home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
IRIX Base Documentation 1998 November
/
IRIX 6.5.2 Base Documentation November 1998.img
/
usr
/
share
/
catman
/
u_man
/
cat1
/
netstat.z
/
netstat
Wrap
Text File
|
1998-10-20
|
13KB
|
265 lines
NNNNEEEETTTTSSSSTTTTAAAATTTT((((1111)))) NNNNEEEETTTTSSSSTTTTAAAATTTT((((1111))))
NNNNAAAAMMMMEEEE
netstat - show network status
SSSSYYYYNNNNOOOOPPPPSSSSIIIISSSS
nnnneeeettttssssttttaaaatttt [ ----AAAAaaaannnnuuuu ] [ ----ffff _a_d_d_r_e_s_s__f_a_m_i_l_y ] [ _s_y_s_t_e_m ] [ _c_o_r_e ]
nnnneeeettttssssttttaaaatttt [ ----iiiimmmmnnnnqqqqrrrrssssttttMMMM ] [ ----ffff _a_d_d_r_e_s_s__f_a_m_i_l_y ] [ _s_y_s_t_e_m ] [ _c_o_r_e ]
nnnneeeettttssssttttaaaatttt [ ----nnnn ] [ ----IIII _i_n_t_e_r_f_a_c_e ] _i_n_t_e_r_v_a_l [ _s_y_s_t_e_m ] [ _c_o_r_e ]
nnnneeeettttssssttttaaaatttt ----CCCC [ ----nnnn ] [ _i_n_t_e_r_v_a_l ] [ _s_y_s_t_e_m ]
nnnneeeettttssssttttaaaatttt [ ----pppp _p_r_o_t_o_c_o_l ] [ _s_y_s_t_e_m ] [ _c_o_r_e ]
DDDDEEEESSSSCCCCRRRRIIIIPPPPTTTTIIIIOOOONNNN
The _n_e_t_s_t_a_t command symbolically displays the contents of various
network-related data structures. There are a number of output formats,
depending on the options for the information presented. The first form
of the command displays a list of active sockets for each protocol. The
second form presents the contents of one of the other network data
structures according to the option selected. Using the third form, with
an _i_n_t_e_r_v_a_l specified, _n_e_t_s_t_a_t will continuously display the information
regarding packet traffic on the configured network interfaces. The
fourth form displays statistics about the named protocol.
The options have the following meaning:
----AAAA With the default display, show the address of any protocol control
blocks associated with sockets; used for debugging.
----aaaa With the default display, show the state of all sockets; normally
sockets used by server processes are not shown. If ----qqqq is used in
conjunction with ----aaaa, information about pending connections on
listening endpoints will be displayed. This includes the number of
partially-synchronized connections, the number of fully-synchronized
connections, and the maximum number of pending connections specified
in the _l_i_s_t_e_n(2) call. Note that system provides some scaling on
the _l_i_s_t_e_n backlog, such that a request for a queue limit of 32 will
actually result in 49 connections being allowed prior to new
connection requests being ignored. This means that it is possible
for the sum of the two queue lengths to be larger than the limit.
----llll With the default display, on systems supporting IP security options,
show the mandatory and discretionary access control attributes
associated with sockets. These consist of a mandatory access
control label, printed at the beginning of each line, and a socket
uid and acl, printed at the end of each line. (For AAAAFFFF____IIIINNNNEEEETTTT sockets
only, a second mandatory access control label, _S_n_d_L_a_b_e_l, is also
shown. _S_n_d_L_a_b_e_l is a copy of the label in the u_area.) On systems
not supporting IP security options, ----llll is silently ignored.
----CCCC Display the contents of several of the other formats in dynamic
"full-screen" forms. Many of the values can be displayed as simple
totals (_r or "reset"), changes during the previous interval (_d or
"delta"), or changes since a fix moment (_z or "zero"). Note that
turning interfaces off or on or otherwise reseting them can make it
PPPPaaaaggggeeee 1111
NNNNEEEETTTTSSSSTTTTAAAATTTT((((1111)))) NNNNEEEETTTTSSSSTTTTAAAATTTT((((1111))))
seem that counters are changing wildly, since that often resets the
counters to zero.
----iiii Show the state of interfaces which have been auto-configured
(interfaces statically configured into a system, but not located at
boot time are not shown). When ----aaaa is also present, show all
addresses (unicast, multicast and link-level) associated with each
interface.
----iiiiqqqq Show the information for ----iiii with the number of packets currently in
the output queue, the queue size, and the number of dropped packets
due to a full queue.
----IIII _i_n_t_e_r_f_a_c_e
Show information only about this interface; used with an _i_n_t_e_r_v_a_l as
described below.
----mmmm Show statistics recorded by the memory management routines (the
network manages a private pool of memory buffers).
----nnnn Show network addresses as numbers (normally _n_e_t_s_t_a_t interprets
addresses and attempts to display them symbolically). This option
may be used with any of the display formats.
----pppp _p_r_o_t_o_c_o_l
Show statistics about _p_r_o_t_o_c_o_l, which is either a well-known name
for a protocol or an alias for it. Some protocol names and aliases
are listed in the file /_e_t_c/_p_r_o_t_o_c_o_l_s. A null response typically
means that there are no interesting numbers to report. The program
will complain if _p_r_o_t_o_c_o_l is unknown or if there is no statistics
routine for it. (This includes counting packets for the HELO
routing protocol as unknown.)
----ssss Show per-protocol statistics.
----rrrr Show the routing tables. When ----ssss is also present, show routing
statistics instead.
----MMMM Show the kernel multicast routing tables. When ----ssss is also present,
show multicast routing statistics instead.
----ffff _a_d_d_r_e_s_s__f_a_m_i_l_y
Limit statistics or address control block reports to those of the
specified _a_d_d_r_e_s_s _f_a_m_i_l_y. The following address families are
recognized: _i_n_e_t, for AAAAFFFF____IIIINNNNEEEETTTT, and _u_n_i_x, for AAAAFFFF____UUUUNNNNIIIIXXXX. (_n_s, for
AAAAFFFF____NNNNSSSS is not currently supported.)
----tttt If used in conjunction with ----iiii, displays the value of the interface
watchdog timer.
PPPPaaaaggggeeee 2222
NNNNEEEETTTTSSSSTTTTAAAATTTT((((1111)))) NNNNEEEETTTTSSSSTTTTAAAATTTT((((1111))))
----uuuu A synonym for ----ffff uuuunnnniiiixxxx.
The arguments, _s_y_s_t_e_m and _c_o_r_e allow substitutes for the defaults
``/unix'' and ``/dev/kmem''.
The default display, for active sockets, shows the local and remote
addresses, send and receive queue sizes (in bytes), protocol, and the
internal state of the protocol. Address formats are of the form
``host.port'' or ``network.port'' if a socket's address specifies a
network but no specific host address. When known the host and network
addresses are displayed symbolically according to the data bases
/_e_t_c/_h_o_s_t_s and /_e_t_c/_n_e_t_w_o_r_k_s, respectively. If a symbolic name for an
address is unknown, or if the ----nnnn option is specified, the address is
printed numerically, according to the address family. For more
information regarding the Internet ``dot format,'' refer to _i_n_e_t(3N).
Unspecified, or ``wildcard'', addresses and ports appear as ``*''.
The interface display provides a table of cumulative statistics regarding
packets transferred, errors, and collisions. The network addresses of
the interface and the maximum transmission unit (``mtu'') are also
displayed.
The routing table display indicates the available routes and their
status. Each route consists of a destination host or network and a
gateway to use in forwarding packets. The flags field shows a collection
of information about the route stored as binary choices. The individual
flags are discussed in more detail in the _r_o_u_t_e(1M) and _r_o_u_t_e(7) manual
pages. The mapping between letters and flags is:
1 RTF_PROTO1 Protocol-specific routing flag #1
2 RTF_PROTO2 Protocol-specific routing flag #2
B RTF_BLACKHOLE Just discard pkts (during updates)
C RTF_CLONING Generate new routes on use
D RTF_DYNAMIC Created dynamically (by redirect)
G RTF_GATEWAY Destination requires forwarding by intermediary
H RTF_HOST Host entry (net otherwise)
L RTF_LLINFO Valid protocol to link address translation.
M RTF_MODIFIED Modified dynamically (by redirect)
R RTF_REJECT Host or net unreachable
S RTF_STATIC Manually added
U RTF_UP Route usable
X RTF_XRESOLVE External daemon translates proto to link address
c RTF_CKSUM TCP/UDP checksumming done on this route
Direct routes are created for each interface attached to the local host;
the gateway field for such entries shows the address of the outgoing
interface. The MTU field shows the MTU value set with the _r_o_u_t_e(1M)
command for that route. The RTT and RTTvar fields show the estimated
round-trip time (RTT) and the variance in RTT for routes with large
amounts of TCP traffic. The RTT and RTTvar values are in seconds with a
resolution of .125 seconds. The use field provides a count of the number
of packets sent using that route. The interface entry indicates the
PPPPaaaaggggeeee 3333
NNNNEEEETTTTSSSSTTTTAAAATTTT((((1111)))) NNNNEEEETTTTSSSSTTTTAAAATTTT((((1111))))
network interface utilized for the route.
When _n_e_t_s_t_a_t is invoked with an _i_n_t_e_r_v_a_l argument, it displays a running
count of statistics related to network interfaces. This display consists
of a column for the primary interface (the first interface found during
autoconfiguration) and a column summarizing information for all
interfaces. The primary interface may be replaced with another interface
with the ----IIII option. The first line of each screen of information
contains a summary since the system was last rebooted. Subsequent lines
of output show values accumulated over the preceding interval.
DDDDEEEETTTTEEEERRRRMMMMIIIINNNNIIIINNNNGGGG SSSSEEEERRRRVVVVIIIICCCCEEEE UUUUSSSSAAAAGGGGEEEE
To match a socket to a process, the _f_u_s_e_r(1M) command can be used. For
example, the command
fuser 25/tcp
will display information about any processes listening on TCP port 25.
Note that _f_u_s_e_r requires the numeric value for the port, not the name of
the service. The ----nnnn option will force _n_e_t_s_t_a_t to display service
information numerically.
SSSSEEEEEEEE AAAALLLLSSSSOOOO
fuser(1M), nfsstat(1M), route(1M), smtstat(1), hosts(4), networks(4),
protocols(4), services(4), route(7)
BBBBUUUUGGGGSSSS
The notion of errors is ill-defined.
PPPPaaaaggggeeee 4444