blocks|key|1490153|text|在macOS+Big+Sur和更高版本上，请使用以下命令：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1490154|sudo+lsof+-i+-P+%7C+grep+LISTEN|code-block|syntax|javascript|1490155|或者仅仅看到IPv4：|1490156|sudo+lsof+-nP+-i4TCP:$PORT+%7C+grep+LISTEN|1490157|在旧版本中，请使用以下形式之一：|1490158|sudo+lsof+-nP+-iTCP:$PORT+%7C+grep+LISTEN
sudo+lsof+-nP+-i:$PORT+%7C+grep+LISTEN|1490159|使用端口号或以逗号分隔的端口号列表替换$PORT。|1490160|如果您需要有关#1024以下端口的信息，请在前面加上sudo+(后面跟一个空格)。|1490161|-n标志用于显示IP地址而不是主机名。这使得命令的执行速度更快，因为获取主机名的DNS查找可能很慢(对于许多主机来说可能是几秒钟或一分钟)。|1490162|-P标志用于显示原始端口号，而不是像http、ftp这样的解析名称，或者像dpserve、socalia这样更深奥的服务名称。|1490163|有关更多选项，请参阅注释。|1490164|为了完整性，因为经常一起使用：|1490165|要终止PID，请执行以下操作：|1490166|sudo+kill+-9+<PID>
#+kill+-9+60401|1490167|entityMap^0|7|7|0|0|0|0|0|0|J|5|0|Q|4|0|0|2|0|0|2|I|4|N|3|11|7|19|7|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|1A|8|@$9|1B|A|1C|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|1D|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|1E|8|@]|D|@]|E|$]]|$1|M|3|N|5|H|7|1F|8|@]|D|@]|E|$I|J]]|$1|O|3|P|5|6|7|1G|8|@]|D|@]|E|$]]|$1|Q|3|R|5|H|7|1H|8|@]|D|@]|E|$I|J]]|$1|S|3|T|5|6|7|1I|8|@$9|1J|A|1K|B|C]]|D|@]|E|$]]|$1|U|3|V|5|6|7|1L|8|@$9|1M|A|1N|B|C]]|D|@]|E|$]]|$1|W|3|X|5|6|7|1O|8|@$9|1P|A|1Q|B|C]]|D|@]|E|$]]|$1|Y|3|Z|5|6|7|1R|8|@$9|1S|A|1T|B|C]|$9|1U|A|1V|B|C]|$9|1W|A|1X|B|C]|$9|1Y|A|1Z|B|C]|$9|20|A|21|B|C]]|D|@]|E|$]]|$1|10|3|11|5|6|7|22|8|@]|D|@]|E|$]]|$1|12|3|13|5|6|7|23|8|@]|D|@]|E|$]]|$1|14|3|15|5|6|7|24|8|@]|D|@]|E|$]]|$1|16|3|17|5|H|7|25|8|@]|D|@]|E|$I|J]]|$1|18|3|-4|5|6|7|26|8|@]|D|@]|E|$]]]|19|$]]

On macOS <code>Big Sur</code> and later, use this command:
<pre><code>sudo lsof -i -P | grep LISTEN
</code></pre>
or to just see just IPv4:
<pre><code>sudo lsof -nP -i4TCP:$PORT | grep LISTEN
</code></pre>
On older versions, use one of the following forms:
<pre><code>sudo lsof -nP -iTCP:$PORT | grep LISTEN
sudo lsof -nP -i:$PORT | grep LISTEN
</code></pre>
Substitute <code>$PORT</code> with the port number or a comma-separated list of port numbers.
Prepend <code>sudo</code> (followed by a space) if you need information on ports below #1024.
The <code>-n</code> flag is for displaying IP addresses instead of host names. This makes the command execute much faster, because DNS lookups to get the host names can be slow (several seconds or a minute for many hosts).
The <code>-P</code> flag is for displaying raw port numbers instead of resolved names like <code>http</code>, <code>ftp</code> or more esoteric service names like <code>dpserve</code>, <code>socalia</code>.
See the comments for more options.
For completeness, because frequently used together:
To kill the PID:
<pre><code>sudo kill -9 &lt;PID&gt;
# kill -9 60401
</code></pre>

blocks|key|2345194|text|在Snow+Leopard+(OS+X+10.6.8)上，运行'man+lsof‘会产生以下结果：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2345195|lsof+-i+4+-a|code-block|syntax|javascript|2345196|(实际的手动输入是'lsof+-i+4+-a+-p+1234')|2345197|之前的答案在雪豹上不起作用，但我一直在尝试使用'netstat+-nlp‘，直到我在答案中看到了'lsof’的使用。|2345198|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|6|7|P|8|@]|9|@]|A|$]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

On Snow Leopard (OS X 10.6.8), running 'man lsof' yields:

<pre><code>lsof -i 4 -a
</code></pre>

(actual manual entry is 'lsof -i 4 -a -p 1234')

The previous answers didn't work on Snow Leopard, but I was trying to use 'netstat -nlp' until I saw the use of 'lsof' in the answer by pts.

blocks|key|1490217|text|您还可以使用：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1490218|sudo+lsof+-i+-n+-P+%7C+grep+TCP|code-block|syntax|javascript|1490219|这在小牛中是有效的。|1490220|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

You can also use: 

<pre><code>sudo lsof -i -n -P | grep TCP
</code></pre>

This works in Mavericks.

blocks|key|3941236|text|lsof+-n+-i+%7C+awk+'{+print+$1,$9;+}'+%7C+sort+-u|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|3941237|这显示了谁在做什么。删除-n以查看主机名(速度稍慢)。|unstyled|3941238|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$B|C]]|$1|D|3|E|5|F|7|J|8|@]|9|@]|A|$]]|$1|G|3|-4|5|F|7|K|8|@]|9|@]|A|$]]]|H|$]]

<pre><code>lsof -n -i | awk '{ print $1,$9; }' | sort -u
</code></pre>

This displays who's doing what. Remove -n to see hostnames (a bit slower).

blocks|key|1488203|text|这在Mavericks+(OSX+10.9.2)中有效。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1488204|sudo+lsof+-nP+-iTCP:$PORT+-sTCP:LISTEN|code-block|syntax|javascript|1488205|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

This works in Mavericks (OSX 10.9.2).

<pre><code>sudo lsof -nP -iTCP:$PORT -sTCP:LISTEN
</code></pre>

blocks|key|2345335|text|直到macOS+12蒙特利，macOS的每个版本都支持以下功能：|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|2345336|sudo+lsof+-iTCP+-sTCP:LISTEN+-n+-P|CODE|2345337|就我个人而言，我最终在~/.bash_profile中使用了这个简单的函数|2345338|listening()+{
++++if+[+$#+-eq+0+];+then
++++++++sudo+lsof+-iTCP+-sTCP:LISTEN+-n+-P
++++elif+[+$#+-eq+1+];+then
++++++++sudo+lsof+-iTCP+-sTCP:LISTEN+-n+-P+%7C+grep+-i+--color+$1
++++else
++++++++echo+"Usage:+listening+[pattern]"
++++fi
}|code-block|syntax|javascript|2345339|然后，listening命令会给出一个监听某个端口的进程列表，并且listening+smth会将此列表显示为某种模式。|2345340|有了这个，很容易询问特定的进程，例如listening+dropbox，或端口，例如listening+22。|2345341|lsof命令有一些专门的选项来询问端口、协议、进程等，但我个人发现上面的函数要方便得多，因为我不需要记住所有这些低级选项。lsof是一个非常强大的工具，但不幸的是使用起来并不方便。|2345342|entityMap^0|2|B|0|0|Y|0|B|F|0|0|3|9|X|E|0|I|H|16|C|0|0|4|1P|4|0^^$0|@$1|2|3|4|5|6|7|X|8|@$9|Y|A|Z|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|10|8|@$9|11|A|12|B|H]]|D|@]|E|$]]|$1|I|3|J|5|6|7|13|8|@$9|14|A|15|B|H]]|D|@]|E|$]]|$1|K|3|L|5|M|7|16|8|@]|D|@]|E|$N|O]]|$1|P|3|Q|5|6|7|17|8|@$9|18|A|19|B|H]|$9|1A|A|1B|B|H]]|D|@]|E|$]]|$1|R|3|S|5|6|7|1C|8|@$9|1D|A|1E|B|H]|$9|1F|A|1G|B|H]]|D|@]|E|$]]|$1|T|3|U|5|6|7|1H|8|@$9|1I|A|1J|B|H]|$9|1K|A|1L|B|H]]|D|@]|E|$]]|$1|V|3|-4|5|6|7|1M|8|@]|D|@]|E|$]]]|W|$]]

Up to macOS 12 Monterey, every version of macOS supports this:
<code>sudo lsof -iTCP -sTCP:LISTEN -n -P</code>
Personally I've end up with this simple function in my <code>~/.bash_profile</code>:
<pre><code>listening() {
 if [ $# -eq 0 ]; then
 sudo lsof -iTCP -sTCP:LISTEN -n -P
 elif [ $# -eq 1 ]; then
 sudo lsof -iTCP -sTCP:LISTEN -n -P | grep -i --color $1
 else
 echo &quot;Usage: listening [pattern]&quot;
 fi
}
</code></pre>
Then <code>listening</code> command gives you a listing of processes listening on some port and <code>listening smth</code> greps this for some pattern.
Having this, it's quite easy to ask about particular process, e.g. <code>listening dropbox</code>, or port, e.g. <code>listening 22</code>.
<code>lsof</code> command has some specialized options for asking about port, protocol, process etc. but personally I've found above function much more handy, since I don't need to remember all these low-level options. <code>lsof</code> is quite powerful tool, but unfortunately not so comfy to use.

blocks|key|277027|text|在OS上，您可以使用netstat的-v选项来提供相关的pid。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|277028|类型：|277029|netstat+-anv+%7C+grep+[.]PORT|code-block|syntax|javascript|277030|输出将如下所示：|277031|tcp46++++++0++++++0++*.8080+++++++++++++++++*.*++++++++++++++++++++LISTEN++++++131072+131072+++3105++++++0|277032|PID是最后一列之前的数字，在本例中为3105|277033|entityMap^0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|R|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|S|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|T|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|U|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|V|8|@]|9|@]|A|$]]|$1|O|3|-4|5|6|7|W|8|@]|9|@]|A|$]]]|P|$]]

on OS X you can use the -v option for netstat to give the associated pid.

type:

<pre><code>netstat -anv | grep [.]PORT
</code></pre>

the output will look like this:

<pre><code>tcp46 0 0 *.8080 *.* LISTEN 131072 131072 3105 0
</code></pre>

The PID is the number before the last column, 3105 for this case

blocks|key|1488253|text|更新2016年1月|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|1488254|令人惊讶的是，没有人提出：|1488255|lsof+-i+:PORT_NUMBER|code-block|syntax|javascript|1488256|以获取所需的基本信息。例如，检查端口1337：|1488257|lsof+-i+:1337|1488258|其他变体，视情况而定：|1488259|sudo+lsof+-i+:1337
lsof+-i+tcp:1337|1488260|您可以很容易地在此基础上构建以提取PID本身。例如：|1488261|lsof+-t+-i+:1337|1488262|它也等同于(在结果中)这个命令：|1488263|lsof+-i+:1337+%7C+awk+'{+print+$2;+}'+%7C+head+-n+2+%7C+grep+-v+PID|1488264|快速说明：|1488265|​|1488266|📷|atomic|1488267|1488268|为了完整性，因为经常一起使用：|1488269|要终止PID，请执行以下操作：|1488270|kill+-9+<PID>
#+kill+-9+60401|1488271|或者作为一个单行：|1488272|kill+-9+$(lsof+-t+-i+:1337)|1488273|entityMap|0|IMAGE|mutability|IMMUTABLE|imageUrl|https://i.stack.imgur.com/VCAKo.gif|imageAlt^0|0|9|0|0|0|0|0|0|0|0|0|0|0|0|0|0|1|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|1T|8|@$9|1U|A|1V|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|1W|8|@]|D|@]|E|$]]|$1|H|3|I|5|J|7|1X|8|@]|D|@]|E|$K|L]]|$1|M|3|N|5|6|7|1Y|8|@]|D|@]|E|$]]|$1|O|3|P|5|J|7|1Z|8|@]|D|@]|E|$K|L]]|$1|Q|3|R|5|6|7|20|8|@]|D|@]|E|$]]|$1|S|3|T|5|J|7|21|8|@]|D|@]|E|$K|L]]|$1|U|3|V|5|6|7|22|8|@]|D|@]|E|$]]|$1|W|3|X|5|J|7|23|8|@]|D|@]|E|$K|L]]|$1|Y|3|Z|5|6|7|24|8|@]|D|@]|E|$]]|$1|10|3|11|5|J|7|25|8|@]|D|@]|E|$K|L]]|$1|12|3|13|5|6|7|26|8|@]|D|@]|E|$]]|$1|14|3|15|5|6|7|27|8|@]|D|@]|E|$]]|$1|16|3|17|5|18|7|28|8|@]|D|@$9|29|A|2A|1|2B]]|E|$]]|$1|19|3|15|5|6|7|2C|8|@]|D|@]|E|$]]|$1|1A|3|1B|5|6|7|2D|8|@]|D|@]|E|$]]|$1|1C|3|1D|5|6|7|2E|8|@]|D|@]|E|$]]|$1|1E|3|1F|5|J|7|2F|8|@]|D|@]|E|$K|L]]|$1|1G|3|1H|5|6|7|2G|8|@]|D|@]|E|$]]|$1|1I|3|1J|5|J|7|2H|8|@]|D|@]|E|$K|L]]|$1|1K|3|-4|5|6|7|2I|8|@]|D|@]|E|$]]]|1L|$1M|$5|1N|1O|1P|E|$1Q|1R|1S|-4]]]]

Update January 2016

Really surprised no-one has suggested:

<pre><code>lsof -i :PORT_NUMBER
</code></pre>

to get the basic information required. For instance, checking on port 1337:

<pre><code>lsof -i :1337
</code></pre>

Other variations, depending on circumstances:

<pre><code>sudo lsof -i :1337
lsof -i tcp:1337
</code></pre>

You can easily build on this to extract the PID itself. For example:

<pre><code>lsof -t -i :1337
</code></pre>

which is also equivalent (in result) to this command:

<pre><code>lsof -i :1337 | awk '{ print $2; }' | head -n 2 | grep -v PID
</code></pre>

Quick illustration:

<a href="https://i.stack.imgur.com/VCAKo.gif"><img src="https://i.stack.imgur.com/VCAKo.gif" alt="enter image description here"></a>

For completeness, because frequently used together:

To kill the PID:

<pre><code>kill -9 &lt;PID&gt;
# kill -9 60401
</code></pre>

or as a one liner:

<pre><code>kill -9 $(lsof -t -i :1337)
</code></pre>

blocks|key|277089|text|我是一个Linux的家伙。在Linux中，使用netstat+-ltpn或这些字母的任意组合都非常容易。但在most中，netstat+-an+%7C+grep+LISTEN是最人性化的。另一些则非常难看，并且在排除故障时很难记住。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|277090|entityMap^0|N|D|1O|P|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]|$9|K|A|L|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|M|8|@]|D|@]|E|$]]]|G|$]]

I am a Linux guy. In Linux it is extremely easy with <code>netstat -ltpn</code> or any combination of those letters. But in Mac OS X <code>netstat -an | grep LISTEN</code> is the most humane. Others are very ugly and very difficult to remember when troubleshooting.

blocks|key|1490338|text|这就是我所需要的。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1490339|ps+-eaf+%7C+grep+`lsof+-t+-i:$PORT`|code-block|syntax|javascript|1490340|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

This did what I needed.

<pre><code>ps -eaf | grep `lsof -t -i:$PORT`
</code></pre>

blocks|key|277170|text|我制作了一个小脚本，不仅可以看到谁在哪里收听，还可以显示已建立的连接以及与哪些国家的连接。在OSX+Siera上工作|type|unstyled|depth|inlineStyleRanges|entityRanges|data|277171|#!/bin/bash
printf+"\nchecking+established+connections\n\n"
for+i+in+$(sudo+lsof+-i+-n+-P+%7C+grep+TCP+%7C+grep+ESTABLISHED+%7C+grep+-v+IPv6+%7C+
grep+-v+127.0.0.1+%7C+cut+-d+">"+-f2+%7C+cut+-d+"+"+-f1+%7C+cut+-d+":"+-f1);+do
++++printf+"$i+:+"+&+curl+freegeoip.net/xml/$i+-s+-S+%7C+grep+CountryName+%7C+
cut+-d+">"+-f2+%7C+cut+-d"<"+-f1
done

printf+"\ndisplaying+listening+ports\n\n"

sudo+lsof+-i+-n+-P+%7C+grep+TCP+%7C+grep+LISTEN+%7C+cut+-d+"+"+-f+1,32-35

#EOF|code-block|syntax|javascript|277172|277173|Sample+output
checking+established+connections

107.178.244.155+:+United+States
17.188.136.186+:+United+States
17.252.76.19+:+United+States
17.252.76.19+:+United+States
17.188.136.186+:+United+States
5.45.62.118+:+Netherlands
40.101.42.66+:+Ireland
151.101.1.69+:+United+States
173.194.69.188+:+United+States
104.25.170.11+:+United+States
5.45.62.49+:+Netherlands
198.252.206.25+:+United+States
151.101.1.69+:+United+States
34.198.53.220+:+United+States
198.252.206.25+:+United+States
151.101.129.69+:+United+States
91.225.248.133+:+Ireland
216.58.212.234+:+United+States

displaying+listening+ports

mysqld+TCP+*:3306+(LISTEN)
com.avast+TCP+127.0.0.1:12080+(LISTEN)
com.avast+TCP+[::1]:12080+(LISTEN)
com.avast+TCP+127.0.0.1:12110+(LISTEN)
com.avast+TCP+[::1]:12110+(LISTEN)
com.avast+TCP+127.0.0.1:12143+(LISTEN)
com.avast+TCP+[::1]:12143+(LISTEN)
com.avast+TCP+127.0.0.1:12995+(LISTEN)
com.avast+[::1]:12995+(LISTEN)
com.avast+127.0.0.1:12993+(LISTEN)
com.avast+[::1]:12993+(LISTEN)
Google+TCP+127.0.0.1:34013+(LISTEN)|277174|277175|这可能有助于检查您是否连接到朝鲜！;-)|277176|entityMap^0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|H|3|I|5|D|7|R|8|@]|9|@]|A|$E|F]]|$1|J|3|-4|5|6|7|S|8|@]|9|@]|A|$]]|$1|K|3|L|5|6|7|T|8|@]|9|@]|A|$]]|$1|M|3|-4|5|6|7|U|8|@]|9|@]|A|$]]]|N|$]]

I made a small script to see not only who is listening where but also to display established connections and to which countries. Works on OSX Siera

<pre><code>#!/bin/bash
printf "\nchecking established connections\n\n"
for i in $(sudo lsof -i -n -P | grep TCP | grep ESTABLISHED | grep -v IPv6 | 
grep -v 127.0.0.1 | cut -d "&gt;" -f2 | cut -d " " -f1 | cut -d ":" -f1); do
 printf "$i : " &amp; curl freegeoip.net/xml/$i -s -S | grep CountryName | 
cut -d "&gt;" -f2 | cut -d"&lt;" -f1
done

printf "\ndisplaying listening ports\n\n"

sudo lsof -i -n -P | grep TCP | grep LISTEN | cut -d " " -f 1,32-35

#EOF
</code></pre>

<hr>

<pre><code>Sample output
checking established connections

107.178.244.155 : United States
17.188.136.186 : United States
17.252.76.19 : United States
17.252.76.19 : United States
17.188.136.186 : United States
5.45.62.118 : Netherlands
40.101.42.66 : Ireland
151.101.1.69 : United States
173.194.69.188 : United States
104.25.170.11 : United States
5.45.62.49 : Netherlands
198.252.206.25 : United States
151.101.1.69 : United States
34.198.53.220 : United States
198.252.206.25 : United States
151.101.129.69 : United States
91.225.248.133 : Ireland
216.58.212.234 : United States

displaying listening ports

mysqld TCP *:3306 (LISTEN)
com.avast TCP 127.0.0.1:12080 (LISTEN)
com.avast TCP [::1]:12080 (LISTEN)
com.avast TCP 127.0.0.1:12110 (LISTEN)
com.avast TCP [::1]:12110 (LISTEN)
com.avast TCP 127.0.0.1:12143 (LISTEN)
com.avast TCP [::1]:12143 (LISTEN)
com.avast TCP 127.0.0.1:12995 (LISTEN)
com.avast [::1]:12995 (LISTEN)
com.avast 127.0.0.1:12993 (LISTEN)
com.avast [::1]:12993 (LISTEN)
Google TCP 127.0.0.1:34013 (LISTEN)
</code></pre>

<hr>

This may be useful to check if you are connected to north-korea! ;-)

blocks|key|3941564|text|在macOS上，这里有一种简单的方法来获取正在使用netstat监听特定端口的进程ID。此示例查找在端口80上提供内容的进程：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3941565|查找在端口80上运行的服务器|3941566|netstat+-anv+%7C+egrep+-w+[.]80.*LISTEN|code-block|syntax|javascript|3941567|样本输出|3941568|tcp4++0+0++*.80+++++++*.*++++LISTEN++++++131072+131072++++715++++++0|3941569|倒数第二列是PID。在上面，它是715。|offset|length|style|BOLD|3941570|选项|3941571|-a+-显示所有端口，包括服务器使用的端口|CODE|3941572|-n+-显示数字，不查找名称。这使得命令速度更快。|3941573|-v+-详细输出，以获取进程ID|3941574|-w+-搜索单词。否则，该命令将返回端口8000和8001的信息，而不仅仅是"80“|3941575|LISTEN+-仅提供处于侦听模式的端口的信息|3941576|entityMap^0|0|0|0|0|0|G|3|0|0|0|2|0|0|2|0|0|2|0|0|2|0|0|6|0^^$0|@$1|2|3|4|5|6|7|17|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|18|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|19|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|1A|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|1B|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|1C|8|@$O|1D|P|1E|Q|R]]|9|@]|A|$]]|$1|S|3|T|5|6|7|1F|8|@]|9|@]|A|$]]|$1|U|3|V|5|6|7|1G|8|@$O|1H|P|1I|Q|W]]|9|@]|A|$]]|$1|X|3|Y|5|6|7|1J|8|@$O|1K|P|1L|Q|W]]|9|@]|A|$]]|$1|Z|3|10|5|6|7|1M|8|@$O|1N|P|1O|Q|W]]|9|@]|A|$]]|$1|11|3|12|5|6|7|1P|8|@$O|1Q|P|1R|Q|W]]|9|@]|A|$]]|$1|13|3|14|5|6|7|1S|8|@$O|1T|P|1U|Q|W]]|9|@]|A|$]]|$1|15|3|-4|5|6|7|1V|8|@]|9|@]|A|$]]]|16|$]]

On macOS, here's an easy way to get the process ID that's listening on a specific port with netstat. This example looks for a process serving content on port 80:

<h1>find server running on port 80</h1>

<pre><code>netstat -anv | egrep -w [.]80.*LISTEN
</code></pre>

<h2>sample output</h2>

<pre><code>tcp4 0 0 *.80 *.* LISTEN 131072 131072 715 0
</code></pre>

The 2nd from the last column is the PID. In above, it's 715.

<h2>options</h2>

<code>-a</code> - show all ports, including those used by servers

<code>-n</code> - show numbers, don't look up names. This makes the command a lot faster

<code>-v</code> - verbose output, to get the process IDs

<code>-w</code> - search words. Otherwise the command will return info for ports 8000 and 8001, not just "80"

<code>LISTEN</code> - give info only for ports in LISTEN mode, i.e. servers

blocks|key|2345642|text|在最新的macOS版本中，您可以使用以下命令：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2345643|lsof+-nP+-i4TCP:$PORT+%7C+grep+LISTEN|code-block|syntax|javascript|2345644|2345645|如果您发现很难记住，那么也许您应该创建一个bash函数，并使用一个更友好的名称导出它，如下所示|offset|length|style|CODE|2345646|vi+~/.bash_profile|2345647|然后将以下行添加到该文件并保存它。|2345648|function+listening_on()+{
++++lsof+-nP+-i4TCP:"$1"+%7C+grep+LISTEN
}|2345649|现在，您可以在终端中输入listening_on+80并查看哪个进程正在侦听端口80。|2345650|entityMap^0|0|0|0|L|4|0|0|0|0|C|F|14|2|0^^$0|@$1|2|3|4|5|6|7|X|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|Y|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|Z|8|@]|9|@]|A|$]]|$1|H|3|I|5|6|7|10|8|@$J|11|K|12|L|M]]|9|@]|A|$]]|$1|N|3|O|5|D|7|13|8|@]|9|@]|A|$E|F]]|$1|P|3|Q|5|6|7|14|8|@]|9|@]|A|$]]|$1|R|3|S|5|D|7|15|8|@]|9|@]|A|$E|F]]|$1|T|3|U|5|6|7|16|8|@$J|17|K|18|L|M]|$J|19|K|1A|L|M]]|9|@]|A|$]]|$1|V|3|-4|5|6|7|1B|8|@]|9|@]|A|$]]]|W|$]]

On the latest macOS version you can use this command:

<pre><code>lsof -nP -i4TCP:$PORT | grep LISTEN
</code></pre>

<hr>

If you find it hard to remember then maybe you should create a <code>bash</code> function and export it with a friendlier name like so

<pre><code>vi ~/.bash_profile
</code></pre>

and then add the following lines to that file and save it.

<pre><code>function listening_on() {
 lsof -nP -i4TCP:"$1" | grep LISTEN
}
</code></pre>

Now you can type <code>listening_on 80</code> in your Terminal and see which process is listening on port <code>80</code>.

blocks|key|2345690|text|这是在macOS高山上的一个好方法：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2345691|netstat+-an+%7Cgrep+-i+listen|code-block|syntax|javascript|2345692|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

This is a good way on macOS High Sierra: 

<pre><code>netstat -an |grep -i listen
</code></pre>

blocks|key|2345728|text|对于侦听端口、已建立端口和关闭端口|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2345729|sudo+lsof+-n+-i+-P+%7C+grep+TCP|code-block|syntax|javascript|2345730|仅用于侦听端口|2345731|sudo+lsof+-n+-i+-P+%7C+grep+LISTEN|2345732|对于特定的侦听端口，例如:端口80|2345733|sudo+lsof+-n+-i+-P+%7C+grep+':80+(LISTEN)'|2345734|或者，如果你只是想要一个简洁的摘要，没有描述任何服务/应用程序，那么可以使用NETSTAT。好的一面是，不需要|offset|length|style|BOLD|2345735|netstat+-a+-n+%7C+grep+'LISTEN+'|2345736|解释所用项目的：|2345737|-n禁止显示主机名|2345738|适用于IPv4和IPv6协议的-i|2345739|-P省略端口名称|2345740|适用于所有套接字的-a+over+netstat|2345741|netstat上的-n不解析名称，将网络地址显示为数字|2345742|2345743|在High+Sierra+10.13.3和Mojave+10.14.3上测试|blockquote|2345744|2345745|2345746|2345747|最后一个语法netstat在linux+too|unordered-list-item|2345748|上运行|2345749|entityMap^0|0|0|0|0|0|0|1G|3|0|0|7|1|0|0|2|0|F|2|0|0|2|0|9|2|0|9|2|0|0|1|B|L|6|0|0|0|0|6|7|0|0^^$0|@$1|2|3|4|5|6|7|1M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|1N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|1O|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|1P|8|@]|9|@]|A|$E|F]]|$1|K|3|L|5|6|7|1Q|8|@]|9|@]|A|$]]|$1|M|3|N|5|D|7|1R|8|@]|9|@]|A|$E|F]]|$1|O|3|P|5|6|7|1S|8|@$Q|1T|R|1U|S|T]]|9|@]|A|$]]|$1|U|3|V|5|D|7|1V|8|@]|9|@]|A|$E|F]]|$1|W|3|X|5|6|7|1W|8|@$Q|1X|R|1Y|S|T]]|9|@]|A|$]]|$1|Y|3|Z|5|6|7|1Z|8|@$Q|20|R|21|S|T]]|9|@]|A|$]]|$1|10|3|11|5|6|7|22|8|@$Q|23|R|24|S|T]]|9|@]|A|$]]|$1|12|3|13|5|6|7|25|8|@$Q|26|R|27|S|T]]|9|@]|A|$]]|$1|14|3|15|5|6|7|28|8|@$Q|29|R|2A|S|T]]|9|@]|A|$]]|$1|16|3|17|5|6|7|2B|8|@$Q|2C|R|2D|S|T]]|9|@]|A|$]]|$1|18|3|-4|5|6|7|2E|8|@]|9|@]|A|$]]|$1|19|3|1A|5|1B|7|2F|8|@$Q|2G|R|2H|S|T]|$Q|2I|R|2J|S|T]]|9|@]|A|$]]|$1|1C|3|-4|5|6|7|2K|8|@]|9|@]|A|$]]|$1|1D|3|-4|5|6|7|2L|8|@]|9|@]|A|$]]|$1|1E|3|-4|5|6|7|2M|8|@]|9|@]|A|$]]|$1|1F|3|1G|5|1H|7|2N|8|@$Q|2O|R|2P|S|T]]|9|@]|A|$]]|$1|1I|3|1J|5|6|7|2Q|8|@]|9|@]|A|$]]|$1|1K|3|-4|5|6|7|2R|8|@]|9|@]|A|$]]]|1L|$]]

For the LISTEN, ESTABLISHED and CLOSED ports
<pre><code>sudo lsof -n -i -P | grep TCP
</code></pre>
For the LISTEN ports only
<pre><code>sudo lsof -n -i -P | grep LISTEN
</code></pre>
For a specific LISTEN port, ex: port 80
<pre><code>sudo lsof -n -i -P | grep ':80 (LISTEN)'
</code></pre>
Or if you just want a compact summary [no service/apps described], go by NETSTAT. The good side here is, no sudo needed
<pre><code>netstat -a -n | grep 'LISTEN '
</code></pre>
Explaining the items used:
-n suppress the host name
-i for IPv4 and IPv6 protocols
-P omit port names
-a [over netstat] for all sockets
-n [over netstat] don't resolve names, show network addresses as numbers
<blockquote>
Tested on High Sierra 10.13.3 and Mojave 10.14.3
<ul>
<li>the last syntax netstat works on linux too</li>
</ul>
</blockquote>

blocks|key|2345767|text|灵感来自用户Brent+Self：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2345768|lsof+-i+4+-a+%7C+grep+LISTEN|offset|length|style|CODE|2345769|entityMap^0|0|0|Q|0^^$0|@$1|2|3|4|5|6|7|J|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|K|8|@$D|L|E|M|F|G]]|9|@]|A|$]]|$1|H|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|I|$]]

Inspired by user Brent Self:

<code>lsof -i 4 -a | grep LISTEN</code>

blocks|key|1490494|text|对于macOS，我同时使用两个命令来显示有关监听机器上的进程和连接到远程服务器的进程的信息。换句话说，要检查主机上的侦听端口和当前(TCP)连接，可以同时使用以下两个命令|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1490495|1.+netstat+-p+tcp+-p+udp+

2.+lsof+-n+-i4TCP+-i4UDP+|code-block|syntax|javascript|1490496|我想我会添加我的意见，希望它能最终帮助某人。|1490497|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

For macOS I use two commands together to show information about the processes listening on the machine and process connecting to remote servers. In other words, to check the listening ports and the current (TCP) connections on a host you could use the two following commands together

<pre><code>1. netstat -p tcp -p udp 

2. lsof -n -i4TCP -i4UDP 
</code></pre>

Thought I would add my input, hopefully it can end up helping someone.

blocks|key|277423|text|检出此项目/工具：procs|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|277424|在MacOs上安装：brew+install+procs|style|CODE|277425|这使您可以控制使用procs显示的内容。|277426|要查看TCP/UDP端口，请在安装该工具后将其添加到~/.procs.toml。|277427|[[columns]]
kind+=+"TcpPort"
style+=+"BrightYellow%7CYellow"
numeric_search+=+true
nonnumeric_search+=+false
align+=+"Left"

[[columns]]
kind+=+"UdpPort"
style+=+"BrightGreen%7CGreen"
numeric_search+=+false
nonnumeric_search+=+true
align+=+"Left"|code-block|syntax|javascript|277428|以下是示例输出：|277429|​|277430|📷|atomic|277431|277432|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/dalance/procs|1|IMAGE|IMMUTABLE|imageUrl|https://i.stack.imgur.com/fmgkb.png|imageAlt^0|9|5|0|0|A|I|0|9|5|0|Q|D|0|0|0|0|0|1|1|0|0^^$0|@$1|2|3|4|5|6|7|1C|8|@]|9|@$A|1D|B|1E|1|1F]]|C|$]]|$1|D|3|E|5|6|7|1G|8|@$A|1H|B|1I|F|G]]|9|@]|C|$]]|$1|H|3|I|5|6|7|1J|8|@$A|1K|B|1L|F|G]]|9|@]|C|$]]|$1|J|3|K|5|6|7|1M|8|@$A|1N|B|1O|F|G]]|9|@]|C|$]]|$1|L|3|M|5|N|7|1P|8|@]|9|@]|C|$O|P]]|$1|Q|3|R|5|6|7|1Q|8|@]|9|@]|C|$]]|$1|S|3|T|5|6|7|1R|8|@]|9|@]|C|$]]|$1|U|3|V|5|W|7|1S|8|@]|9|@$A|1T|B|1U|1|1V]]|C|$]]|$1|X|3|T|5|6|7|1W|8|@]|9|@]|C|$]]|$1|Y|3|-4|5|6|7|1X|8|@]|9|@]|C|$]]]|Z|$10|$5|11|12|13|C|$14|15]]|16|$5|17|12|18|C|$19|1A|1B|-4]]]]

checkout this project/tool: <a href="https://github.com/dalance/procs" rel="nofollow noreferrer">procs</a>
install on MacOs: <code>brew install procs</code>
This allows you control what to display with <code>procs</code>.
To see TCP/UDP Ports, add below to <code>~/.procs.toml</code> after installing the tool.
<pre><code>[[columns]]
kind = &quot;TcpPort&quot;
style = &quot;BrightYellow|Yellow&quot;
numeric_search = true
nonnumeric_search = false
align = &quot;Left&quot;

[[columns]]
kind = &quot;UdpPort&quot;
style = &quot;BrightGreen|Green&quot;
numeric_search = false
nonnumeric_search = true
align = &quot;Left&quot;
</code></pre>
Here is a sample output:
<a href="https://i.stack.imgur.com/fmgkb.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/fmgkb.png" alt="enter image description here" /></a>

On Linux, I can use <code>netstat -pntl | grep $PORT</code> or <code>fuser -n tcp $PORT</code> to find out which process (PID) is listening on the specified TCP port. How do I get the same information on Mac OS X?

Who is listening on a given TCP port on Mac OS X?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

教程

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云智能顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

EdgeOne AI 安全实战专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

聚焦“写作效率、视觉美观与运行性能”三方面进行全面升级，为您提供更高效、稳定的创作环境

社区富文本&Markdown编辑器全新改版上线，欢迎大家体验!

诚挚邀请您参与本次调研，分享您的真实使用感受与建议。您的反馈至关重要，感谢您的支持与参与！

社区新版编辑器体验调研

在Linux上，我可以使用netstat -pntl | grep $PORT或fuser -n tcp $PORT来找出哪个进程(PID)正在监听指定的TCP端口。如何在Mac OS X上获取相同的信息？

问谁在监听Mac OS X上的给定TCP端口？
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问谁在监听Mac OS X上的给定TCP端口？EN