Netstat
Results 1 to 8 of 8

Thread: Netstat

  1. #1
    Junior Member
    Join Date
    Feb 2003
    Posts
    7

    Netstat

    Alright, What does the state section mean? I am guessing 'just what it says'.
    But I don't exactly understand, or know.. hell.. currently I guess I'm just rambling.
    I'm getting connected to by the same IP on various ports and the state. Is different things..
    Is the guy 'hacking' me, or whatnot. I know it's a person and not just a server..

    Proto Local Address Foreign Address State
    TCP 127.0.0.1:2656 127.0.0.1:8431 TIME_WAIT

  2. #2
    Super Moderator
    Know-it-All Master Beaver

    Join Date
    Jan 2003
    Posts
    3,914
    I believe this is what you are looking for.

    Source: Netstat States

    state meaning
    ------------ -------
    CLOSED Closed: the socket is not being used.
    LISTEN Listening for incoming connections.
    SYN_SENT Actively trying to establish connection.
    SYN_RECEIVED Initial synchronization of the connection under way.
    ESTABLISHED Connection has been established.
    CLOSE_WAIT Remote shut down: waiting for the socket to close.
    FIN_WAIT_1 Socket closed, shutting down connection.
    CLOSING Closed, then remote shutdown: awaiting acknowledgement.
    LAST_ACK Remote shut down, then closed: awaiting acknowledgement.
    FIN_WAIT_2 Socket closed, waiting for shutdown from remote.
    TIME_WAIT Wait after close for remote shutdown retransmission

  3. #3
    Junior Member
    Join Date
    Feb 2003
    Posts
    7

    Wow

    That was fast thanks!

  4. #4
    Banned
    Join Date
    Apr 2003
    Posts
    3,840
    isnt' 127.0.0.1 the localhost ??

  5. #5
    Super Moderator
    Know-it-All Master Beaver

    Join Date
    Jan 2003
    Posts
    3,914

    Re: Wow

    Originally posted here by LiquidWhore
    That was fast thanks!

    It was rather simple....

    I googled for Netstat +State meaning

    I suggest you check out the tutorial by d00dz Attackin if you don't have much experience with google, it is a great resource.

    Originally posted here by MemorY
    isnt' 127.0.0.1 the localserver ??
    Yes, it's a software loopback. It doesn't use hardware and isn't connected to any network. It's mainly for testing software and checking for OSI Layer 1 issues.

  6. #6
    Banned
    Join Date
    Apr 2003
    Posts
    3,840
    thats what i thought ... i said that because he thoguht it was some person crackin' his system .... just wanted to let him know it his local host

  7. #7
    Junior Member
    Join Date
    Feb 2003
    Posts
    7

    No i knew

    No I knew that 127.0.0.1 is a psuedo-IP loopback thingier.. I forgot to state that I was using it for an example. lol and I read the Google Article around the same time I posted and I did find it very useful.. I'm just lazy I guess for not putting time into Googling my problems at times. Sorry guys..

  8. #8
    Junior Member
    Join Date
    Jun 2003
    Posts
    1
    Never forget to Google. Google is life. Don't EVER forget to Google...EVER!!!!
    *backs into shady corner gnawing on arm*
    -=[Alex]=-
    Nothing is foolproof to a talented fool.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides