Open ports show which services are accepting connections on your Linux host. Checking them helps validate firewall rules, troubleshoot connectivity, and harden exposed services. Below are three reliable ways to inspect ports using netstat, nmap, and lsof.<\/p>\n
Note: On newer distributions, netstat is provided by net-tools. If unavailable, consider ss as a modern alternative.<\/p>\n
Before checking open ports, it helps to know how Linux organizes port numbers. Ports are divided into three basic ranges.<\/p>\n
System ports range from 0 to 1023<\/span><\/strong>. These are reserved for well\u2011known services like SSH (22), HTTP (80), and HTTPS (443). Only privileged users or system-level processes can use these ports.<\/p>\n User ports range from 1024 to 49151<\/strong><\/span>. Regular applications and services commonly use these ports. Web servers, databases, and custom scripts often operate here.<\/p>\n Private ports range from 49152 to 65535<\/strong><\/span>. These are mostly used for temporary connections, random port assignments, and local client communication.<\/p>\n Below are three reliable approaches: netstat for quick, local inspection; nmap for scanning like an external client; lsof for mapping ports to processes.<\/p>\n Retrieving a list of all TCP and UDP ports that are currently listening<\/p>\n Lists listening TCP and UDP sockets with numeric addresses and ports, providing a quick overview of active services.<\/p>\n Shows only sockets in listening state, useful for confirming which services are awaiting inbound connections.<\/p>\n Displays TCP sockets and established connections with numeric output, helping verify ongoing client traffic and port usage.<\/p>\n Shows active UDP sockets in numeric form, helpful for troubleshooting stateless services and lightweight protocols.<\/p>\n Nmap helps you scan a system like an external client, revealing open ports, active services, and potential security exposures.<\/p>\n Performs a basic scan against a host, identifying open ports and responsive services from an external perspective.<\/p>\n Runs a TCP connect scan, enumerating ports accepting connections to validate which services are reachable locally.<\/p>\n Probes UDP listeners, which can respond unpredictably; helpful for discovering DNS, DHCP, and other UDP services.<\/p>\n Targets a single port to confirm openness and service availability, ideal for focused troubleshooting of one endpoint.<\/p>\n Sweeps all TCP and UDP ports, providing comprehensive visibility into every listening service on the scanned host.<\/p>\n Lsof shows which running processes are using specific ports, helping you trace network activity and quickly diagnose service conflicts.<\/p>\n Shows processes with open network files, revealing listening ports and active connections from a process\u2011centric viewpoint.<\/p>\n Identifies which program owns a given port, enabling quick resolution of conflicts and unexpected bindings.<\/p>\n Combines TCP and UDP views to present all active sockets, simplifying audits across both protocol families.<\/p>\nLinux User Ports<\/strong><\/h4>\n
Linux Private Ports<\/strong><\/h4>\n
How to List Open Ports in Linux (Command\u2011Line Tools)<\/strong><\/h3>\n
Using netstat to Check Open Ports<\/strong><\/h4>\n
netstat -tuln<\/code><\/p>\nTo list all the connections that are listening<\/strong><\/h4>\n
netstat -l<\/code><\/p>\nList open ports in Linux, alongside current TCP connections<\/strong><\/h4>\n
netstat -tn<\/code><\/p>\nA list of open UDP ports<\/strong><\/h4>\n
netstat -un<\/code><\/p>\nTip:<\/strong><\/span> Add -p (e.g., netstat -tulnp) to display associated process IDs \r\nand program names where permitted.<\/pre>\nUsing nmap to Scan Open Ports<\/strong><\/h3>\n
Scanning for open ports on a domain<\/strong><\/h4>\n
nmap example.com<\/code><\/p>\nList of ports that are listening for connections via TCP<\/strong><\/h4>\n
nmap -sT localhost<\/code><\/p>\nList of ports that are listening for connections via UDP<\/strong><\/h4>\n
nmap -sU localhost<\/code><\/p>\nLook at a specific port (instead of all ports)<\/strong><\/h4>\n
nmap -p 443 example.com<\/code><\/p>\nScan every open port on both TCP and UDP<\/strong><\/h4>\n
nmap -sT -sU -p- localhost<\/code><\/p>\nNote:<\/strong><\/span> UDP scans can be slow; consider narrowing targets or increasing \r\ntiming cautiously to manage duration.<\/pre>\nUsing lsof to Find Open Network Connections<\/strong><\/h3>\n
Listing all active network connections<\/strong><\/h4>\n
lsof -i<\/code><\/p>\nFind a process that is using a specified port<\/strong><\/h4>\n
lsof -i :8080<\/code><\/p>\nGet a list of all the UDP and TCP connections<\/strong><\/h4>\n
lsof -iTCP -iUDP<\/code><\/p>\nPro tip:<\/strong><\/span> Add -P -n to lsof to skip service and DNS lookups for \r\nfaster, numeric output.<\/pre>\nFAQ’s<\/strong><\/h4>\n
\n
\n<\/strong>You can check open ports with the lsof command by running lsof -i in the terminal. It lists active network connections, showing which services or applications are currently using specific ports on the system.<\/li>\n
\n<\/strong>To check open ports using netstat, run netstat -tuln in the terminal. This command displays listening TCP and UDP ports along with their addresses, helping you identify which services are active on your server.<\/li>\n
\n<\/strong>T4 in Nmap is a timing template that speeds up the scanning process. It sends packets faster while still maintaining accuracy, making it useful for scanning reliable networks where speed matters more than stealth.<\/li>\n
\n<\/strong>You can scan open ports in Linux with Nmap by running nmap localhost or nmap [IP address]. The tool checks common ports and reports which ones are open, closed, or filtered on the target system.<\/li>\n
\n<\/strong>To check if port 443 is open, use commands like nmap -p 443 [IP address] or telnet [domain] 443. If the connection succeeds or shows an open state, the HTTPS port is accessible.<\/li>\n<\/ol>\n