netstat Command — Active Connections & Open Ports Dekho (Examples)
netstat se kaunse apps internet se connected hain, kaunse ports open hain — suspicious activity dhundo. Complete command guide.
netstat Command — Active Connections & Open Ports Dekho
PC kisse baat kar raha hai? netstat se har active connection, open port, listening service dikhta hai — suspicious activity bhi pakdi ja sakti hai.
Table of Contents
- Basic Use
- Useful Flags
- Output Samjho
- Suspicious Activity Pakdo
- Common States
- FAQ
- Conclusion
Basic Use
netstat # sirf active connections
netstat -a # sab — listening bhi
netstat -n # numbers (fast, no DNS)
netstat -b # kaunsa program (admin chahiye)
netstat -o # PID show
netstat -e # Ethernet stats
Useful Flags
| Flag | Kaam |
| -a | All — active + listening |
| -n | Numeric — fast, no lookup |
| -b | Program name (admin) |
| -o | Process ID |
| -e | Statistics |
| -p TCP | Specific protocol |
Output Samjho
Proto Local Address Foreign Address State
TCP 192.168.1.45:52000 142.250.77.234:443 ESTABLISHED
TCP 192.168.1.45:52001 20.198.119.84:443 TIME_WAIT
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
- Local Address = aapka PC:port
- Foreign Address = remote server
- State = connection status
Suspicious Activity Pakdo
netstat -ano | findstr ESTABLISHED
Phir Task Manager → Details → PID search — kaunsa program connected hai pata chal jayega.
Red flags:
- Unknown program + unknown foreign IP
- Too many ESTABLISHED from one PID
- LISTENING on strange high ports (50000+)
Common States
| State | Matlab |
| ESTABLISHED | Active connection |
| LISTENING | Port open, wait kar raha |
| TIME_WAIT | Recently closed |
| CLOSE_WAIT | Remote closed, local open |
| SYN_SENT | Connecting |
FAQ
netstat -b permission?
Admin CMD chahiye — "The requested operation requires elevation".
Kaunse ports normal hain?
80/443 (web), 135/445 (Windows), 3389 (RDP) — unusual high ports check karo.
Virus detect kaise?
Unknown program name + foreign IP — Google karo PID+program name, malware scan chalao.
Conclusion
netstat -ano + Task Manager = poora network map. Kaunsa program kisse connected — 30 second mein pata. Suspicious connections pe PID se culprit pakdo.
TAGS: netstat command, see active connections, check open ports windows, netstat -ano, suspicious connections, which app using internet, port listening check, network monitor cmd, techn trainer
What's Your Reaction?
