Netstat output to file

broken image

Use the -n switch to prevent netstat from attempting to determine host names for foreign IP addresses.

broken image

The -f switch will force the netstat command to display the Fully Qualified Domain Name (FQDN) for each foreign IP addresses when possible. This data includes bytes, unicast packets, non-unicast packets, discards, errors, and unknown protocols received and sent since the connection was established. Use this switch with the netstat command to show statistics about your network connection. Using -b over -o might seem like it's saving you a step or two but using it can sometimes greatly extend the time it takes netstat to fully execute.

This netstat switch is very similar to the -o switch listed below, but instead of displaying the PID, will display the process's actual file name.

broken image

This switch displays active TCP connections, TCP connections with the listening state, as well as UDP ports that are being listened to. Execute the netstat command alone to show a relatively simple list of all active TCP connections which, for each one, will show the local IP address (your computer), the foreign IP address (the other computer or network device), along with their respective port numbers, as well as the TCP state.