0

If I enter the following command in CMD prompt...

netstat -ano

I get a list of active connections as expected. What confuses me is that there are many different formats for my "Local Address"... 

Proto  Local Address          Foreign Address        State           PID
TCP    0.0.0.0:135            0.0.0.0:0              LISTENING       656
TCP    208.80.154.224:13      0.0.0.0:0              LISTENING       4
TCP    127.0.0.1:2559         0.0.0.0:0              LISTENING       8628
TCP    [::]:135               [::]:0                 LISTENING       656
UDP    [::1]:1900             *:*                                    4512

For a particular connection, what determines which format is used for my "Local Address"? i.e. why is 0.0.0.0 displayed for some connections and [::] displayed for other connections, and so on?

Niko Bellic
  • 1,382

1 Answers1

2

netstat shows which ip adresses and ports are being listened on, because a program requested this.

0.0.0.0 means: any IP4 address.

208... is your public ip address that is being listed on.

127.0.0.1 is your local ip address, also known as local host, which would indicate that the program needs to open a port, but only does this so it can connect to itself.

  1. (or whatever your network ip address would be) is for LAN connections only.

:: is an IP v6 address which means: it listens to any ip v6 address, similar as 0.0.0.0

::1 is ipv6's version of local host, similar to 127.0.0.1 meaning that its only used for communication to itself. The PID is the program that initiated the command. You can find this number in the task manager under processes.

LPChip
  • 66,193