Code Library

As its name implies, Netstat (or Network Statistics) is used to display protocol statistics for any active connections, monitor connections to a remote host, and monitor IP addresses or domain names of hosts with established connections.

The parameters for Netstat are as follows:

. -a—Displays all connections and listening ports by hostname.

. -b—Displays the executable involved in creating each connection.

. -e—Displays Ethernet packets and bytes to and from the host.

. -n—Displays address and port numbers without resolving the address to the hostname.

. -o—Displays TCP connections and includes the corresponding process ID (PID). Used in combination with –a, -n, and –p. Not available in previous Windows versions.

. -p protocol—Displays statistics based on the protocol specified. Protocols that can be specified are TCP, UDP, TCPv6, or UDPv6. It can be used with –s to display TCP, UDP, ICMP, IP, TCPv6, UDPv6, ICMPv6, or IPv6.

. -s—Displays statistics on a protocol-by-protocol basis. Can be used with the –p parameter to specify a set of protocols.

. -t—Displays the current connection offload state.

. -r—Displays the route table. Information displayed includes network destination, netmask, gateway, interface, and metric (number of hops).

. [Parameter] Interval—Displays the information at every interval specified. Interval is a numeral in seconds. Press Ctrl+C to stop the intervals.

Source of Information : Sams - Windows Server 2008 R2 Unleashed (2010)