root@kali:~# netstat -luntp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1773/sshd
tcp6 0 0 :::22 :::* LISTEN 1773/sshd
udp 0 0 0.0.0.0:57767 0.0.0.0:* 1300/avahi-daemon:
udp 0 0 0.0.0.0:68 0.0.0.0:* 2144/dhclient
udp 0 0 0.0.0.0:69 0.0.0.0:* 869/inetd
udp 0 0 0.0.0.0:50255 0.0.0.0:* 2144/dhclient
udp 0 0 0.0.0.0:5353 0.0.0.0:* 1300/avahi-daemon:
udp6 0 0 :::16794 :::* 2144/dhclient
udp6 0 0 :::60098 :::* 1300/avahi-daemon:
udp6 0 0 :::5353 :::* 1300/avahi-daemon:
-l, --listening
Show only listening sockets. (These are omitted by default.)
--tcp, -t
--udp, -u
--numeric , -n
Show numerical addresses instead of trying to determine symbolic host, port or user names
-p, --program
Show the PID and name of the program to which each socket belongs
不加 -l 显示当前活跃的网络连接
root@kali:~# netstat -untp
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 192.168.1.107:22 192.168.1.103:58318 ESTABLISHED 2243/0
原文：http://www.cnblogs.com/hangj/p/4993145.html