how do I find a PID with netstat?

Question

Hello,

I have an ssh server running in daemon mode, I believe, so /etc/init.d/sshd stop wont work. I've tried finding this listening port with netstat (netstat -atx |grep 22) but there are too many processes to list.

How do I find a pid using netstat?

Accepted Answer

2

This should do the trick for you:

netstat -anp | grep sshd | grep -v "::"

You'll get something like this:

unix  3      [ ]         STREAM     CONNECTED     111331653 17322/sshd: greg
unix  2      [ ]         DGRAM                    111331645 17322/sshd: greg

The '17322' is the PID in this case.

link

answered 11 May '10, 16:48

gregularexpr...
197●1●1●7
accept rate: 50%

add pipe: | perl -ne 'm,. (d+)/([^ ]+): ., && print "$1 $2'

(11 May '10, 20:30) memnoch_proxy

True, or the below awk would work also (with sort and unique to weed out duplicates):

netstat -anp | grep sshd | grep -v "::" | awk -F" " {'print $8'} | awk -F"/" {'print $1'} | sort | uniq

(11 May '10, 22:14) gregularexpr...

Answer 2

1	`netstat -lntp \| grep sshd` or `cat /var/run/sshd.pid` link answered 12 May '10, 05:17 maszynista 251●3 accept rate: 33% edited 12 May '10, 05:22

Answer 3

0	Is there a reason you can't use ps? `ps -ef \| grep sshd` would give you the PID easily. link answered 11 May '10, 23:50 codebunny 408●1●6 accept rate: 38%

Answer 4

As root, run:

netstat -tunap

you should receive something that looks like this:

Active Internet connections (servers and established)

Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name

tcp 0 0 0.0.0.0:37 0.0.0.0:* LISTEN 3425/inetd

tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN 3640/X

tcp 0 0 0.0.0.0:113 0.0.0.0:* LISTEN 3425/inetd

tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 7586/sshd

0.0.0.0:* indicates port 22 is listening on all addresses.

To search only for sshd, pipe netstat with grep:

netstat -tunap | grep sshd

Please note that LinuxExchange will be shutting down on December 31st, 2016. Visit this thread for additional information and to provide feedback.

how do I find a PID with netstat?

Follow this question

Related questions