FTP Connection via NetStat

[Tom Rioux]

When I run the netstat command in searching for ftp connections, I get the following output:

tcp4       0      0  clover1.46269          serv205.ftp            ESTABLISHED

tcp4       0      0  clover1.46270          serv205.ftp            ESTABLISHED

tcp4       0      0  clover1.46273          serv205.ftp            ESTABLISHED

….

Is there any way from the information provided to determine what interface or script is establishing the connection?   Does the number beside the server name “clover1” refer to a process ID or something of that nature?

Thanks…

Tom Rioux

Topic

[Rob Abbott]

Look at the headers on the output.  They tell you what the columns mean.

In this case “clover1” is the local address – the hostname of your cloverleaf server.

If you want to see what process is using a port, you can use “lsof” on *nix platforms.  e.g. lsof -i :42629.  You may need to be sudo’d to see output.

Rob Abbott
Cloverleaf Emeritus

[Author]

Replies