Files
Ares-mythic/documentation-payload/ares/commands/netstat.md
Aryma 03d283cf49 refactor(payload): rename apollo to ares and update documentation
This commit renames the Apollo payload type to Ares, moving all associated files and updating documentation accordingly. The change includes:
- Renaming directories from `apollo` to `ares`
- Updating documentation image references
- Maintaining the same code functionality while changing the payload name
- Adding new Ares-specific documentation files
- Removing old Apollo documentation files

The rename is done to reflect the new payload name while preserving all existing functionality.
2026-04-14 14:02:44 +07:00

715 B

+++ title = "netstat" chapter = false weight = 103 hidden = false +++

Summary

Task an agent to retrieve network connections.

Arguments

The netstathas multiple boolean flags to filter what data gets returned.

  • -Tcp
  • -Udp
  • -Listen
  • -Established

Tcp (optional)

Only return TCP results.

Udp (optional)

Only return UDP results.

Listen (optional)

Only return results that have a TCP state of Listen.

Established (optional)

Only return results that have a TCP state of Established.

Usage

netstat

Detailed Summary

The netstat command uses the Win32 API calling GetExtendedTcpTable and GetExtendedUdpTable from iphlpapi.dll to retrieve netstat.