What does each field of netstat -ano mean

netstat

tcp        0      0 219.155.32.195:8888     221.137.227.51:5943     TIME_WAIT   timewait (58.45/0/0)
tcp        0      0 219.155.32.195:8888     221.137.227.51:5936     TIME_WAIT   timewait (59.36/0/0)
tcp        0   2944 219.155.32.195:8888     221.137.227.51:5937     FIN_WAIT1   on (0.35/0/0)

Especially for the 3rd row,what does 0 , FIN_WAIT1, on and (0.35/0/0) mean respectively?

Best Answer

The 2 & 3rd columns are receive and send queues, respectively. (0 2944 above) That's basically the number of packets bytes waiting to be sent (2944) or received (0).

FIN_WAIT is the standard TCP state of the open port. Specifically, that's an actively closed connection. (more info here) The client has sent its FIN packet, but hasn't received a FIN-ACK back yet.

The last column is a bit more complex. It's timer information related to the specific state the connection is in.