Difference between revisions of "DOS IP with local port"
From James Dooley's Wiki
(→Overview) |
(→Script) |
||
| (One intermediate revision by the same user not shown) | |||
| Line 1: | Line 1: | ||
| + | [[Category:One Liners]] | ||
==Overview== | ==Overview== | ||
Gets current netstat connections and shows each IP address with local port connection. | Gets current netstat connections and shows each IP address with local port connection. | ||
| Line 7: | Line 8: | ||
==Script== | ==Script== | ||
| − | + | <source lang='bash'> | |
| − | < | + | netstat -ntu | awk '{print $5 $4}' | cut -d: -f1,3 | sort | uniq -c | grep -v o | sort -n |
| + | </source> | ||
==What to change== | ==What to change== | ||
Latest revision as of 14:24, 25 March 2014
Overview
Gets current netstat connections and shows each IP address with local port connection.
This script will not show correct IP addresses if this server is behind Zeus or a Firewall.
In those cases try View Domlogs for top visitors
Script
netstat -ntu | awk '{print $5 $4}' | cut -d: -f1,3 | sort | uniq -c | grep -v o | sort -n
