Microsoft DOS netstat command

Quick links

About netstat
Availability
Syntax
Examples

About netstat

The netstat command is used to display the TCP/IP network protocol statistics and information.

Availability

The netstat.exe command is an external command available in the below Microsoft operating systems.

Windows 95
Windows 98
Windows NT
Windows ME
Windows 2000
Windows XP
Windows Vista
Windows 7

Syntax

NETSTAT [-a] [-e] [-n] [-s] [-p proto] [-r] [interval]

-a Displays all connections and listening ports.
-e Displays Ethernet statistics. This may be combined with the -s option.
-n Displays addresses and port numbers in numerical form.
-p proto Shows connections for the protocol specified by proto; proto may be TCP or UDP. If used with the -s option to display per-protocol statistics, proto may be TCP, UDP, or IP.
-r Displays the routing table.
-s Displays per-protocol statistics. By default, statistics are shown for TCP, UDP, and IP; the -p option may be used to specify a subset of the default.
interval Redisplays selected statistics, pausing interval seconds between each display. Press CTRL+C to stop redisplaying statistics. If omitted, netstat will print the current configuration information once.

Examples

Tip: Keep in mind that if you have network applications open, such as the Internet browser you're using to view this page, additional items will be listed when you run "netstat" and the "netstat -a" command. So you may see items from Computer Hope in your list. If you want a true listing of background Internet connections, close all programs and run the command. Finally, it is also normal to see one or more 0.0.0.0 and 127.0.0.1 addresses.

netstat

Displays all local network information. Below is an example of what may be displayed.

Proto Local Address Foreign Address State
 TCP hope:4409 www.computerhope.com:telnet ESTABLISHED
 TCP hope:3708 multicity.com:80 CLOSE_WAIT
 TCP hope:4750 www.google.com:80 CLOSE_WAIT

netstat -an 

Displays all connections on the computers in numerical format, only displaying the local and foreign IP addresses.

netstat 5

Running netstat with a number after the command will continue to run the command until stopped. In this case netstat would be refreshed ever five seconds. To cancel press CTRL + C.