User Tools

Site Tools


sandbox:netstat

Snippets for netstat

Searching WEB attacks

Connections to 80/443 ports:

netstat -tn | egrep ':80|:443'

Sorted connections to 80/443 and only established:

netstat -tn | egrep ':80|:443' | grep ESTABLISHED | awk '{print $5}' | sed 's/:.*//' | sort | uniq -c | sort -n

Count of connections:

netstat -tn | egrep ':80|:443' | grep ESTABLISHED | wc -l

Then check WEB server logs ;-)

sandbox/netstat.txt · Last modified: 2019/04/25 23:43 by dreiggy