Cross-platform netstat status count script. Displays some or all of the statuses. Using the -a flag with an integer as an argument to it, will loop every integer seconds and display the updated stats.

Use --help or -h to see a list of all statuses available.

Thanks to Discipulus for adding much of the new functionality.

Here's the original version I had posted here.

#!/usr/bin/perl
use strict;
use warnings;

use Getopt::Long;

# netstats.pl

my $VERSION = 0.04;

# originally posted at http://www.perlmonks.org/?node_id=1140950

# thanks to Discipulus from over at PerlMonks who
# added the original usage output, added the remaining statuses
# and added the Getopt::Long functionality

my $platform = $^O;

my @wanted = qw( ESTABLISHED SYN_SENT SYN_RECV FIN_WAIT1
                 FIN_WAIT2 TIME_WAIT CLOSE CLOSE_WAIT
                 LAST_ACK LISTEN CLOSING UNKNOWN
               );

my %statuses = map { $_=> undef } @wanted;

# platform specific status munging...

my $listen;

if ($platform eq 'MSWin32'){
    $listen = 'LISTENING';
    delete $statuses{LISTEN};
    $statuses{$listen} = undef;
}
else {
    $listen = 'LISTEN';
}

my $given_args = scalar @ARGV;

my $auto = 0;

if (grep {$_ =~ /-a|--auto/ } @ARGV){
    $given_args -= 2;
}

unless ( GetOptions (
        "ESTABLISHED|E" => \$statuses{ESTABLISHED},
        "SYN_SENT|SS" => \$statuses{SYN_SENT},
        "SYN_RECV|SR" => \$statuses{SYN_RECV},
        "FIN_WAIT1|F1" => \$statuses{FIN_WAIT1},
        "FIN_WAIT2|F2" => \$statuses{FIN_WAIT2},
        "TIME_WAIT|TW" => \$statuses{TIME_WAIT},
        "CLOSE|C" => \$statuses{CLOSE},
        "CLOSE_WAIT|CW" => \$statuses{CLOSE_WAIT},
        "LAST_ACK|LA" => \$statuses{LAST_ACK},
        "LISTEN|L" => \$statuses{$listen},
        "CLOSING|CG" => \$statuses{CLOSING},
        "UNKNOWN|U" => \$statuses{UNKNOWN},
        "auto|a=i" => \$auto,
        "help" => \&help,
        )) {
            help();
    }

if ($auto){

    my $clear = $platform eq 'MSWin32'
      ? 'cls'
      : 'clear';

    while (1){
        system($clear);
        netstat();
        sleep($auto);
    }
}
else {
    netstat();
}

sub netstat {

    my @stat = split '\n', `netstat -nat`;

    if ($given_args == 0){map {$statuses{$_}=1} keys  %statuses}

    my %data = map {$_ => 0} keys %statuses;

    for (@stat){
        s/^\s+//;

        my $status;

        if ($platform eq 'MSWin32'){
            $status = (split)[3];
        }
        else {
            $status = (split)[5];
        }

        next if ! $status;

        $data{$status}++ if defined $data{$status};
    }

    map { printf "%10s\t$data{$_}\n ",$_}
        sort grep {defined $statuses{$_}}
        keys %statuses;
}
sub help {
    print "\nUSAGE $0:\n";
    print <<EOF;

OPTIONS:

Options specifies which status will be reported in the output.
Name of status can be given in upper or lower case.

If no options are given all statuses will be printed.

You can use the following option abbreviations:

    -e  for --ESTABLISHED
    -ss for --SYN_SENT
    -sr for --SYN_RECV
    -f1 for --FIN_WAIT1
    -f2 for --FIN_WAIT2
    -tw for --Time_WAIT
    -c  for --CLOSE
    -cw for --CLOSE_WAIT
    -la for --LAST_ACK
    -l  for --LISTEN
    -cg for --CLOSING
    -u  for --UNKNOWN

    -a  for --auto
    -h  for --help

The special -a or --auto parameter takes an integer. This will
cause the program to refresh the screen and output every integer secon
+ds.

Here a brief description of status meanings:

   ESTABLISHED
          The socket has an established connection.
   SYN_SENT
          The socket is actively attempting to establish a connection.
   SYN_RECV
          A connection request has been received from the network.
   FIN_WAIT1
          The socket is closed, and the connection is shutting down.
   FIN_WAIT2
          Connection is closed, and the socket is waiting for  a  shut
+down
          from the remote end.
   TIME_WAIT
          The socket is waiting after close to handle packets still in
+ the
          network.
   CLOSE  The socket is not being used.
   CLOSE_WAIT
          The remote end has shut down, waiting for the socket to clos
+e.
   LAST_ACK
          The remote end has shut down, and the socket is closed.  Wai
+ting
          for acknowledgement.
   LISTEN The  socket is listening for incoming connections.  Such soc
+kets
          are  not  included  in  the  output  unless  you   specify  
+ the
          --listening (-l) or --all (-a) option.
   CLOSING
          Both  sockets are shut down but we still don't have all our 
+data
          sent.
   UNKNOWN
          The state of the socket is unknown.

You can get further information by calling "perldoc netstats.pl".

EOF
    exit 1;
}

[download]

-stevieb

In reply to Fetch 'netstat' session status counts by stevieb

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.