Yadda za a Yi amfani da Dokar Netstat

Misalan, sauyawa, da sauransu

Umurnin netstat Umurni ne mai umarnin Umurnin da aka yi amfani dashi don nuna cikakken bayani game da yadda kwamfutarka ke sadarwa tare da wasu kwakwalwa ko na'urori na cibiyar sadarwa.

Musamman, umurnin netstat zai iya nuna cikakken bayani game da haɗin sadarwa na kowa, cikakkun bayanai da ƙididdiga na yarjejeniya, kuma mafi yawa, duk abin da zai iya taimakawa wajen magance matsalolin hanyoyin sadarwar.

Netstat Umurnin umarni

Umurnin netstat yana samuwa daga cikin Dokar Gyara a cikin mafi yawan sassan Windows ciki har da Windows 10 , Windows 8 , Windows 7 , Windows Vista , Windows XP , tsarin Windows Server, da kuma wasu tsofaffi na Windows, ma.

Lura: Da samuwa na wani umurni na netstat da sauran umarni na netstat na iya bambanta daga tsarin aiki zuwa tsarin aiki.

Sabunta Umurnin Netstat

Daga cikin 'yan'uwanku , wato,' yan'uwanku , [ time_interval ] [ /? ]

Tip: Duba Yadda za a Karanta Umurnin Umurnin idan ba ka tabbatar da yadda kake karanta rubutun rubutun netstat ba kamar yadda aka nuna a sama.

Kashe umarni na netstat kawai don nuna jerin abubuwan da ke cikin sauki na TCP wanda, domin kowannensu, zai nuna adireshin IP na gida (kwamfutarka), adireshin IP ɗin waje (sauran kwamfuta ko na'ura na cibiyar sadarwa), tare da su tashar tashar jiragen ruwa, da kuma jihar TCP.

-a = Wannan canjin yana nuna tasirin TCP, haɗin TCP tare da tsarin sauraron, da kuma tashoshin UDP da ake sauraron su.

-b = Wannan fassarar netstat ɗin ya yi kama da -in canje-canje da aka jera a ƙasa, amma maimakon nuna PID, zai nuna sunan fayil na ainihi. Yin amfani da -b a kan -o yana iya zama kamar yana ceton ku mataki ko biyu amma yin amfani da shi zai iya wani lokacin ƙara lokaci da yake ɗaukan netstat don cikawa.

-e = Yi amfani da wannan canji tare da umurnin netstat don nuna bayanan game da haɗin yanar gizonku. Wannan bayanan ya hada da bayanan, saitunan unicast, saitunan maras unicast, disards, kurakurai, da saitunan da ba a san su ba kuma sun aika tun lokacin da aka kafa haɗin.

-f = Ƙarfin -f za ta tilasta umarni na netstat don nuna cikakken sunan mai suna (FQDN) ga kowane adireshin IP na waje idan ya yiwu.

-n = Yi amfani da -n canzawa don hana netstat daga ƙoƙarin ƙayyade sunayen mahalarta don adireshin IP na waje. Dangane da haɗin yanar gizonku na yau, ta amfani da wannan canji zai iya rage yawan lokacin da ake bukata don netstat don cikawa.

-o = Aikin da za a iya amfani dashi don yawancin ayyuka na warware matsalolin, da -o canzawa yana nuna alamar ganowa (PID) hade da kowace alamar nunawa. Dubi misalin da ke ƙasa don ƙarin bayani game da yin amfani da netstat -o .

-p = Yi amfani da maɓallin -p don nuna alaƙa ko kididdiga kawai don wani tsari . Ba za ku iya ƙayyade ƙirar fiye da ɗaya ba , kuma ba za ku iya kashe netstat tare da -p ba tare da bayyana wani yarjejeniya ba .

yarjejeniya = Lokacin da aka ƙayyade yarjejeniya tare da zaɓi -p , zaka iya amfani da tcp , udp , tcpv6 , ko udpv6 . Idan kuna amfani da -s tare da -p don duba lissafi ta hanyar yarjejeniya, zaku iya amfani da icmp , ip , icmpv6 , ko ipv6 baya ga na farko da na ambata.

-r = Sanya netstat tare da -r don nuna layin rubutun IP. Wannan daidai yake da yin amfani da umarnin hanya don aiwatar da hanya .

-s = Za'a iya amfani da zaɓi -s tare da umurnin netstat don nuna cikakken bayanai ta hanyar yarjejeniya. Za ka iya ƙididdige kididdigar da aka nuna zuwa wata yarjejeniya ta amfani da zaɓin -s da kuma ƙaddamar da wannan yarjejeniya , amma tabbatar da amfani da - kafin ka'idojin lokacin amfani da sauyawa tare.

-t = Yi amfani da -t canzawa don nuna halin yanzu na TCP mai amfani da hayaki a wurin da aka nuna yawancin TCP.

-x = Yi amfani da zabin -x don nuna duk masu sauraro na NetworkDirect, haɗi, da kuma maƙasudin ra'ayi.

-y = Za a iya amfani da -y can don nuna samfurin haɗin TCP don duk haɗin. Ba za ku iya amfani da -y tare da wani zaɓi na netstat ba.

time_interval = Wannan lokaci ne, a cikin seconds, cewa kuna so umarnin netstat ya sake aiwatarwa ta atomatik, tsayawa kawai lokacin da kake amfani da Ctrl-C don ƙare madauki.

/? = Yi amfani da canjin taimako don nuna bayanan game da umurnin netstat da dama.

Tip: Yi duk abin da ke cikin bayanai a cikin layin umarni da sauki don aiki tare da fitar da abin da kuke gani akan allon zuwa fayil din rubutu ta amfani da mai sarrafawa ta hanyar redirection . Duba yadda za a sake tura kayan aiki zuwa fayil ɗin don umarnin cikakke.

Hotunan Dokokin Netstat

netstat -f

A cikin wannan misali na farko, zan kashe netstat don nuna duk haɗin TCP mai aiki. Duk da haka, Ina so in ga kwakwalwan da nake haɗuwa a cikin tsarin FQDN [ -f ] maimakon adireshin IP mai sauki.

Ga misali na abin da kuke gani:

Hanyoyin Jadawalin Labarai Labarai Adireshin Yankin Ƙasar waje TCP 127.0.0.1:5357 VM-Windows-7: 49229 TIME_WAIT TCP 127.0.0.1:49225 VM-Windows-7: 12080 TIME_WAIT TCP 192.168.1.14:49194 75.125.212.75:http CLOSE_WAIT TCP 192.168 .1.14: 49196 a795sm.avast.com:http CLOSE_WAIT TCP 192.168.1.14:49197 a795sm.avast.com:http CLOSE_WAIT TCP 192.168.1.14:49230 TIM-PC: wsd TIME_WAIT TCP 192.168.1.14:49231 TIM-PC: icslap ESTABLISHED TCP 192.168.1.14:49232 TIM-PC: netbios-ssn TIME_WAIT TCP 192.168.1.14:49233 TIM-PC: netbios-ssn TIME_WAIT TCP [:: 1]: 2869 VM-Windows-7: 49226 TALKAR TCP [:: 1] : 49226 VM-Windows-7: icslap ANYAKE

Kamar yadda ka gani, ina da haɗin TCP 11 masu aiki a lokacin da na kashe netstat. Shirin kawai (a cikin layin layin Labaran da aka ƙaddara shi ne TCP, wanda aka sa ran saboda ban yi amfani da -a ba .

Hakanan zaka iya ganin adiresoshin IP guda uku a cikin adireshin Adireshin -adireshin IP na 192.168.1.14 da kuma nau'ikan IPv4 da IPv6 na adireshin loopback , tare da tashar jiragen ruwa kowane haɗi yana amfani. Jerin Kasuwanci na Ƙasashen ya kirga FQDN ( 75.125.212.75 bai yanke shawara don wasu dalilai) tare da wannan tashar ba.

A ƙarshe, asusun na jihar ya lissafa matsayin TCP na wannan haɗin.

netstat -o

A cikin wannan misali, Ina so in gudanar da netstat kullum don haka kawai yana nuna alamar TCP mai aiki, amma ina so in ga yadda aka gano maɓallin tsari [ -o ] don kowane haɗi don haka zan iya tantance abin da shirin a kwamfutarka ya fara kowanne.

Ga abin da kwamfutar ta nuna:

Hanyoyin Jadawalin Labarai Adireshin Yankin Ƙasashen waje Adireshin Ƙasashen waje PID TCP 192.168.1.14:49194 75.125.212.75:http CLOSE_WAIT 2948 TCP 192.168.1.14:49196 a795sm: http CLOSE_WAIT 2948 TCP 192.168.1.14:49197 a795sm: http CLOSE_WAIT 2948

Kuna lura da sabon shafi na PID . A wannan yanayin, PIDs duka ɗaya ne, ma'anar cewa wannan shirin a kan kwamfutarka ya buɗe wadannan haɗin.

Don sanin abin da PID ta wakilta ta 2948 a kan kwamfutarka, duk abin da zan yi shi ne bude Task Manager , danna kan Matakan Labarai, da kuma lura da Hoton Lissafin da aka jera kusa da PID ina neman a shafi na PID . ¹

Yin amfani da umarnin netstat tare da -an zaɓin zai iya taimakawa sosai lokacin da kake sauke abin da shirin ya yi amfani da maɗaukaki na bandwidth . Hakanan zai iya taimakawa wajen gano wurin da wasu nau'o'in malware , ko ma wani ɓangaren software marar kyau, na iya aikawa da bayanin ba tare da izini ba.

Lura: Duk da yake wannan da misali na gaba sun gudana a kan kwamfutar daya, kuma a cikin minti daya kawai na juna, zaku ga cewa jerin ayyukan TCP mai aiki yana da bambanci sosai. Wannan shi ne saboda kwamfutarka tana haɗawa da juna, da kuma cirewa daga, wasu na'urori daban-daban a kan hanyar sadarwarka da kan intanet.

netstat -s -p tcp -f

A wannan misali na uku, Ina so in duba takardun ƙayyadaddun tsari ( -s ) amma ba duka ba, kawai TCP stats [ -p tcp ]. Ina kuma son adireshin kasashen waje a cikin tsarin FQDN [ -f ].

Wannan shine umarnin netstat, kamar yadda aka nuna a sama, wanda aka samar a kan kwamfutarka:

TCP Statistics for Active IPv4 = = 77 Sake Gyara = 21 Ba a yi nasarar Haɗakarwa = 2 Sake saiti Connections = 25 Haɗuwa a yanzu = 5 Seashe Karɓa = 7313 Sassan Sake = 4824 Sassan Sake dawowa = 5 Hanyoyin Jirgiya Layi Adireshin Yanki Adireshin Ƙasashen waje TCP 127.0.0.1: 2869 VM-Windows-7: 49235 TIME_WAIT TCP 127.0.0.1:2869 VM-Windows-7: 49238 KASHE TCP 127.0.0.1:49238 VM-Windows-7: icslap HAUSA TCP 192.168.1.14:49194 75.125.212.75:http CLOSE_WAIT TCP 192.168.1.14:49196 a795sm.avast.com:http CLOSE_WAIT TCP 192.168.1.14:49197 a795sm.avast.com:http CLOSE_WAIT

Kamar yadda kake gani, ana nuna adadi daban-daban na yarjejeniyar TCP, kamar yadda duk haɗin TCP aiki ke nan a lokacin.

netstat -e-5

A cikin wannan misali na ƙarshe, na kashe umurnin netstat don nuna wasu ƙididdiga masu mahimmanci na cibiyar sadarwa [ -e ] kuma ina so wadannan kididdigar su ci gaba da sabuntawa a cikin sakon umurnin kowane sati biyar [ -5 ].

Ga abin da aka samar akan allon:

Bayanai na Bayanai da aka karɓa Sake Byte 22132338 1846834 Saitunan Unicast 19113 9869 Baitattun Bayanai 0 0 Dama 0 0 Kurakurai 0 0 Sa'idodi maras kyau 0 Bayanan Tsarin Bayanan Da aka Sami Sake Bytes 22134630 1846834 Saitunan Unicast 19128 9869 Baitattun Bayanai 0 0 Dama 0 0 Kurakurai 0 0 Unknown ladabi 0 ^ C

Bayanai da dama na bayanai, wanda zaku iya gani a nan da kuma abin da na jera a -e ambaɗar sama, an nuna.

Na bar barci na netstat sau ɗaya kawai don yin wani karin lokaci, kamar yadda zaku iya ganin ta biyu tables a sakamakon. Ka lura da 'C a kasa, yana nuna cewa na yi amfani da umarnin Ctrl-C don dakatar da sake aiwatar da umurnin.

Netstat Dokokin da suka shafi

Ana amfani da umarni na netstat tare da wasu hanyoyin haɗin yanar gizon Umurnin umarni kamar nslookup, ping , tracert , ipconfig, da sauransu.

_{[1] Mai yiwuwa ka hada da shafi na PID zuwa Task Manager. Zaka iya yin wannan ta hanyar zaɓar "PID (Identifier Process)" akwati daga Duba -> Zaɓi ginshiƙai a Task Manager. Kuna iya danna maɓallin "Nuna tafiyar matakai daga duk masu amfani" a kan Tasirin da aka sanya idan ba a ba da PID ba.}