Monday, 31 January 2011

Troubleshooting Your Network Using Netstat

Netstat is a useful utility that can characterize vital facts about network communications from your computer. It can characterize who is associated to you as well as whom you are associated to. Not only can it help you troubleshoot transportation issues but it can characterize safety issues as well. I will go over with you just some of the dissimilar options with this command. This description will assume that you are running windows 2000, Xp, or Vista. Even the server operating systems like 2000 server, 2003 server and 2008 server will work.

Display All Connections to Your Computer by Using Netstat -a

Windows 2008 Networking

To view all the connections and listening ports on your computer open up a cmd window by going to start then run and typing cmd and then clicking ok. (Note: On Vista Machines your Run choice is hidden by default and you will have to originate the command prompt in the start menu.) You should end up with a black box with a prompt like the one listed below.

C:\Documents and Settings\Mike>

Type in "Netstat -a" and then hit the enter key. You will then see a display similar like the one below with a bunch of facts in it. (Note: The list below has been truncated for space constraints)

This is a list of everything that you are associated to. If you open up a website and then rerun the command it will be listed in the list. This command can be a huge help to see if there are any open ports on your computer that should not be. Spyware for instance likes to broadcast facts and may show up on this list. The entry below shows that person is associated via a goods called Vnc which is a remote passage tool.


Proto Local Address Foreign Address Address State
Tcp laptop:epmap laptop:0 Listening
Tcp laptop:microsoft-ds laptop:0 Listening
Tcp laptop:2869 192.168.1.1:1205 Time_Wait
Tcp laptop:2869 192.168.1.1:1206 Close_Wait
Tcp laptop:2869 192.168.1.1:1207 Time_Wait

Display What Files or Applications Are Being Used by Using Netstat -a -b

Tcp dad:5900 192.168.1.101:3728 Established

To find out what exactly is running on your computer that have those open ports. Type the command below.

Netstat -a -b

In entry below WinVnc is running on this machine. In most cases the display will show the path to the file or files that are utilized for that open port. To know more about the file or files use a search engine to search for those files.


Tcp dad:5900 192.168.1.101:3728 Established 304
[WinVnc.exe]

Display Ethernet Statistics Using Netstat -e

To check your Ethernet card to see if there are issues with it run this command. And you will be able to list the current statistics of your network communications. The main section to worry about is the errors section. You may see a few errors in that section but you should not see a large whole of errors. If you do, there are serious issues with your network card, switch or router. You can rule this out if you have the similar large whole of errors on your other Computers.

Received Sent
Bytes 197115448 12036811
Unicast packets 234864 176485
Non-unicast packets 3398 279
Discards 0 0
Errors 0 3
Unknown protocols 1

Netstat has many more options that are helpful. Experiment with the others and see what other things that Netstat can give you.

Troubleshooting Your Network Using Netstat

No comments: