What does this command mean? netstat -nt | grep :80 | wc -l

Hello

What does this command mean?
netstat -nt | grep :80 | wc -l

How much is a good result for it?

I get about 100 sometimes and I am under DDOs attack as it seems.

What should I do if it's not normal.


Thanks

That command will tell you how many connections are being made to your web server at the time you run it.

Can't tell from the count alone whether or not there are problems. You need to look at the result of

netstat -nt | grep :80

, see what the State column says (see man netstat for the meanings of State values), and evaluate where the connections are coming from...try

netstat -t

to have the foreign IP addresses resolved into thier names.

Please read the How To Ask A Question link in my signature...then reply with
Distribution and version of Linux?
Web server name and version?
How many domains are you hosting?
Describe the type of web content you're presenting.

Hi,

Welcome to LQ!
You have shown us your needs but what are/were your deeds?

Rather lazy on your part! You can 'man command' for the command line to get the options for each command you are querying us to fill the information for you.

Please consider reading; https://www.linuxquestions.org/quest...#faq_lqwelcome

Hope this helps.
Have fun & enjoy!

Did you get the command from somewhere that doesn't say what it does? Like class?

Originally Posted by AwesomeMachine Did you get the command from somewhere that doesn't say what it does? Like class?

No
I read about it on different sites when I was digging to find a way to approve that I am under the slowris attacks.
Many posts were talking to use this command and if the result is low that shows everything is OK and you are not under attack.

I just wanted to know what just "low" mean.

I am under DDOS for about 6 months and has changed 3 host company till now, one of them suspended me to prevent the attacks , now I am on VPN and using CWP on Centos 7 on OVH but I am under attack and has changed 2 cloud to prevent the attacks.


6 months ago Cloudflare didnot prevent the attacks I left it but from last 20 hours I am on it and everything seems OK but I have to wait to become sure.


Now when I use " netstat -nt | grep :80 | wc -l" command the result is under 30.



Here all the people seems friendly and helpful. Thanks duds.



More details:

Apache version: Apache/2.4.29
PHP version: 7.1.9 [PHP Switcher]
MySQL version: 10.1.34-MariaDB


System Info

CPU Model: Intel(R) Xeon(R) CPU D-1520 @ 2.20GHz
CPU Details: 1 Core (2500 MHz)
Distro Name: CentOS Linux release 7.5.1804 (Core)
Kernel Version: 4.15.17-1-pve
Platform: x86_64 [lxc]

CWP version: 0.9.8.692