man netstat 中文翻譯（簡單翻譯）

man netstat

 

NETSTAT(8)                                                                                                        Linux System Administrator's Manual                                                                                                        NETSTAT(8)

 

NAME

       netstat - Print network connections, routing tables, interface statistics, masquerade connections, and multicast memberships　　

netstat 輸出網絡鏈接、路由表、接口統計，masquerade（假裝） 鏈接、多播成員等數據

SYNOPSIS(概要)

       netstat  [address_family_options]  [--tcp|-t]  [--udp|-u]  [--udplite|-U]  [--raw|-w]  [--listening|-l]  [--all|-a] [--numeric|-n] [--numeric-hosts] [--numeric-ports] [--numeric-users] [--symbolic|-N] [--extend|-e[--extend|-e]] [--timers|-o] [--program|-p]

       [--verbose|-v] [--continuous|-c] [--wide|-W] [delay]

 

       netstat {--route|-r} [address_family_options] [--extend|-e[--extend|-e]] [--verbose（冗長的）|-v] [--numeric|-n] [--numeric-hosts] [--numeric-ports] [--numeric-users] [--continuous|-c] [delay]

 

       netstat {--interfaces|-I|-i} [--all|-a] [--extend|-e] [--verbose|-v] [--program|-p] [--numeric|-n] [--numeric-hosts] [--numeric-ports] [--numeric-users] [--continuous|-c] [delay]

 

       netstat {--groups|-g} [--numeric|-n] [--numeric-hosts] [--numeric-ports] [--numeric-users] [--continuous|-c] [delay]

 

       netstat {--masquerade|-M} [--extend|-e] [--numeric|-n] [--numeric-hosts] [--numeric-ports] [--numeric-users] [--continuous|-c] [delay]

 

       netstat {--statistics|-s} [--tcp|-t] [--udp|-u] [--udplite|-U] [--raw|-w] [delay]

 

       netstat {--version|-V}

 

       netstat {--help|-h}

 

       address_family_options:

 

       [-4|--inet] [-6|--inet6] [--protocol={inet,inet6,unix,ipx,ax25,netrom,ddp, ... } ] [--unix|-x] [--inet|--ip|--tcpip] [--ax25] [--x25] [--rose] [--ash] [--ipx] [--netrom] [--ddp|--appletalk] [--econet|--ec]

 

NOTES

       This program is obsolete（廢棄的）.  Replacement for netstat is ss.  Replacement for netstat -r is ip route.  Replacement for netstat -i is ip -s link.  Replacement for netstat -g is ip maddr.

這一句我不太理解，說的是這個程序已經廢棄了？可是netstat我仍是很常常用的

 

DESCRIPTION

       Netstat prints information about the Linux networking subsystem.  The type of information printed is controlled by the first argument, as follows:

 netstat 輸出有關linux網絡子系統的信息。經過第一個參數來控制輸出的信息類型

   (none)

       By default, netstat displays a list of open sockets.  If you don't specify any address families, then the active sockets of all configured address families will be printed.

 默認狀況下，netstat展現的是打開的socket列表。若是沒有指定地址族，則全部配置了的地址族中，活躍着的socket都會輸出（這裏我翻譯爲地址族不知是否準確，由於不太理解這個概念）

   --route , -r

       Display the kernel routing tables. See the description in route(8) for details.  netstat -r and route -e produce the same output.

 展現內核路由表。查看route(8) 有詳細描述信息。netstat -r 和 route -e 兩個命令效果同樣

   --groups , -g

       Display multicast group membership information for IPv4 and IPv6.

 展現ipv4 和 ipv6的多播組成員信息

   --interfaces=iface , -I=iface , -i

       Display a table of all network interfaces, or the specified iface.

 展現全部網卡，或者指定網卡

   --masquerade , -M

       Display a list of masqueraded connections.

 展現假裝鏈接的列表

   --statistics , -s

       Display summary statistics for each protocol.

展現全部協議的統計數據

OPTIONS

   --verbose , -v

       Tell the user what is going on by being verbose. Especially print some useful information about unconfigured address families.

 告訴用戶命令運行的過程，尤爲是有關未配置的地址族的有關信息

   --wide , -W

       Do not truncate IP addresses by using output as wide as needed. This is optional for now to not break existing scripts （目前，這是可選的，以免破壞現有腳本 -- 翻譯自有道）.

 不要根據寬度須要對ip地址進行截斷。目前，這是可選的，以免破壞現有腳本

   --numeric , -n

       Show numerical addresses instead of trying to determine symbolic host, port or user names.

 使用數字地址來展現主機、端口和用戶名，而不是名稱

   --numeric-hosts

       shows numerical host addresses but does not affect the resolution of port or user names.

 使用數字展現主機地址，可是不影響端口和用戶名

   --numeric-ports

       shows numerical port numbers but does not affect the resolution of host or user names.

 使用數字展現端口號，可是不影響主機名和用戶名

   --numeric-users

       shows numerical user IDs but does not affect the resolution of host or port names.

 使用數字展現用戶id，可是不影響主機名和端口號

   --protocol=family , -A

       Specifies the address families (perhaps better described as low level protocols) for which connections are to be shown.  family is a comma (',') separated list of address family keywords like inet, inet6, unix, ipx, ax25, netrom, econet, and ddp.  This has

       the same effect as using the --inet|-4, --inet6|-6, --unix|-x, --ipx, --ax25, --netrom, and --ddp options.

指定要顯示鏈接的地址族（也許說成低級協議會更好），族之間使用逗號隔開

       The address family inet (Iv4) includes raw, udp, udplite and tcp protocol sockets.

inet lv4的地址族包括了 raw, udp，udplite和tcp協議的socket

   -c, --continuous

       This will cause netstat to print the selected information every second continuously.

 這個命令產生的效果是：持續每秒輸出選中的信息

   -e, --extend

       Display additional information.  Use this option twice for maximum detail.

 展現附加信息，重疊使用該命令能夠看到最爲詳盡的細節

   -o, --timers

       Include information related to networking timers.

 包含網絡計時器信息

   -p, --program

       Show the PID and name of the program to which each socket belongs.

展現每一個socket的pid（進程id）和進程名稱

   -l, --listening

       Show only listening sockets.  (These are omitted by default.)

 展現監聽中的socket（默認省略）

   -a, --all

       Show both listening and non-listening (for TCP this means established connections) sockets.  With the --interfaces option, show interfaces that are not up

 展現監聽以及未監聽（於tcp意味着創建完成的鏈接）的socket。和 --interfaces 一塊兒使用，能夠展現沒有啓用的網卡

   -F

       Print routing information from the FIB（Forward Information Base，轉發信息庫）.  (This is the default.)

 從轉發信息庫（FIB）輸出路由信息（這是默認的）

   -C

       Print routing information from the route cache.

 從路由緩存（cache）輸出路由信息

   delay

       Netstat will cycle printing through statistics every delay seconds.

 netstat 在指定的間隔（delay，單位秒） 循環輸出統計數據

OUTPUT（輸出）

   Active Internet connections (TCP, UDP, UDPLite, raw)

活躍的網絡鏈接（TCP,UDP,UDPLite, raw）

   Proto

       The protocol (tcp, udp, udpl, raw) used by the socket.

 socket使用的協議（tcp, udp, udpl, raw）

   Recv-Q

       Established: The count of bytes not copied by the user program connected to this socket.  Listening: Since Kernel 2.6.18 this column contains the current syn backlog.

 Established: 該socket對應的用戶程序還未複製（或處理）的字節數。Listening: 從Kernel 2.6.18版本以後，這列包含當前的syn backlog(不知道是啥)

   Send-Q

       Established: The count of bytes not acknowledged by the remote host.  Listening: Since Kernel 2.6.18 this column contains the maximum size of the syn backlog.

 Established: 遠程主機爲確認ack的字節數。 Listening： 從 Kernel 2.6.18這列包含了syn backlog 的最大值

   Local Address

       Address and port number of the local end of the socket.  Unless the --numeric (-n) option is specified, the socket address is resolved to its canonical （精確的，簡潔的，公認的） host name (FQDN（正式域名）), and the port number is translated into the corresponding service name.

 本地socket的地址和端口。 除非使用了 --numeric(-n) 指令，這個socket地址會使用主機名，端口號也會展現成相關的服務名而不是數字。

   Foreign Address

       Address and port number of the remote end of the socket.  Analogous（類比的，相似的） to "Local Address."

 遠程socket的地址和端口號，類比Local Address

   State

       The state of the socket. Since there are no states in raw mode and usually no states used in UDP and UDPLite, this column may be left blank. Normally this can be one of several values:

 socket 狀態。由於raw 模式沒有狀態，而udp和udplite 一般也沒有狀態，因此該列可能爲空。 一般該列是如下列出來的其中一個值

       ESTABLISHED

              The socket has an established connection.

 established狀態，socket擁有一個創建完成的鏈接

       SYN_SENT

              The socket is actively attempting to establish a connection.

 syn_sent狀態，socket主動嘗試去創建一個鏈接

       SYN_RECV

              A connection request has been received from the network.

 syn_recv狀態，接收到一個來自網絡的的鏈接請求

       FIN_WAIT1

              The socket is closed, and the connection is shutting down.

 fin_wait1狀態，socket 已經關閉了，鏈接正在關閉中

       FIN_WAIT2

              Connection is closed, and the socket is waiting for a shutdown from the remote end.

 fin_wait2狀態，鏈接已經關閉，socket正在等待遠程終端的關閉指令

       TIME_WAIT

              The socket is waiting after close to handle packets still in the network.

 time_wait狀態，socket關閉後，正在等待處理仍然在網絡中傳輸的數據包

       CLOSE  The socket is not being used.

 close狀態，socket已經沒有使用了

       CLOSE_WAIT

              The remote end has shut down, waiting for the socket to close.

 close_wait狀態，遠程終端已經關閉，等待socket關閉

       LAST_ACK

              The remote end has shut down, and the socket is closed. Waiting for acknowledgement.

 last_ack狀態，遠程終端已經關閉，socket已經斷開。 等待ack

       LISTEN The socket is listening for incoming connections.  Such sockets are not included in the output unless you specify the --listening (-l) or --all (-a) option.

 listen狀態，socket正在監聽進來的鏈接。除非你使用--listening(-l) 或者 --all(-a) 指令，這類socket纔會展現

       CLOSING

              Both sockets are shut down but we still don't have all our data sent.

closing狀態，雙方的socket都關閉了，可是仍然有數據沒有傳輸完畢

       UNKNOWN

              The state of the socket is unknown.

unknown， 未知狀態。

 

   User

       The username or the user id (UID) of the owner of the socket.

socket擁有者的用戶名或者用戶id

 

   PID/Program name

       Slash（斜杆）-separated pair of the process id (PID) and process name of the process that owns the socket.  --program causes this column to be included.  You will also need superuser privileges to see this information on sockets you don't own.  This identification

       information is not yet available for IPX sockets.

 擁有該socket的進程的進程id和進程名稱。 使用 --program 能夠顯示該數據。 若是你沒有該socket的權限，則還須要有超級管理員特權才能查看。目前這個信息在 ipx socket是沒法得到的

   Timer

       (this needs to be written)

（該項待撰寫）

 

   Active UNIX domain Sockets

   Proto

       The protocol (usually unix) used by the socket.

 

   RefCnt

       The reference count (i.e. attached processes via this socket).

 

   Flags

       The flags displayed is SO_ACCEPTON (displayed as ACC), SO_WAITDATA (W) or SO_NOSPACE (N).  SO_ACCECPTON is used on unconnected sockets if their corresponding processes are waiting for a connect request. The other flags are not of normal interest.

 

   Type

       There are several types of socket access:

 

       SOCK_DGRAM

              The socket is used in Datagram (connectionless) mode.

 

       SOCK_STREAM

              This is a stream (connection) socket.

 

       SOCK_RAW

              The socket is used as a raw socket.

 

       SOCK_RDM

              This one serves reliably-delivered messages.

 

       SOCK_SEQPACKET

              This is a sequential packet socket.

 

       SOCK_PACKET

              Raw interface access socket.

 

       UNKNOWN

              Who ever knows what the future will bring us - just fill in here :-)

   State

       This field will contain one of the following Keywords:

 

       FREE   The socket is not allocated

 

       LISTENING

              The socket is listening for a connection request.  Such sockets are only included in the output if you specify the --listening (-l) or --all (-a) option.

 

       CONNECTING

              The socket is about to establish a connection.

 

       CONNECTED

              The socket is connected.

 

       DISCONNECTING

              The socket is disconnecting.

 

       (empty)

              The socket is not connected to another one.

 

       UNKNOWN

              This state should never happen.

 

   PID/Program name

       Process ID (PID) and process name of the process that has the socket open.  More info available in Active Internet connections section written above.

 

   Path

       This is the path name as which the corresponding processes attached to the socket.

 

   Active IPX sockets

       (this needs to be done by somebody who knows it)

 

   Active NET/ROM sockets

       (this needs to be done by somebody who knows it)

 

   Active AX.25 sockets

       (this needs to be done by somebody who knows it)

 

FILES

       /etc/services -- The services translation file

 

       /proc -- Mount point for the proc filesystem, which gives access to kernel status information via the following files.

 

       /proc/net/dev -- device information

 

       /proc/net/raw -- raw socket information

 

       /proc/net/tcp -- TCP socket information

 

       /proc/net/udp -- UDP socket information

 

       /proc/net/udplite -- UDPLite socket information

       /proc/net/igmp -- IGMP multicast information

 

       /proc/net/unix -- Unix domain socket information

 

       /proc/net/ipx -- IPX socket information

 

       /proc/net/ax25 -- AX25 socket information

 

       /proc/net/appletalk -- DDP (appletalk) socket information

 

       /proc/net/nr -- NET/ROM socket information

 

       /proc/net/route -- IP routing information

 

       /proc/net/ax25_route -- AX25 routing information

 

       /proc/net/ipx_route -- IPX routing information

 

       /proc/net/nr_nodes -- NET/ROM nodelist

 

       /proc/net/nr_neigh -- NET/ROM neighbours

 

       /proc/net/ip_masquerade -- masqueraded connections

 

       /proc/net/snmp -- statistics

 

SEE ALSO

       route(8), ifconfig(8), iptables(8), proc(5) ss(8) ip(8)

 

BUGS

       Occasionally strange information may appear if a socket changes as it is viewed. This is unlikely to occur.

 

AUTHORS

       The netstat user interface was written by Fred Baumgarten <dc6iq@insu1.etec.uni-karlsruhe.de>, the man page basically by Matt Welsh <mdw@tc.cornell.edu>. It was updated by Alan Cox <Alan.Cox@linux.org>, updated again by  Tuan  Hoang  <tqhoang@bigfoot.com>.

       The man page and the command included in the net-tools package is totally rewritten by Bernd Eckenfels <ecki@linux.de>.  UDPLite options were added by Brian Micek <bmicek@gmail.com>

 

net-tools                                                                                                                      2012-09-15                                                                                                                    NETSTAT(8)

 

實驗環境 ：

　　CentOS Linux release 7.3.1611 (Core)

備註：

　　udp和udplite，FQDN（正式域名，fully qualified domain name）， FIB（Forward Information Base，轉發信息庫），IPX sockets