Consult the Solaris 10 master netstat -an problem

Solaris 10:
Use the command
#netstat -an
You can see
TCP: IPv4
Local Address Remote Address Swind Send-Q Rwind Recv-Q State
-------------------- -------------------- ----- ------ ----- ------ -----------
*.22 *.* 0 0 49152 0 LISTEN
*.32773 *.* 0 0 49152 0 LISTEN
192.168.0.100.50972 208.187.90.11.23 1 0 49848 0 ESTABLISHED
192.168.0.100.41845 202.37.12.169.23 1 0 49848 0 ESTABLISHED
192.168.0.100.40834 202.37.12.164.23 1 0 49848 0 ESTABLISHED

Excuse me, master, how to view the ESTABLISHED connection is the process, these State?

Started by Bruce at November 13, 2016 - 6:37 PM

You can use this tool: lsof
The specific use of the Internet

Posted by Clare at November 14, 2016 - 7:19 PM

Lsof can only see the listener ports have those process, can not see the active connection others port process

Posted by Clare at November 25, 2016 - 7:23 PM

You are connected to the same problem, can only see the connection to the listener ports process, not to connect the remote target process

Posted by Bruce at December 02, 2016 - 8:23 PM

My current server the emergence of a large number of
192.168.0.13.57027 203.64.181.103.23 1 0 49848 0 ESTABLISHED
192.168.0.13.45767 203.64.181.33.23 1 0 49848 0 ESTABLISHED
192.168.0.13.35491 203.64.181.169.23 1 0 49848 0 ESTABLISHED
192.168.0.13.34489 203.64.181.163.23 1 0 49848 0 ESTABLISHED
192.168.0.13.53981 203.64.181.86.23 1 0 49848 0 ESTABLISHED
192.168.0.13.60123 203.64.181.122.23 1 0 49848 0 ESTABLISHED
192.168.0.13.42724 203.64.181.15.23 1 0 49848 0 ESTABLISHED
192.168.0.13.36538 203.64.181.175.23 1 0 49848 0 ESTABLISHED
192.168.0.13.46826 203.64.181.41.23 1 0 49848 0 ESTABLISHED
192.168.0.13.59125 203.64.181.117.23 1 0 49848 0 ESTABLISHED
192.168.0.13.50952 203.64.181.70.23 1 0 49848 0 ESTABLISHED
192.168.0.13.48907 203.64.181.59.23 1 0 49848 0 ESTABLISHED
192.168.0.13.61185 203.64.181.128.23 1 0 49848 0 ESTABLISHED
. . . .

That my machine must be black, running an automatic telnet to other segments of the process, and now want to use netstat command to find out the process.

Posted by Bruce at December 15, 2016 - 9:05 PM

This machine is connected with other machine is to open a temporary port ah, can according to the above reply to check which process is, look at the parent process PPID

Posted by Bruce at December 23, 2016 - 9:28 PM