netstat命令中的TCP SOCKET 状态

State

The state of the socket. Since there are no states in raw mode and usually no states used in UDP, this column may

be left blank. Normally this can be one of several values:

套接字的状态。由于原始模式和UDP协议没有使用状态，这一列是空白的。正常情况下有以下几个值：

ESTABLISHED

The socket has an established connection.

连接已建立。

SYN_SENT

The socket is actively attempting to establish a connection.

套接字试图建立连接，已发出SYN标志，等待服务器端发回SYN和ACK确认

SYN_RECV

A connection request has been received from the network.

从网络上收到一个连接请求。收到客户端的SYN，并发出SYN和ACK 。

FIN_WAIT1

The socket is closed, and the connection is shutting down.

套接字已关闭，连接即将关闭。 主动关闭，已发出FIN。

FIN_WAIT2

Connection is closed, and the socket is waiting for a shutdown from the remote end.

连接已关闭，套接字等待远端关闭。 主动关闭中发出FIN后收到对方ACK，等待对方FIN。

TIME_WAIT

The socket is waiting after close to handle packets still in the network.

套接字关闭后延时，处理网络中漫游（失而复得）的数据包。

CLOSED The socket is not being used.

套接字没有被使用。

CLOSE_WAIT

The remote end has shut down, waiting for the socket to close.

远端已关闭（收到FIN，发出ACK），等待套接字关闭。

LAST_ACK

The remote end has shut down, and the socket is closed. Waiting for acknowledgement.

远端已关闭，套接字已关闭。等待确认。在被动关闭中，已发出FIN，待对方ACK。

LISTEN

The socket is listening for incoming connections. Such sockets are not included in the output unless you

specify the --listening (-l) or --all (-a) option.

套接字监听进入的连接。这些套接字不在输出当中，可能通过 --listening (-l) or --all (-a) 选项来显示。

CLOSING

Both sockets are shut down but we still don’t have all our data sent.

两边的套接字均关闭，但是我们还有数据没有发送完成。

UNKNOWN

The state of the socket is unknown.

未知状态。