LinuxQuestions.org
Visit the LQ Articles and Editorials section
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices



Reply
 
Search this Thread
Old 10-24-2008, 05:18 AM   #1
the_gripmaster
Member
 
Registered: Jul 2004
Location: VIC, Australia
Distribution: RHEL, CentOS, Ubuntu Server, Ubuntu
Posts: 362

Rep: Reputation: 38
Unhappy Reading output from netstat


This is a n00b question, please bear with me. Can you please confirm if I am reading the netstat output right:

Code:
[root@mx2 ~]# netstat -ntlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name
tcp        0      0 0.0.0.0:3306                0.0.0.0:*                   LISTEN      5115/mysqld
tcp        0      0 0.0.0.0:25                  0.0.0.0:*                   LISTEN      5164/sendmail: acce
tcp        0      0 :::80                       :::*                        LISTEN      5944/httpd
tcp        0      0 :::22                       :::*                        LISTEN      4963/sshd
tcp        0      0 :::443                      :::*                        LISTEN      5944/httpd
This is what I understand:

Code:
tcp        0      0 0.0.0.0:3306                0.0.0.0:*                   LISTEN      5115/mysqld
means mysql port (3306) is open on all interfaces (0.0.0.0) of the server and it is listening for connections from all hosts (0.0.0.0) and all ports of the host (*).

Code:
tcp        0      0 :::22                       :::*                        LISTEN      4963/sshd
means ssh port (22) is open for all interfaces of the server ( ::: ) and it is listening for connections from all hosts ( ::: ) from any port (*).

I am a bit confused about the difference between 0.0.0.0 and :::. Do they mean the same? And are all my other interpretations correct?

Last edited by the_gripmaster; 10-24-2008 at 05:26 AM.
 
Old 10-24-2008, 01:38 PM   #2
estabroo
Senior Member
 
Registered: Jun 2008
Distribution: debian, ubuntu, sidux
Posts: 1,095
Blog Entries: 2

Rep: Reputation: 111Reputation: 111
That output seems altered. Generally you see the ::: notation for services that have a tcp6 port open, it means the same as 0.0.0.0. Things like ssh will typically open a tcp4 and a tcp6 listener so it'll show up in netstat twice, once with 0.0.0.0 and once with :::
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
netstat output rob.rice Linux - Networking 2 04-29-2007 10:18 AM
Netstat output Raafi Linux - Security 4 05-24-2005 11:14 PM
What does this netstat output mean? Kovacs Linux - Security 2 01-25-2004 07:32 PM
netstat -l output help dai Linux - Security 2 07-02-2003 04:40 PM
netstat output... WeNdeL Linux - Networking 3 03-20-2003 10:45 AM


All times are GMT -5. The time now is 05:02 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration