I'm new to Linux, just installed Debian 11 Bullseye this week, ran netstat with no internet and got this. There is also 9 more pages. Is this Normal??

[SaltyRedDog]

Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 Excalibur:60902 104.16.249.249:https ESTABLISHED
udp 0 0 Excalibur:bootpc _gateway:bootps ESTABLISHED
Active UNIX domain sockets (w/o servers)
Proto RefCnt Flags Type State I-Node Path
unix 2 [ ] DGRAM 21137 /run/user/1000/systemd/notify
unix 4 [ ] DGRAM 12885 /run/systemd/notify
unix 2 [ ] DGRAM 12902 /run/systemd/journal/syslog
unix 19 [ ] DGRAM 12908 /run/systemd/journal/dev-log
unix 9 [ ] DGRAM 12910 /run/systemd/journal/socket
unix 3 [ ] STREAM CONNECTED 132299
unix 3 [ ] STREAM CONNECTED 37728 /run/user/1000/bus
unix 3 [ ] STREAM CONNECTED 23435 @/tmp/dbus-ICyYOqRomh
unix 3 [ ] STREAM CONNECTED 23420 /run/user/1000/bus
unix 2 [ ] DGRAM 12272
unix 3 [ ] STREAM CONNECTED 274441
unix 3 [ ] STREAM CONNECTED 26766 /run/user/1000/bus
unix 3 [ ] STREAM CONNECTED 24554 /run/user/1000/bus
unix 3 [ ] STREAM CONNECTED 23417 @/tmp/.X11-unix/X1
unix 3 [ ] STREAM CONNECTED 24973 /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 24918 /run/user/1000/bus
unix 3 [ ] STREAM CONNECTED 22137
unix 3 [ ] SEQPACKET CONNECTED 276151
unix 3 [ ] STREAM CONNECTED 132300 @/home/excalibur/.cache/ibus/dbus-QwvX6
unix 3 [ ] STREAM CONNECTED 24892
unix 3 [ ] STREAM CONNECTED 22126 /run/user/1000/bus
unix 3 [ ] STREAM CONNECTED 20984 @/tmp/dbus-JUabsYwk
unix 3 [ ] STREAM CONNECTED 25119
unix 3 [ ] STREAM CONNECTED 24202
unix 3 [ ] STREAM CONNECTED 255658
unix 3 [ ] STREAM CONNECTED 25921
unix 3 [ ] STREAM CONNECTED 23506 @/tmp/.ICE-unix/1498
unix 3 [ ] STREAM CONNECTED 22180
unix 3 [ ] STREAM CONNECTED 128351
unix 3 [ ] STREAM CONNECTED 25014 /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 25002
unix 3 [ ] STREAM CONNECTED 23434
unix 3 [ ] STREAM CONNECTED 26750 /run/dbus/system_bus_socket
unix 2 [ ] DGRAM 24141
unix 3 [ ] STREAM CONNECTED 25915
unix 3 [ ] STREAM CONNECTED 24262 /run/systemd/journal/stdout
unix 3 [ ] STREAM CONNECTED 21247 /run/user/1000/bus
unix 3 [ ] STREAM CONNECTED 125824 @/home/excalibur/.cache/ibus/dbus-QwvX6
unix 3 [ ] STREAM CONNECTED 39167
unix 3 [ ] STREAM CONNECTED 25013
unix 3 [ ] STREAM CONNECTED 24197 @/tmp/dbus-ICyYOqRomh
unix 3 [ ] STREAM CONNECTED 23681

 

[KGIII]

Yeah, that's normal. Stream is a type of domain socket, channeling communication between separate processes.

(Someone correct me if I'm wrong.)

The netstat command isn't really all that useful for a beginner. If there's some specific information you're trying to understand, we can maybe help with that. If you're just poking around for commands, that's a great way to learn new things.

If you're coming from Windows, and that's a fairly normal path, I think the results are different than what Windows users see and that it's because of how the Windows kernel manages processes and inter-process communications.

 

[SaltyRedDog]

Yes, everything you mentioned above is true. I know netstat is old and ss is new. I am coming from Windows and i do have someone poking around in my business. I know who it is, I'm just trying to get dead solid proof. I'm learning nmap,WireShark,and now Linux. I've noticed the system gives me alot of information, some i've never heard of. (Orphoned Enodes) to name just one. Some reason I have to keep re-installing the same firmware everyday. Thanks for your response, I got alot to learn here, I'll try to limit my questions to just 2 or 3 a day.

 

[jpnilson]

I like using "netstat -an" when looking to see what port a machine is listening on or established tcp connections. I use it as well on a linux machine but you get all the extra information. You can approximate it by using "netstat -atu". Another option is to pipe to grep if you are looking for something specific. When I'm troubleshooting I hate filters. Sometimes it is better to parse through a lot of data than to filter off the one piece of information that illuminates the situation. There are a lot of site providing examples of the ways you can fineness data out of netstat.