Comments on: Better than netstat: lsof tells us who is listening to what https://billauer.se/blog/2018/12/netstat-vs-lsof/ Anything I found worthy to write down. Thu, 26 Mar 2026 13:15:15 +0000 hourly 1 http://wordpress.org/?v=3.1.2 By: eli https://billauer.se/blog/2018/12/netstat-vs-lsof/comment-page-1/#comment-1404 eli Thu, 31 Jan 2019 09:07:34 +0000 https://billauer.se/blog/?p=5612#comment-1404 Thanks, that's really cute. I'd consider changing the title of this post, but nah. I'll just add that you need to be root to see the listening processes that don't belong to yourself, even with netstat -ap. Thanks, that’s really cute. I’d consider changing the title of this post, but nah.

I’ll just add that you need to be root to see the listening processes that don’t belong to yourself, even with netstat -ap.

]]> By: Rami Rosen https://billauer.se/blog/2018/12/netstat-vs-lsof/comment-page-1/#comment-1403 Rami Rosen Thu, 31 Jan 2019 09:01:26 +0000 https://billauer.se/blog/?p=5612#comment-1403 Hi Elli, >OK, so we have netstat to tell us which ports are >opened for listening: >$ netstat -n -a | grep "LISTEN " >Thanks, that nice, but what process is listening to >these ports? Actually you can get the process also with netstat using the -p flag For example, netstat -n -ap | grep "LISTEN " tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 830/sshd tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 831/cupsd tcp6 0 0 127.0.0.1:36391 :::* LISTEN 4064/java tcp6 0 0 :::22 :::* LISTEN 830/sshd tcp6 0 0 ::1:631 :::* LISTEN 831/cupsd See man netstat: ... ... -p, --program Show the PID and name of the program to which each socket belongs. ... Regards, Rami Rosen Hi Elli,

>OK, so we have netstat to tell us which ports are >opened for listening:

>$ netstat -n -a | grep “LISTEN ”

>Thanks, that nice, but what process is listening to >these ports?

Actually you can get the process also with netstat using the -p flag

For example,

netstat -n -ap | grep “LISTEN ”

tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 830/sshd
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 831/cupsd
tcp6 0 0 127.0.0.1:36391 :::* LISTEN 4064/java
tcp6 0 0 :::22 :::* LISTEN 830/sshd
tcp6 0 0 ::1:631 :::* LISTEN 831/cupsd

See man netstat:
…
…
-p, –program
Show the PID and name of the program to which each socket belongs.
…

Regards,
Rami Rosen

]]>