#!/bin/bash
s="tcp 0 0 10.1.1.1:601 10.1.1.2:935 ESTABLISHED 842/hgd
tcp 0 0 10.1.1.1:55394 10.1.1.2:3490 ESTABLISHED 842/hgd"
awk -F'[:[:space:]]+' '/hgd/ && $7 == "935" { print $5 }' <<< "$s"
IyEvYmluL2Jhc2gKcz0idGNwICAgICAgICAwICAgICAgMCAxMC4xLjEuMTo2MDEgICAgICAgICAgICAxMC4xLjEuMjo5MzUgICAgICAgICAgICBFU1RBQkxJU0hFRCA4NDIvaGdkCnRjcCAgICAgICAgMCAgICAgIDAgMTAuMS4xLjE6NTUzOTQgICAgICAgICAgMTAuMS4xLjI6MzQ5MCAgICAgICAgICAgRVNUQUJMSVNIRUQgODQyL2hnZCIKYXdrIC1GJ1s6WzpzcGFjZTpdXSsnICcvaGdkLyAmJiAkNyA9PSAiOTM1IiB7IHByaW50ICQ1IH0nIDw8PCAiJHMi