Re: RE: Bizarre traffic

Ansgar -59cobalt- Wiechers writes:
> On 2006-02-23 Ramez Hanna wrote:
> > you can use
> > netstat -naptu | grep -i established
> 
> or "netstat -nptu" for short ;)

They are not equivalent.  "netstat -nptu" catches connections being
set up or torn down - those in states like SYN_SENT, TIME_WAIT,
LAST_ACK. CLOSE_WAIT, etc.  On a busy server, these dominate the
output.

--
Dick St.Peters, [email protected]