Link to home
Start Free TrialLog in
Avatar of richtree
richtree

asked on

Why netstat -a show hostname not IP address?

I run netstat -a command in Windows 2003 and 2008 machines and get results in different formats.
The Windows 2008 shows the local address in IP address format, while 2003 shows in host name format. Please see attached for detail.
Q#1. How to toggle the local address between name and IP address formats?

Q#2. What does the following entry mean?

Active Connections7
 Proto  Local Address          Foreign Address        State
 UDP    0.0.0.0:123            *:*
Q#2.1 What does 0.0.0.0 mean here?
Q#2.2 What does *:* mean here?

Q#3. What does the following entry mean?

Active Connections7
 Proto  Local Address          Foreign Address        State

TCP    0.0.0.0:135            EJohnson:0               LISTENING
Q#3.1 What does EJohnson:0 meaning here? (note: EJohnson is the user login name).
Q#3.2 If EJohnson is local machine, why it does not use 127.0.0.1?

Thanks a lot.
ASKER CERTIFIED SOLUTION
Avatar of Amick
Amick
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of richtree
richtree

ASKER

Thank you for the explanation.
Can you comment on Q1?
The Windows 2003 shows result like the following:
UDP  Actor2:123  *:*
The Windows 2008 shows result like:
UDP   192.168.1.61:123  *:*
Both machine use same DNS server.
Which settings cause the difference in the "local address" part?  
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Looks like it's related to version of netstat used in different operating system. The version used in Windows 2003 is able to show names of local address, while the version used in Windows 2008 is not.
Thank you for your help.