Hide

What's this?

commandlinefu.com is the place to record those command-line gems that you return to again and again.

Delete that bloated snippets file you've been using and share your personal repository with the world. That way others can gain from your CLI wisdom and you from theirs too. All commands can be commented on, discussed and voted up or down.

If you have a new feature suggestion or find a bug, please get in touch via http://commandlinefu.uservoice.com/

Get involved!

You can sign-in using OpenID credentials, or register a traditional username and password.

OpenID
or
Sign in Register

First-time OpenID users will be automatically assigned a username which can be changed after signing in.

Hide

Stay in the loop…

Follow the Tweets.

Every new command is wrapped in a tweet and posted to Twitter. Following the stream is a great way of staying abreast of the latest commands. For the more discerning, there are Twitter accounts for commands that get a minimum of 3 and 10 votes - that way only the great commands get tweeted.

» http://twitter.com/commandlinefu
» http://twitter.com/commandlinefu3
» http://twitter.com/commandlinefu10

Subscribe to the feeds.

Use your favourite RSS aggregator to stay in touch with the latest commands. There are feeds mirroring the 3 Twitter streams as well as for virtually every other subset (users, tags, functions,…):

Subscribe to the feed for:

Hide

News

2011-03-12 - Confoo 2011 presentation
Slides are available from the commandlinefu presentation at Confoo 2011: http://presentations.codeinthehole.com/confoo2011/
2011-01-04 - Moderation now required for new commands
To try and put and end to the spamming, new commands require moderation before they will appear on the site.
2010-12-27 - Apologies for not banning the trolls sooner
Have been away from the interwebs over Christmas. Will be more vigilant henceforth.
2010-09-24 - OAuth and pagination problems fixed
Apologies for the delay in getting Twitter's OAuth supported. Annoying pagination gremlin also fixed.
Hide

Tags

Hide

Functions

Hide

Credits

Site by David Winterbottom (user root).

Commands using netstat from sorted by
Terminal - Commands using netstat - 104 results
netstat -anpe
2011-12-06 18:27:09
User: anarcat
Functions: netstat
Tags: Network status diagnostic
1
Up
Down
Lists all listening ports together with the PID of the associated process

Lists all opened sockets (not only listeners), no DNS resolution (so it's fast), the process id and the user holding the socket.

Previous samples were limiting to TCP too, this also lists UDP listeners.

Show sample output | Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -atn | grep :22 | grep ESTABLISHED | awk '{print $4}' | sed 's/:22//'
2011-11-09 10:51:55
User: agambier
Functions: awk grep netstat sed
-2
Up
Down
list current ssh clients
Comments (1) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -plntu
2011-10-01 12:16:38
User: bolthorn0
Functions: netstat
Tags: netstat lsof networking
1
Up
Down
check open ports (both ipv4 and ipv6)

Check open TCP and UDP ports

Show sample output | Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -plnt
2011-09-30 19:56:32
User: DopeGhoti
Functions: netstat
Tags: netstat lsof networking
7
Up
Down
check open ports (both ipv4 and ipv6)

While `lsof` will work, why not use the tool designed explicitly for this job?

(If not run as root, you will only see the names of PID you own)

Show sample output | Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
while true ; do sleep 1 ; clear ; (netstat -tn | grep -P ':36089\s+\d') ; done
2011-09-28 11:39:43
User: hute37
Functions: clear grep netstat sleep true
-3
Up
Down
Monitoring a port connections

shell loop to scan netstat output avoiding loolback aliases (local/remote swap for local connections)

Show sample output | Comments (2) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -rn | convert label:@- netstat.png
2011-09-21 11:52:28
User: appanax
Functions: netstat
0
Up
Down
Command results as an image capture

We use the "convert" command (ImageMagick package) : see man convert (http://www.ma.utexas.edu/cgi-bin/man-cgi?convert+1)

Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -tn | awk 'NR>2 {print $6}' | sort | uniq -c | sort -rn
2011-09-12 23:29:39
User: evandrix
Functions: awk netstat sort uniq
8
Up
Down
Quick network status of machine

credit to tumblr engineering blog @ http://engineering.tumblr.com/

Show sample output | Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
sudo netstat|head -n2|tail -n1 && sudo netstat -a|grep udp && echo && sudo netstat|head -n2|tail -n1 && sudo netstat -a|grep tcp
2011-09-08 18:54:36
User: brando56894
Functions: echo grep head netstat sudo tail
Tags: netstat udp tcp connections
0
Up
Down
Displays All TCP and UDP Connections
Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -an |grep ":80" |awk '{print $5}' | sed s/::ffff://g | cut -d: -f1 |sort |uniq -c |sort -n | tail -1000 | grep -v "0.0.0.0"
2011-07-28 09:36:08
User: zeros
Functions: awk cut grep netstat sed sort tail uniq
0
Up
Down
Find all IP connected to my host through TCP connection and count it

Count and Find all IP connected to my host through TCP connection.

Show sample output | Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -nut | sed '/ESTABLISHED/!d;s/.*[\t ]\+\(.*\):.*/\1/' | sort -u
2011-07-27 07:25:25
User: bitbasher
Functions: netstat sed sort
0
Up
Down
All IP connected to my host
Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -nut | awk '$NF=="ESTABLISHED" {print $5}' | cut -d: -f1 | sort -u
2011-07-27 07:24:10
User: bitbasher
Functions: awk cut netstat sort
-1
Up
Down
All IP connected to my host

find all computer connected to my host through TCP connection

Show sample output | Comments (1) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -lantp | grep ESTABLISHED |awk '{print $5}' | awk -F: '{print $1}' | sort -u
2011-07-21 21:23:10
User: bitbasher
Functions: awk grep netstat sort
16
Up
Down
All IP connected to my host

find all computer connected to my host through TCP connection.

Show sample output | Comments (6) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -nt | awk -F":" '{print $2}' | sort | uniq -c
2011-07-05 07:53:29
User: sreimann
Functions: awk netstat sort uniq
Tags: sort awk uniq netstat
0
Up
Down
netstat with group by (ip adress)

count connections, group by IP and port

Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -ntu | awk ' $5 ~ /^[0-9]/ {print $5}' | cut -d: -f1 | sort | uniq -c | sort -n
2011-07-04 20:23:21
User: letterj
Functions: awk cut netstat sort uniq
Tags: netstat
-3
Up
Down
netstat with group by (ip adress)

netstat has two lines of headers:

Active Internet connections (w/o servers)

Proto Recv-Q Send-Q Local Address Foreign Address State

Added a filter in the awk command to remove them

Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -ntu | awk ' $5 ~ /^[0-9]/ {print $5}' | cut -d: -f1 | sort | uniq -c | sort -n
2011-07-01 11:17:38
User: Koobiac
Functions: awk cut netstat sort uniq
Tags: netstat
2
Up
Down
netstat with group by (ip adress)
Comments (1) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -nt | awk '{print $6}' | sort | uniq -c | sort -n -k 1 -r
2011-06-21 16:27:19
User: dennisfaust
Functions: awk netstat sort uniq
1
Up
Down
Summarize the number of open TCP connections by state

Useful for checking the number and state of TCP connections.

Show sample output | Comments (1) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -n -f inet|awk '/\.389/{print $2}'|cut -f1-4 -d.|sort -u
2011-06-20 14:24:05
User: guptavi
Functions: awk cut netstat sort
1
Up
Down
To find the LDAP clients connected to LDAP service running on Solaris
Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
watch -n 2 netstat -antu
2011-06-02 23:27:33
User: wilbercarmona
Functions: netstat watch
0
Up
Down
Watch netstat output every 2 seconds
Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n
2011-05-25 20:53:34
User: unixmonkey21979
Functions: awk cut netstat sort uniq
0
Up
Down
get the IP connected to the server (usefull to detect IP that should be blocked)
Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -lnptu
2011-05-19 21:16:35
User: mariusbutuc
Functions: netstat
0
Up
Down
Active Internet connections (only servers)
Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
while sleep 1; do date; (netstat -a -n | grep 80) ; done
2011-05-16 07:56:56
User: hute37
Functions: grep netstat sleep
Tags: netstat logging
-4
Up
Down
Polls fos network port usage
Comments (2) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -a -o -n | grep 8080
2011-04-28 09:58:59
User: evandrix
Functions: grep netstat
0
Up
Down
How to Kill Process that is Running on Certain Port in Windows?

I cannot run Tomcat from Eclipse. It says that there?s other process that is running on port 8080, but I don?t know what is the process, and how to stop it from the Services manger in Windows. So here?s how you can kill and find out what is that process:

To find out what PID 8080 was (hopefully not a trojan)

I typed tasklist /FI ?PID eq 8080″

taskkill /F /PID 2600

Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -tulpnc
2011-04-20 07:30:31
User: altern
Functions: netstat
Tags: networking port
0
Up
Down
showing opened ports on machine

shows opened ports on machine in continuous mode (refreshing every 10 sec)

Show sample output | Comments (1) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
(netstat -atn | awk '{printf "%s\n%s\n", $4, $4}' | grep -oE '[0-9]*$'; seq 32768 61000) | sort -n | uniq -u | head -n 1
2010-12-15 09:27:59
User: depesz
Functions: awk grep head netstat seq sort uniq
2
Up
Down
find an unused unprivileged TCP port

perl-less way

Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -atn | perl -ane 'if ( $F[3] =~ /(\d+)$/ ) { $x{$1}=1 } END{ print( (grep {!$x{$_}} 32768..61000)[0] . "\n" )}'
2010-12-15 09:25:52
User: depesz
Functions: grep netstat perl
0
Up
Down
find an unused unprivileged TCP port

perl-based version

Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate