Skip to content

Instantly share code, notes, and snippets.

@tonyskapunk
Created September 29, 2017 21:20
Show Gist options
  • Save tonyskapunk/f343648806d5d1db279aad1a7958b666 to your computer and use it in GitHub Desktop.
Save tonyskapunk/f343648806d5d1db279aad1a7958b666 to your computer and use it in GitHub Desktop.
recap - net-tools vs iproute2

CentOS 6

netstat

==> /var/log/recap/netstat_91251696-248889.log <==               
9125-16-96_24:88:89             
Network connections             
Active Internet connections (servers and established)            
Proto Recv-Q Send-Q Local Address               Foreign Address             State       User       Inode      PID/Program name    
tcp        1      1 1.1.1.1:99                  1.1.1.1:*                   LISTEN      1          26648      9359/sshd           
tcp        1      1 295.1.1.2:94                1.1.1.1:*                   LISTEN      1          29492      9116/master         
tcp        1      1 218.231.266.263:41386       41.45.93.934:883            TIME_WAIT   1          1          -                   
tcp        1      1 218.231.266.263:41349       41.45.93.934:883            TIME_WAIT   1          1          -                   
tcp        1      1 218.231.266.263:99          272.85.1.21:33256           ESTABLISHED 1          72664      6796/sshd           
tcp        1      1 218.231.266.263:41348       41.45.93.934:883            TIME_WAIT   1          1          -                   
tcp        1      1 :::99                       :::*                        LISTEN      1          26647      9359/sshd           
tcp        1      1 ::2:94                      :::*                        LISTEN      1          29499      9116/master         
tcp        1      1 9112:8612:5696:212:be:42921 9112:8611:5619:2:1:a:83:883 ESTABLISHED 1          91788      3146/recaptest-moni 
tcp        1      1 9112:8612:5696:212:be:87766 9112:8612:5619:2:1:a:71:883 ESTABLISHED 1          91736      3146/recaptest-moni 
tcp        1      1 9112:8612:5696:212:be:86226 9a11:2a86:5619:2:1:a:71:883 ESTABLISHED 1          91736      3146/recaptest-moni 
udp        1      1 21.921.263.269:293          1.1.1.1:*                               1          26538      9326/ntpd           
udp        1      1 218.231.266.263:293         1.1.1.1:*                               1          26533      9326/ntpd           
udp        1      1 295.1.1.2:293               1.1.1.1:*                               1          26539      9326/ntpd           
udp        1      1 1.1.1.1:293                 1.1.1.1:*                               1          26598      9326/ntpd           
udp        1      1 fe61::be57:8eff:fe21:cfe:293 :::*                                    1          26536      9326/ntpd                                          
udp        1      1 ::2:293                     :::*                                    1          26535      9326/ntpd           
udp        1      1 fe61::be57:8eff:fe21:cfe:293 :::*                                    1          26537      9326/ntpd                                          
udp        1      1 9112:8612:5696:212:be57::293 :::*                                    1          26534      9326/ntpd                                          
udp        1      1 :::293                      :::*                                    1          26594      9326/ntpd           

ss

==> /var/log/recap/netstat_91251696-248849.log <==               
9125-16-96_24:88:49             
Network connections             
Netid  State      Recv-Q Send-Q     Local Address:Port       Peer Address:Port                                                    
udp    UNCONN     1      1         21.921.263.269:293                   *:*      users:(("ntpd",9326,91))                         
udp    UNCONN     1      1        218.231.266.263:293                   *:*      users:(("ntpd",9326,26))                         
udp    UNCONN     1      1              295.1.1.2:293                   *:*      users:(("ntpd",9326,26))                         
udp    UNCONN     1      1                      *:293                   *:*      users:(("ntpd",9326,27))                         udp    UNCONN     1      1      fe61::be57:8eff:fe21:cfe8:293                  :::*      users:(("ntpd",9326,98))                 
udp    UNCONN     1      1                    ::2:293                  :::*      users:(("ntpd",9326,93))                         
udp    UNCONN     1      1      fe61::be57:8eff:fe21:cfe9:293                  :::*      users:(("ntpd",9326,99))                 
udp    UNCONN     1      1         9112:8612:5696:212:be57:8eff:fe21:cfe9:293                  :::*      users:(("ntpd",9326,92)) 
udp    UNCONN     1      1                     :::293                  :::*      users:(("ntpd",9326,25))                         
tcp    LISTEN     1      296                   :::99                   :::*      users:(("sshd",9359,8))                          
tcp    LISTEN     1      296                    *:99                    *:*      users:(("sshd",9359,3))                          
tcp    LISTEN     1      211                  ::2:94                   :::*      users:(("master",9116,23))                       
tcp    LISTEN     1      211            295.1.1.2:94                    *:*      users:(("master",9116,29))                       
tcp    ESTAB      1      1         9112:8612:5696:212:be57:8eff:fe21:cfe9:42921  9112:8611:5619:2:1:a:8393:84:883    users:(("recaptest-monit",3146,26))          
tcp    ESTAB      1      1         9112:8612:5696:212:be57:8eff:fe21:cfe9:87766  9112:8612:5619:2:1:a:7137:21:883    users:(("recaptest-monit",3146,25))          
tcp    ESTAB      1      1         9112:8612:5696:212:be57:8eff:fe21:cfe9:86226  9a11:2a86:5619:2:1:a:713:722:883    users:(("recaptest-monit",3146,26))          
tcp    TIME-WAIT  1      1        218.231.266.263:41349      41.45.93.934:883                                                     
tcp    ESTAB      1      1        218.231.266.263:99          272.85.1.21:33256  users:(("sshd",6796,3),("sshd",6739,3))          tcp    TIME-WAIT  1      1        218.231.266.263:41348      41.45.93.934:883

CentOS 7

netstat

==> /var/log/recap/netstat_91251696-248883.log <==               
9125-16-96_24:88:83             
Network connections             
Active Internet connections (servers and established)            
Proto Recv-Q Send-Q Local Address           Foreign Address         State       User       Inode      PID/Program name            
tcp        1      1 1.1.1.1:222             1.1.1.1:*               LISTEN      1          29599      2/systemd                   
tcp        1      1 1.1.1.1:99              1.1.1.1:*               LISTEN      1          91381      2679/sshd                   
tcp        1      1 218.231.927.36:99       272.85.1.21:88727       ESTABLISHED 1          39633      5422/sshd: rack [pr         
tcp        1      1 218.231.927.36:83651    41.45.93.934:883        TIME_WAIT   1          1          -                           
tcp        1      1 218.231.927.36:83657    41.45.93.934:883        TIME_WAIT   1          1          -                           
tcp        1      1 218.231.927.36:83659    41.45.93.934:883        TIME_WAIT   1          1          -                           
tcp        1      1 218.231.927.36:83656    41.45.93.934:883        TIME_WAIT   1          1          -                           
tcp        1      1 218.231.927.36:83658    41.45.93.934:883        TIME_WAIT   1          1          -                           
tcp7       1      1 :::222                  :::*                    LISTEN      1          29592      2/systemd                   
tcp7       1      1 :::99                   :::*                    LISTEN      1          91389      2679/sshd                   
tcp7       1      1 9112:8612:5696:21:49518 9112:8612:5619:2:1::883 ESTABLISHED 1          92582      9823/recaptest-moni         
tcp7       1      1 9112:8612:5696:21:46626 9112:8611:5619:2:1::883 ESTABLISHED 1          92581      9823/recaptest-moni         
tcp7       1      1 9112:8612:5696:21:82126 9a11:2a86:5619:2:1::883 ESTABLISHED 1          92536      9823/recaptest-moni         
udp        1      1 21.921.267.58:293       1.1.1.1:*                           1          91286      2692/ntpd                   
udp        1      1 218.231.927.36:293      1.1.1.1:*                           1          91285      2692/ntpd                   
udp        1      1 295.1.1.2:293           1.1.1.1:*                           1          91287      2692/ntpd                   udp        1      1 1.1.1.1:293             1.1.1.1:*                           1          91281      2692/ntpd                   
udp7       1      1 fe61::be57:8eff:fe2:293 :::*                                1          91249      2692/ntpd                   
udp7       1      1 fe61::be57:8eff:fe2:293 :::*                                1          91242      2692/ntpd                   udp7       1      1 9112:8612:5696:212::293 :::*                                1          91241      2692/ntpd                   
udp7       1      1 ::2:293                 :::*                                1          91286      2692/ntpd                   udp7       1      1 :::293                  :::*                                1          91282      2692/ntpd  

ss

==> /var/log/recap/netstat_91251696-248843.log <==               
9125-16-96_24:88:43             
Network connections             
Netid  State      Recv-Q Send-Q Local Address:Port               Peer Address:Port                                                
udp    UNCONN     1      1      21.921.267.58:293                   *:*                   users:(("ntpd",pid=2692,fd=91))         
udp    UNCONN     1      1      218.231.927.36:293                   *:*                   users:(("ntpd",pid=2692,fd=26))        
udp    UNCONN     1      1      295.1.1.2:293                   *:*                   users:(("ntpd",pid=2692,fd=26))             
udp    UNCONN     1      1         *:293                   *:*                   users:(("ntpd",pid=2692,fd=27))                  
udp    UNCONN     1      1      fe61::be57:8eff:fe21:d12f%eth1:293                  :::*                   users:(("ntpd",pid=2692,fd=98))                        
udp    UNCONN     1      1      fe61::be57:8eff:fe21:d191%eth2:293                  :::*                   users:(("ntpd",pid=2692,fd=93))                        
udp    UNCONN     1      1        9112:8612:5696:212:be57:8eff:fe21:d12f:293                  :::*                   users:(("ntpd",pid=2692,fd=99))              
udp    UNCONN     1      1       ::2:293                  :::*                   users:(("ntpd",pid=2692,fd=92))                  
udp    UNCONN     1      1        :::293                  :::*                   users:(("ntpd",pid=2692,fd=25))                  
tcp    LISTEN     1      296       *:222                   *:*                   users:(("systemd",pid=2,fd=35))                  
tcp    LISTEN     1      296       *:99                    *:*                   users:(("sshd",pid=2679,fd=3))                   
tcp    ESTAB      1      1      218.231.927.36:99                 272.85.1.21:88727               users:(("sshd",pid=5424,fd=3),("sshd",pid=5422,fd=3))           
tcp    TIME-WAIT  1      1      218.231.927.36:83657              41.45.93.934:883                                                tcp    TIME-WAIT  1      1      218.231.927.36:83659              41.45.93.934:883                                                
tcp    TIME-WAIT  1      1      218.231.927.36:83656              41.45.93.934:883                                                tcp    TIME-WAIT  1      1      218.231.927.36:83658              41.45.93.934:883                                                
tcp    LISTEN     1      296      :::222                  :::*                   users:(("systemd",pid=2,fd=37))                  
tcp    LISTEN     1      296      :::99                   :::*                   users:(("sshd",pid=2679,fd=8))                   tcp    ESTAB      1      1        9112:8612:5696:212:be57:8eff:fe21:d12f:49518              9112:8612:5619:2:1:a:7137:21:883                 users:(("recaptest-monit",pid=9823,fd=26))            
tcp    ESTAB      1      1        9112:8612:5696:212:be57:8eff:fe21:d12f:46626              9112:8611:5619:2:1:a:7136:82:883                 users:(("recaptest-monit",pid=9823,fd=26))            
tcp    ESTAB      1      1        9112:8612:5696:212:be57:8eff:fe21:d12f:82126              9a11:2a86:5619:2:1:a:713:722:883                 users:(("recaptest-monit",pid=9823,fd=25))

Debian 8

netstat

==> /var/log/recap/netstat_91251696-248882.log <==               
9125-16-96_24:88:82             
Network connections             
Active Internet connections (servers and established)            
Proto Recv-Q Send-Q Local Address           Foreign Address         State       User       Inode       PID/Program name           
tcp        1      1 1.1.1.1:99              1.1.1.1:*               LISTEN      1          25924       8495/sshd                  
tcp        1      1 1.1.1.1:94              1.1.1.1:*               LISTEN      1          27728       8825/master                
tcp        1      1 218.231.264.924:33316   41.45.93.934:883        TIME_WAIT   1          1           -                          
tcp        1      1 218.231.264.924:33323   41.45.93.934:883        TIME_WAIT   1          1           -                          
tcp        1      1 218.231.264.924:33321   41.45.93.934:883        TIME_WAIT   1          1           -                          
tcp        1      1 218.231.264.924:99      272.85.1.21:48427       ESTABLISHED 1          36626       27668/sshd: rack [p        
tcp7       1      1 :::99                   :::*                    LISTEN      1          25997       8495/sshd                  
tcp7       1      1 :::94                   :::*                    LISTEN      1          27724       8825/master                
tcp7       1      1 9112:8612:5696:21:42596 9112:8612:5619:2:1::883 ESTABLISHED 1          95365       7851/recaptest-moni        
tcp7       1      1 9112:8612:5696:21:86641 9112:8611:5619:2:1::883 ESTABLISHED 1          95367       7851/recaptest-moni        
tcp7       1      1 9112:8612:5696:21:82816 9a11:2a86:5619:2:1::883 ESTABLISHED 1          95366       7851/recaptest-moni        
udp        1      1 21.921.266.226:293      1.1.1.1:*                           1          25168       8861/ntpd                  
udp        1      1 218.231.264.924:293     1.1.1.1:*                           1          25163       8861/ntpd                  
udp        1      1 295.1.1.2:293           1.1.1.1:*                           1          25169       8861/ntpd                  
udp        1      1 1.1.1.1:293             1.1.1.1:*                           1          25167       8861/ntpd                  udp7       1      1 fe61::be57:8eff:fe2:293 :::*                                1          25166       8861/ntpd                  
udp7       1      1 9112:8612:5696:212::293 :::*                                1          25165       8861/ntpd                  
udp7       1      1 fe61::be57:8eff:fe2:293 :::*                                1          25167       8861/ntpd                  udp7       1      1 ::2:293                 :::*                                1          25164       8861/ntpd                  
udp7       1      1 :::293                  :::*                                1          25165       8861/ntpd

ss

==> /var/log/recap/netstat_91251696-248849.log <==               
9125-16-96_24:88:49             
Network connections             
Netid  State      Recv-Q Send-Q     Local Address:Port       Peer Address:Port                                                    
udp    UNCONN     1      1         21.921.266.226:293                   *:*      users:(("ntpd",pid=8861,fd=91))                  
udp    UNCONN     1      1        218.231.264.924:293                   *:*      users:(("ntpd",pid=8861,fd=26))                  
udp    UNCONN     1      1              295.1.1.2:293                   *:*      users:(("ntpd",pid=8861,fd=26))                  
udp    UNCONN     1      1                      *:293                   *:*      users:(("ntpd",pid=8861,fd=27))                  udp    UNCONN     1      1      fe61::be57:8eff:fe21:d1d6%eth1:293                  :::*      users:(("ntpd",pid=8861,fd=98))     
udp    UNCONN     1      1         9112:8612:5696:212:be57:8eff:fe21:d1d6:293                  :::*      users:(("ntpd",pid=8861,fd=93))                          
udp    UNCONN     1      1      fe61::be57:8eff:fe21:d1dc%eth2:293                  :::*      users:(("ntpd",pid=8861,fd=99))     udp    UNCONN     1      1                    ::2:293                  :::*      users:(("ntpd",pid=8861,fd=92))                  
udp    UNCONN     1      1                     :::293                  :::*      users:(("ntpd",pid=8861,fd=25))                  
tcp    LISTEN     1      296                    *:99                    *:*      users:(("sshd",pid=8495,fd=3))                   
tcp    LISTEN     1      211                    *:94                    *:*      users:(("master",pid=8825,fd=29))                
tcp    TIME-WAIT  1      1        218.231.264.924:33316      41.45.93.934:883                                                     
tcp    TIME-WAIT  1      1        218.231.264.924:33323      41.45.93.934:883                                                     
tcp    TIME-WAIT  1      1        218.231.264.924:33321      41.45.93.934:883                                                     
tcp    ESTAB      1      1        218.231.264.924:99          272.85.1.21:48427  users:(("sshd",pid=27667,fd=3),("sshd",pid=27668,fd=3))                          
tcp    TIME-WAIT  1      1        218.231.264.924:33328      41.45.93.934:883                                                     
tcp    LISTEN     1      296                   :::99                   :::*      users:(("sshd",pid=8495,fd=8))                   tcp    LISTEN     1      211                   :::94                   :::*      users:(("master",pid=8825,fd=23))                
tcp    ESTAB      1      1         9112:8612:5696:212:be57:8eff:fe21:d1d6:42596  9112:8612:5619:2:1:a:7137:21:883    users:(("recaptest-monit",pid=7851,fd=26))   
tcp    ESTAB      1      1         9112:8612:5696:212:be57:8eff:fe21:d1d6:86641  9112:8611:5619:2:1:a:8393:87:883    users:(("recaptest-monit",pid=7851,fd=25))   
tcp    ESTAB      1      1         9112:8612:5696:212:be57:8eff:fe21:d1d6:82816  9a11:2a86:5619:2:1:a:713:729:883    users:(("recaptest-monit",pid=7851,fd=26))

Debian 9

netstat

==> /var/log/recap/netstat_91251696-918884.log <==               
9125-16-96_91:88:84             
Network connections             
Active Internet connections (servers and established)            
Proto Recv-Q Send-Q Local Address           Foreign Address         State       User       Inode      PID/Program name            
tcp        1      1 1.1.1.1:99              1.1.1.1:*               LISTEN      1          26241      3315/sshd                   
tcp        1      1 1.1.1.1:94              1.1.1.1:*               LISTEN      1          25519      9666/master                 
tcp        1      1 218.231.264.931:39637   41.45.93.934:883        TIME_WAIT   1          1          -                           
tcp        1      1 218.231.264.931:99      272.85.1.21:35459       ESTABLISHED 1          85979      24251/sshd: rack [p         
tcp        1      1 218.231.264.931:39639   41.45.93.934:883        TIME_WAIT   1          1          -                           
tcp        1      1 218.231.264.931:39681   41.45.93.934:883        TIME_WAIT   1          1          -                           
tcp7       1      1 :::99                   :::*                    LISTEN      1          26246      3315/sshd                   
tcp7       1      1 :::94                   :::*                    LISTEN      1          25513      9666/master                 
tcp7       1      1 9112:8612:5696:21:46437 9112:8611:5619:2:1::883 ESTABLISHED 1          96465      4776/recaptest-moni         
tcp7       1      1 9112:8612:5696:21:46456 9112:8612:5619:2:1::883 ESTABLISHED 1          96466      4776/recaptest-moni         
tcp7       1      1 9112:8612:5696:21:84141 9a11:2a86:5619:2:1::883 ESTABLISHED 1          96466      4776/recaptest-moni         
udp        1      1 21.921.266.243:293      1.1.1.1:*                           1          26663      3976/ntpd                   
udp        1      1 218.231.264.931:293     1.1.1.1:*                           1          26662      3976/ntpd                   
udp        1      1 295.1.1.2:293           1.1.1.1:*                           1          26666      3976/ntpd                   
udp        1      1 1.1.1.1:293             1.1.1.1:*                           1          26664      3976/ntpd                   
udp7       1      1 fe61::be57:8eff:fe2:293 :::*                                1          26119      3976/ntpd                   udp7       1      1 fe61::be57:8eff:fe2:293 :::*                                1          26111      3976/ntpd                   
udp7       1      1 9112:8612:5696:212::293 :::*                                1          26666      3976/ntpd                   
udp7       1      1 ::2:293                 :::*                                1          26664      3976/ntpd                   udp7       1      1 :::293                  :::*                                1          26662      3976/ntpd

ss

==> /var/log/recap/netstat_91251696-918844.log <==               
9125-16-96_91:88:44             
Network connections             
Netid  State      Recv-Q Send-Q Local Address:Port               Peer Address:Port                                                
udp    UNCONN     1      1      21.921.266.243:293                   *:*                   users:(("ntpd",pid=3976,fd=91))        
udp    UNCONN     1      1      218.231.264.931:293                   *:*                   users:(("ntpd",pid=3976,fd=26))       
udp    UNCONN     1      1      295.1.1.2:293                   *:*                   users:(("ntpd",pid=3976,fd=26))             
udp    UNCONN     1      1         *:293                   *:*                   users:(("ntpd",pid=3976,fd=25))                  
udp    UNCONN     1      1      fe61::be57:8eff:fe21:d1f8%eth2:293                  :::*                   users:(("ntpd",pid=3976,fd=98))                        
udp    UNCONN     1      1      fe61::be57:8eff:fe21:d1f3%eth1:293                  :::*                   users:(("ntpd",pid=3976,fd=93))                        
udp    UNCONN     1      1        9112:8612:5696:212:be57:8eff:fe21:d1f3:293                  :::*                   users:(("ntpd",pid=3976,fd=99))              
udp    UNCONN     1      1       ::2:293                  :::*                   users:(("ntpd",pid=3976,fd=92))                  
udp    UNCONN     1      1        :::293                  :::*                   users:(("ntpd",pid=3976,fd=27))                  
tcp    LISTEN     1      296       *:99                    *:*                   users:(("sshd",pid=3315,fd=3))                   
tcp    LISTEN     1      211       *:94                    *:*                   users:(("master",pid=9666,fd=23))                
tcp    TIME-WAIT  1      1      218.231.264.931:39688              41.45.93.934:883                                               
tcp    TIME-WAIT  1      1      218.231.264.931:39637              41.45.93.934:883                                               
tcp    ESTAB      1      1      218.231.264.931:99                 272.85.1.21:35459               users:(("sshd",pid=24256,fd=3),("sshd",pid=24251,fd=3))        
tcp    TIME-WAIT  1      1      218.231.264.931:39681              41.45.93.934:883                                               
tcp    LISTEN     1      296      :::99                   :::*                   users:(("sshd",pid=3315,fd=8))                   tcp    LISTEN     1      211      :::94                   :::*                   users:(("master",pid=9666,fd=28))                
tcp    ESTAB      1      1        9112:8612:5696:212:be57:8eff:fe21:d1f3:46437              9112:8611:5619:2:1:a:7136:82:883                 users:(("recaptest-monit",pid=4776,fd=25))            
tcp    ESTAB      1      1        9112:8612:5696:212:be57:8eff:fe21:d1f3:46456              9112:8612:5619:2:1:a:7137:21:883                 users:(("recaptest-monit",pid=4776,fd=26))            
tcp    ESTAB      1      1        9112:8612:5696:212:be57:8eff:fe21:d1f3:84141              9a11:2a86:5619:2:1:a:839:361:883                 users:(("recaptest-monit",pid=4776,fd=26))   

Ubuntu 14.04

netstat

==> /var/log/recap/netstat_91251696-248887.log <==               
9125-16-96_24:88:87             
Network connections             
Active Internet connections (servers and established)            
Proto Recv-Q Send-Q Local Address           Foreign Address         State       User       Inode       PID/Program name           
tcp        1      1 1.1.1.1:99              1.1.1.1:*               LISTEN      1          23137       3449/sshd                  
tcp        1      1 1.1.1.1:94              1.1.1.1:*               LISTEN      1          29799       3326/master                
tcp        1      1 218.231.927.216:87666   41.45.93.934:883        TIME_WAIT   1          1           -                          
tcp        1      1 218.231.927.216:99      272.85.1.21:85199       ESTABLISHED 1          33411       24424/sshd: rack [p        
tcp        1      1 218.231.927.216:87663   41.45.93.934:883        TIME_WAIT   1          1           -                          
tcp        1      1 218.231.927.216:87668   41.45.93.934:883        TIME_WAIT   1          1           -                          
tcp7       1      1 :::99                   :::*                    LISTEN      1          23136       3449/sshd                  
tcp7       1      1 :::94                   :::*                    LISTEN      1          29793       3326/master                
tcp7       1      1 9112:8612:5696:21:33568 9112:8612:5619:2:1::883 ESTABLISHED 1          92815       8671/recaptest-moni        
tcp7       1      1 9112:8612:5696:21:44163 9112:8611:5619:2:1::883 ESTABLISHED 1          92817       8671/recaptest-moni        
tcp7       1      1 9112:8612:5696:21:33916 9a11:2a86:5619:2:1::883 ESTABLISHED 1          92816       8671/recaptest-moni        
udp        1      1 21.921.267.234:293      1.1.1.1:*                           1          29682       3415/ntpd                  
udp        1      1 218.231.927.216:293     1.1.1.1:*                           1          29681       3415/ntpd                  
udp        1      1 295.1.1.2:293           1.1.1.1:*                           1          29636       3415/ntpd                  
udp        1      1 1.1.1.1:293             1.1.1.1:*                           1          29639       3415/ntpd                  
udp7       1      1 fe61::be57:8eff:fe2:293 :::*                                1          29684       3415/ntpd                  udp7       1      1 9112:8612:5696:212::293 :::*                                1          29688       3415/ntpd                  
udp7       1      1 fe61::be57:8eff:fe2:293 :::*                                1          29683       3415/ntpd                  
udp7       1      1 ::2:293                 :::*                                1          29689       3415/ntpd                  udp7       1      1 :::293                  :::*                                1          29633       3415/ntpd

ss

==> /var/log/recap/netstat_91251696-248847.log <==               
9125-16-96_24:88:47             
Network connections             
Netid  State      Recv-Q Send-Q     Local Address:Port       Peer Address:Port                                                    
tcp    UNCONN     1      1         21.921.267.234:293                   *:*      users:(("ntpd",3415,91))                         
tcp    UNCONN     1      1        218.231.927.216:293                   *:*      users:(("ntpd",3415,26))                         
tcp    UNCONN     1      1              295.1.1.2:293                   *:*      users:(("ntpd",3415,26))                         
tcp    UNCONN     1      1                      *:293                   *:*      users:(("ntpd",3415,27))                         
tcp    UNCONN     1      1      fe61::be57:8eff:fe21:d17b:293                  :::*      users:(("ntpd",3415,98))                 tcp    UNCONN     1      1         9112:8612:5696:212:be57:8eff:fe21:d17b:293                  :::*      users:(("ntpd",3415,93)) 
tcp    UNCONN     1      1      fe61::be57:8eff:fe21:d17d:293                  :::*      users:(("ntpd",3415,99))                 tcp    UNCONN     1      1                    ::2:293                  :::*      users:(("ntpd",3415,92))                         
tcp    UNCONN     1      1                     :::293                  :::*      users:(("ntpd",3415,25))                         tcp    LISTEN     1      296                    *:99                    *:*      users:(("sshd",3449,3))                          
tcp    LISTEN     1      211                    *:94                    *:*      users:(("master",3326,29))                       
tcp    ESTAB      1      1        218.231.927.216:99          272.85.1.21:85199  users:(("sshd",24716,3),("sshd",24424,3))        
tcp    TIME-WAIT  1      1        218.231.927.216:87663      41.45.93.934:883                                                     
tcp    TIME-WAIT  1      1        218.231.927.216:87664      41.45.93.934:883                                                     
tcp    TIME-WAIT  1      1        218.231.927.216:87668      41.45.93.934:883                                                     
tcp    LISTEN     1      296                   :::99                   :::*      users:(("sshd",3449,8))                          
tcp    LISTEN     1      211                   :::94                   :::*      users:(("master",3326,23))                       tcp    ESTAB      1      1         9112:8612:5696:212:be57:8eff:fe21:d17b:33568  9112:8612:5619:2:1:a:8393:42:883    users:(("recaptest-monit",8671,91))          
tcp    ESTAB      1      1         9112:8612:5696:212:be57:8eff:fe21:d17b:44163  9112:8611:5619:2:1:a:7136:82:883    users:(("recaptest-monit",8671,26))          
tcp    ESTAB      1      1         9112:8612:5696:212:be57:8eff:fe21:d17b:33916  9a11:2a86:5619:2:1:a:713:722:883    users:(("recaptest-monit",8671,92)) 

Ubuntu 16.04

netstat

==> /var/log/recap/netstat_91251696-248883.log <==               
9125-16-96_24:88:83             
Network connections             
Active Internet connections (servers and established)            
Proto Recv-Q Send-Q Local Address           Foreign Address         State       User       Inode       PID/Program name           
tcp        1      1 1.1.1.1:99              1.1.1.1:*               LISTEN      1          98841       8584/sshd                  
tcp        1      1 1.1.1.1:94              1.1.1.1:*               LISTEN      1          93223       8353/master                
tcp        1      1 218.231.264.919:85459   41.45.93.934:883        TIME_WAIT   1          1           -                          
tcp        1      1 218.231.264.919:85478   41.45.93.934:883        TIME_WAIT   1          1           -                          
tcp        1      1 218.231.264.919:85476   41.45.93.934:883        TIME_WAIT   1          1           -                          
tcp        1      1 218.231.264.919:99      272.85.1.21:35949       ESTABLISHED 1          46893       91336/sshd: rack [p        
tcp7       1      1 :::99                   :::*                    LISTEN      1          98876       8584/sshd                  
tcp7       1      1 :::94                   :::*                    LISTEN      1          93228       8353/master                
tcp7       1      1 9112:8612:5696:21:45211 9112:8611:5619:2:1::883 ESTABLISHED 1          34636       5229/recaptest-moni        
tcp7       1      1 9112:8612:5696:21:35161 9112:8612:5619:2:1::883 ESTABLISHED 1          34636       5229/recaptest-moni        
tcp7       1      1 9112:8612:5696:21:86651 9a11:2a86:5619:2:1::883 ESTABLISHED 1          34681       5229/recaptest-moni        
udp        1      1 21.921.266.219:293      1.1.1.1:*                           1          98966       8522/ntpd                  
udp        1      1 218.231.264.919:293     1.1.1.1:*                           1          98967       8522/ntpd                  
udp        1      1 295.1.1.2:293           1.1.1.1:*                           1          98963       8522/ntpd                  
udp        1      1 1.1.1.1:293             1.1.1.1:*                           1          98966       8522/ntpd                  udp7       1      1 fe61::be57:8eff:fe2:293 :::*                                1          98317       8522/ntpd                  
udp7       1      1 fe61::be57:8eff:fe2:293 :::*                                1          98318       8522/ntpd                  
udp7       1      1 9112:8612:5696:212::293 :::*                                1          98319       8522/ntpd                  udp7       1      1 ::2:293                 :::*                                1          98311       8522/ntpd                  
udp7       1      1 :::293                  :::*                                1          98967       8522/ntpd

ss

==> /var/log/recap/netstat_91251696-248848.log <==               
9125-16-96_24:88:48             
Network connections             
Netid  State      Recv-Q Send-Q Local Address:Port               Peer Address:Port                                                
udp    UNCONN     1      1      21.921.266.219:293                   *:*                   users:(("ntpd",pid=8522,fd=91))        
udp    UNCONN     1      1      218.231.264.919:293                   *:*                   users:(("ntpd",pid=8522,fd=26))       
udp    UNCONN     1      1      295.1.1.2:293                   *:*                   users:(("ntpd",pid=8522,fd=26))             
udp    UNCONN     1      1         *:293                   *:*                   users:(("ntpd",pid=8522,fd=25))                  udp    UNCONN     1      1      fe61::be57:8eff:fe21:d1c1%eth2:293                  :::*                   users:(("ntpd",pid=8522,fd=98))                        
udp    UNCONN     1      1      fe61::be57:8eff:fe21:d1bd%eth1:293                  :::*                   users:(("ntpd",pid=8522,fd=93))                        
udp    UNCONN     1      1        9112:8612:5696:212:be57:8eff:fe21:d1bd:293                  :::*                   users:(("ntpd",pid=8522,fd=99))              
udp    UNCONN     1      1       ::2:293                  :::*                   users:(("ntpd",pid=8522,fd=92))                  
udp    UNCONN     1      1        :::293                  :::*                   users:(("ntpd",pid=8522,fd=27))                  
tcp    LISTEN     1      296       *:99                    *:*                   users:(("sshd",pid=8584,fd=3))                   
tcp    LISTEN     1      211       *:94                    *:*                   users:(("master",pid=8353,fd=29))                
tcp    TIME-WAIT  1      1      218.231.264.919:85459              41.45.93.934:883                                               
tcp    TIME-WAIT  1      1      218.231.264.919:85478              41.45.93.934:883                                               tcp    TIME-WAIT  1      1      218.231.264.919:85476              41.45.93.934:883                                               
tcp    ESTAB      1      1      218.231.264.919:99                 272.85.1.21:35949               users:(("sshd",pid=91366,fd=3),("sshd",pid=91336,fd=3))        
tcp    TIME-WAIT  1      1      218.231.264.919:85458              41.45.93.934:883                                               tcp    LISTEN     1      296      :::99                   :::*                   users:(("sshd",pid=8584,fd=8))                   
tcp    LISTEN     1      211      :::94                   :::*                   users:(("master",pid=8353,fd=23))                
tcp    ESTAB      1      1        9112:8612:5696:212:be57:8eff:fe21:d1bd:45211              9112:8611:5619:2:1:a:8393:84:883                 users:(("recaptest-monit",pid=5229,fd=25))            
tcp    ESTAB      1      1        9112:8612:5696:212:be57:8eff:fe21:d1bd:35161              9112:8612:5619:2:1:a:8393:49:883                 users:(("recaptest-monit",pid=5229,fd=26))            
tcp    ESTAB      1      1        9112:8612:5696:212:be57:8eff:fe21:d1bd:86651              9a11:2a86:5619:2:1:a:839:365:883                 users:(("recaptest-monit",pid=5229,fd=26))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment