The default setting displays the
addresses as DNS names whenever possible.
-o Displays the owning PID for each connection. Sometimes, you can??™t get enough information
by using a combination of the ??“a and ??“b switches to detect who is responsible for a particular
connection. In this case, combine the ??“a and ??“o command line switches by typing NetStat
-a -o and pressing Enter. The output changes as shown in Figure 11.5. Now you can use a utility
such as TaskList to determine which application has started the connection.
Figure 11.5
Look for application
identification by
combining the -a
and -o switches.
-p proto Displays the connections for the specified protocol. You may use TCP, UDP, TCPv6,
or UDPv6 as the protocol names. When you use this command line switch with the -s switch to
display per-protocol statistics, you may use IP, IPv6, ICMP, ICMPv6, TCP, TCPv6, UDP, or
UDPv6 as the protocol name. For example, if you only want to know which applications have
created a TCP/IPv4 connection, type NetStat -a -o -p TCP and press Enter.
-r Displays the routing table. The output includes the interfaces, as well as the active and persistent
routes.
Pages:
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728