How do I see which processes have open TCP/IP ports in Mac OS X?

Question

score 37 · Accepted Answer · answered Feb 18 '10 at 11:00

One alternative is the use of the lsof utility; specifically, lsof -i 4tcp will list all processes with some sort of TCP IPv4 network sockets open. The manpage of lsof will provide you with detailed information on how to use the utility and how to interpret the output.

score 21 · Answer 2 · answered Feb 16 '15 at 11:57

21

If you are interested in a specific port, you can use this example:

lsof -i 4tcp:8080 -sTCP:LISTEN

If you would only like to get the process id, you can run this:

lsof -i 4tcp:8080 -sTCP:LISTEN -Fp

answered Feb 16 '15 at 11:57

Zsolt Balogh

311

score 5 · Answer 3 · answered Aug 02 '17 at 16:12

I use the command below when I want to see everything that's on a specific port for either TCP or UDP. The -n option disables attempting to resolve the IP addresses into domain names, and the -P disables attempting to figure out the name of a particular port. Also, running as root will show you more processes than running as a normal user.

sudo lsof -iTCP:53 -iUDP:53 -n -P

score 1 · Answer 4 · answered Jun 29 '21 at 18:16

1

use this: netstat -p tcp -p udp

together with this: lsof -n -i4TCP -i4UDP

answered Jun 29 '21 at 18:16

ShifraSec

21

score 1 · Answer 5 · answered Dec 29 '24 at 18:49

1

To my taste https://github.com/mezantrop/sockstat has easy arguments to remember:

sudo sockstat -T -l

answered Dec 29 '24 at 18:49

Pavel Martynov

111
2

score -1 · Answer 6 · answered Feb 18 '10 at 09:54

This should be possible in a terminal window using the Netstat command.

And if you like the GUI way more:

With Mac OS X 10.5, the /Applications/Utilities folder contains a network utility called: Network Utility, see tab Netstat for these stats presented in a gui application, along with Ping, Lookup, Traceroute, Whois, Finger and Port Scan.

How do I see which processes have open TCP/IP ports in Mac OS X?

6 Answers6