffic using the netstat command<\/a>. We explored the uses of the netstat command on the Linux system. In this article, we learned different netstat options that provide help to find the desired results.\u00a0<\/strong><\/p>\n
 <\/p>","protected":false},"excerpt":{"rendered":"
Netstat stands for Network statistics. This is a command-line tool used to show intensive deep information about how your system is communicating with other network devices or remote…<\/p>","protected":false},"author":1,"featured_media":11683,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1,4,5,83,165,2],"tags":[35,641],"class_list":["post-11313","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-centos","category-debian","category-mint","category-opensuse","category-red-hat","category-ubuntu","tag-linux","tag-netstat-command"],"_links":{"self":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/posts\/11313","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/comments?post=11313"}],"version-history":[{"count":0,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/posts\/11313\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/media\/11683"}],"wp:attachment":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/media?parent=11313"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/categories?post=11313"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/tags?post=11313"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}