UNIX for Dummies Questions & Answers

Hi,

I have inherited a server at work that has one IP and two virtual IP's. It is live and I want to figure out what each IP is being used for. I thought of NETSTAT but I cannot figure out how to get it to list what each IP is listening for. ANy advice?

Possibly, but most likely not without a subpoena.

In most cases all that can be easily determined is who the person's ISP is and possibly the state and city they reside in.
In some cases with static IP address DSL or business DSL services the ISP provides IP allocation records to the American Registry for Internet Numbers (http://www.arin.net), the non-profit organization responsible for managing Internet numbering resources in North America.
As an example SBC used to include customer information in those allocation records, but due to privacy concerns now uses their own information with a customer reference number. For users who want to afford themselves some additional level of anonymity we suggest you read about internet anonymity, Proxy Servers, and anonymizing services.

Her is a website which you can download a program from and it can locate what is the ip address:

http://whatsmyipaddress.com/staticpa....php/lookup-ip

Thanks

Hannan Saleemi

@mojoman
Anything to do with hardware and comms is machine specific. Please just this once state which Hardware and Operating System with exact version you are working on today.

@xrwizgr read the question again. Your answer has nothing to do with it.

@mojoman: These should provide the info you want:

Code:

netstat -ant
netstat -anu

The first lists all TCP ports in use, the second the UDP ports. The column "Local Address" will likely list 5 (or 6) possible different addresses

@pludi
Neither of those netstat commands are valid in mainstream unix.
We need mojoman to post his Operating System and Hardware. In this case it would also help whether IP bonding is configured.

OK, so for any non-Linux UNIX:

Code:

LANG=C netstat -a -n -f inet | grep -E '^(udp|tcp)' | grep 'LISTEN'

Should be valid on BSD (including MacOS X), Solaris, and HP-UX.

Have you tried a tcpdump to see where the traffic on each interface is going?

Code:

tcpdump -i eth0

"0" being the interface number you want to check.

Output should be like this:

Code:

10:13:22.676190 IP source.ssh > destination.1448: P 10521256:10521404(148) ack 51793 win 2264