The information displayed on the Netstat Results Web page depends on the output type you select when using the Netstat command. The following sample results combine output for inet and UNIX address families and are not applicable to each output type selection.
The following sections describe the two types of output.
| Active Internet connections (w/o servers) | ||||||
|---|---|---|---|---|---|---|
| Proto | Recv-Q | Send-Q | Local
Address |
Foreign
Address |
State | PID/Program name |
| tcp | 0 | 0 | mycom-srv1:www | Srv2.:2402 | Established | 831/ |
| tcp | 0 | 0 | mycom-srv1:telnet | Srv3:1077 | Established | 1969/ |
| Name | Description |
|---|---|
| Proto | The protocol used by the socket. |
| Recv-Q | The number of bytes not copied by the user program connected to the socket. |
| Send-Q | The number of bytes not acknowledged by the remote host. |
| Local Address | The host name of the socket. |
| Foreign Address | The remote host name and port number of the socket. |
| State | The state of the socket. The state might have one of the following values. |
| ESTABLISHED | The socket has established a connection. |
| SYN_SENT | The socket is actively attempting to establish a connection. |
| SYN_RECV | The socket has received a connection request from the network. |
| FIN_WAIT1 | The socket is closed, and the connection is shutting down. |
| FIN_WAIT2 | The connection is closed, and the socket is waiting for a shutdown from the remote end. |
| TIME_WAIT | The socket is waiting after being closed to handle packets still in the network. |
| CLOSED | The socket is not being used. |
| CLOSE_WAIT | The remote end has shut down, and the remote end is waiting for the socket to close. |
| LAST_ACK | The remote end has shut down, and the socket is closed. The socket is waiting for acknowledgment. |
| LISTEN | The socket is listening for incoming connections. |
| CLOSING | Both local and remote sockets are shut down, but all the data is still not sent. |
| UNKNOWN | The state of the socket is unknown. |
| Active UNIX domain sockets (w/o servers) | ||||||
|---|---|---|---|---|---|---|
| Proto | RefCnt | Flags | Type | State | I-Node | Path |
| unix | 7 | [ ] | DGRAM | 33148 | /dev/log | |
| unix | 0 | [ ] | DGRAM | 42350 | ||
| unix | 0 | [ ] | DGRAM | 38530 | ||
| Name | Description |
|---|---|
| Proto | The protocol used by the socket. |
| RefCnt | The reference count of processes attached through this socket. |
| Flags | Is used for unconnected sockets if their corresponding processes are waiting for a connect request. |
| Type | The type of socket access: SOCK_DGRAM, SOCK_STREAM, SOCK_RAW, SOCK_RDM, SOCK_SEQPACKET, SOCK_PACKET RAW. |
| SOCK_DGRAM | The socket is used in Datagram mode (without connections). |
| SOCK_STREAM | The socket is a stream socket. |
| SOCK_RAW | The socket is used as a raw socket. |
| SOCK_RDM | The socket serves reliably delivered messages. |
| SOCK_SEQPACKET | The socket is a sequential packet socket. |
| SOCK_PACKET RAW | The socket is an interface access socket. |
| UNKNOWN | The socket is unknown. |
| State | The state of the socket. For a list of possible socket states, see the description for inet address families. |
| I-Node | The associated file for this socket, shown as an I-node number. |
| Path | The path name of the processes attached to the socket. |