netstat

[Shivkumar]

Hey guys,

How to interpret various counters of
"netstate -an" on hpux 11i ?

Thanks,
Shiv

[Geoff Wild · Accepted solution]

How about

man netstat

-a Show the state of all sockets, including
passive sockets used by server processes. When
netstat is used without any options only active
sockets are shown. This option does not show
the state of X.25 programmatic access sockets.
The option is ignored if the -g, -i, -I, -M,
-p, -r, -s or interval option is specified.


-n Show network addresses as numbers. Normally,
netstat interprets addresses and attempts to
display them symbolically. This option applies
to the -a, -i, -r and -v options.



What exactly are you trying to interpret?

Rgds...Geoff

[Senthil Kumar .A_1]

No sure what u meant by counters...

Guessed this what u are looking for..



*

SYN_SENDâ Active open.
*

SYN_RECEIVEDâ Server just received SYN from the client.
*

ESTABLISHEDâ Client received server's SYN, and session is established.
*

LISTENâ Server is ready to accept connection.
*

FIN_WAIT_1â Active close.
*

TIMED_WAITâ Client enters this state after active close.
*

CLOSE_WAITâ Passive close. Server just received first FIN from a client.
*

FIN_WAIT_2â Client just received acknowledgment of its first FIN from the server.
*

LAST_ACKâ Server is in this state when it sends its own FIN.
*

CLOSEDâ Server received ACK from client and connection is closed.

URL if u need more info..
http://www.quepublishing.com/articles/article.asp?p=24374&seqNum=3

I believe u could use lsof, aswell , as i havent used it personally...seems to be useful for serious trouble shooting..here is the link..Credit to senior forumers.. :)

These are the various states of a connection... You could visit the following
http://forums1.itrc.hp.com/service/forums/que

[rick jones]

There isn't all that much in the way of "couters" in netstat -an output. The manpage will describe which column is the bytes arrived, but applcation not-yet-received counter and which is the counter for bytes sent but not yet ACKnowledged by the remote. There will be the local and remote IP addresses and ports, and the "connection" state.

Just what are you looking for? Or are you simply fishing?