Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 11 May 2010 12:20:02 -0700
From:      Wes Peters <barnaclewes@gmail.com>
To:        Mike Tancsa <mike@sentex.net>
Cc:        freebsd-net@freebsd.org
Subject:   Re: sockstat / netstat output 8.x vs 7.x
Message-ID:  <AANLkTinEjLEbGv_TIDWTz_rDxc4S_EDr_mCMmd0cINzl@mail.gmail.com>
In-Reply-To: <201005111814.o4BIEPfN071211@lava.sentex.ca>

index | next in thread | previous in thread | raw e-mail

The output header is instructive:

USER     COMMAND    PID   FD PROTO  LOCAL ADDRESS         FOREIGN ADDRESS
www      httpd      18423 3  tcp4 6 *:80                  *:*
www      httpd      18423 4  tcp4   *:*                   *:*
www      httpd      25184 3  tcp4 6 *:80                  *:*
www      httpd      25184 4  tcp4   *:*                   *:*

Same as 7, it's the foreign address.  This is normally only useful for
connected sockets.

On Tue, May 11, 2010 at 11:14 AM, Mike Tancsa <mike@sentex.net> wrote:
> [trying on freebsd-net since no response on stable]
>
> I noticed that apache on RELENG_8 and RELENG_7 shows up with output I cant
> seem to understand from sockstat -l and netstat -naW
>
> On RELENG_7, sockstat -l makes sense to me
> ....
> www      httpd      83005 4  tcp4   *:443                 *:*
> www      httpd      82217 3  tcp4   *:80                  *:*
> www      httpd      82217 4  tcp4   *:443                 *:*
> www      httpd      38942 3  tcp4   *:80                  *:*
> www      httpd      38942 4  tcp4   *:443                 *:*
> root     httpd      1169  3  tcp4   *:80                  *:*
> root     httpd      1169  4  tcp4   *:443                 *:*
>
>
> various processes listening on all bound IP addresses on ports 80 and 443.
>
> On  RELENG_8 however, it shows up with an extra entry (at the end)
>
> www      httpd      29005 4  tcp4   *:*                   *:*
> www      httpd      29004 3  tcp4 6 *:80                  *:*
> www      httpd      29004 4  tcp4   *:*                   *:*
> www      httpd      29003 3  tcp4 6 *:80                  *:*
> www      httpd      29003 4  tcp4   *:*                   *:*
> www      httpd      66731 3  tcp4 6 *:80                  *:*
> www      httpd      66731 4  tcp4   *:*                   *:*
> root     httpd      72197 3  tcp4 6 *:80                  *:*
> root     httpd      72197 4  tcp4   *:*                   *:*
>
>
> *:80 makes sense to me... process is listening on all IPs for port 80.  What
> does *:* mean then ?
>
> Netstat gives a slightly different version of it
>
> Active Internet connections (including servers)
> Proto Recv-Q Send-Q  Local Address          Foreign Address       (state)
> tcp4       0      0 *.1984                 *.*                    LISTEN
> tcp4       0      0 *.*                    *.*                    CLOSED
> tcp46      0      0 *.80                   *.*                    LISTEN
>
> state closed ?
>
>        ---Mike
>
>
>
> --------------------------------------------------------------------
> Mike Tancsa,                                      tel +1 519 651 3400
> Sentex Communications,                            mike@sentex.net
> Providing Internet since 1994                    www.sentex.net
> Cambridge, Ontario Canada                         www.sentex.net/mike
>
> _______________________________________________
> freebsd-net@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
>



-- 
Against stupidity the very gods Themselves contend in vain.
                                         Friedrich Schiller


home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AANLkTinEjLEbGv_TIDWTz_rDxc4S_EDr_mCMmd0cINzl>