Hi I have a (probably) stupid question about netstat output. I've not been able to find something good from google.

What can I do to obtain the remote end of the tcp socket, I mean the complete ip address ? My problem is that whatever option I use, I have always the same
problem : the remote address is truncated....perhaps for the "ffff" that is added......

For example, a portion of the output from netstat -tv :

tcp6 0 0 ::ffff:212.31.234.1:ssh ::ffff:192.168.227:4932 ESTABLISHED
tcp6 0 0 ::ffff:212.31.234.1:ssh ::ffff:192.168.227:1039 ESTABLISHED
tcp6 0 0 ::ffff:212.31.234.1:ssh ::ffff:192.168.227:2137 ESTABLISHED


Do you know if it is possible to obtain in someway the full ip of the address ?


The point is that on some other machines, the same command "netstat -tv" gives all complete foreign address......

Why this different behaviour ?

The version is the same, on both machines :

netstat -V
net-tools 1.60
netstat 1.42 (2001-04-15)


Any idea please?

So are you actually using IPv6 ? because that is the format the addresses appear to be coming back as.. (tcp6)

you could always remove IPv6 if you are not using it and that would probably clear up your confusion..

reported 'bugs' on this issue..
http://groups.google.com/group/linux...14a2c1e49b7ce6

Well ok....you've got the right point!

Tnx a lot for your help.

I was about to post a similar question, how do you get netstat to output the complete remote address in "domain name" format?

The output is always truncated, for short URLs like "www.yahoo.com" this is not a problem, but for longer URLs it looks like:

www.somesitewithlongna:4932 ESTABLISHED

I just made that up, but you get the idea.