Hi guys
I know that I can use netstat to display open ports , I use the following command to display the port and the service that accompanies it:

netstat -anp --tcp

But what I want to achieve is to display only the ports and the services that accompany them for a certain NIC like lets say 192.168.1.1.... instead of all the NICs

Another question:
I get the following output when I use the mentioned command :
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1252/sshd

What does the 0.0.0.0 refer to ? The localoop or what ?

Thanks to anyone willing to help !

First of all congrats to LQ owners & all other members for upgrading LQ to VB.

Use #nmap -sS -sT -p0 -v <ip-address>
-sS for steath scan
-sT for tcp
-p0 for not to ping
-v verbose

You can refer man page of nmap for other options.

Over to second question... AFAIK 0.0.0.0 refers to the default network.. It works in cases as if you have started apache, it may starts on 0.0.0.0:80.

..amit..

0.0.0.0 is the wildcard ipv4 address. (:: is the ipv6 equivalent.) If your server listens on 0.0.0.0:22, it's listening for and will accept connections to port 22 on any address assigned to the system.

Similarly, 0.0.0.0:* on your netstat output line means that the daemon listening on port 22 will accept a connection from a client initiating said connection from any client-side address and port.

Oh, one more thing... To see listening (open) ports, use