iptstate(8) -- Linux man page
NAMEiptstate - A top-like display of IP Tables state table entries
SYNOPSISiptstate [-fhlRst] [-r seconds ] [-b [d|p|s|t]]
DESCRIPTIONiptstate displays information held in the IP Tables state table in real-time in a top-like format. Output can be sorted by any field, or any field reversed. Users can choose to have the output only print once and exit. Refresh rate is also customizable.
This option tells IPTState how to sort the output. The options are:
d Destination IP
- Do not dynamically size the window based on terminal sizing information; instead use default iptstate sizing.
- Filter anything on loopback.
- Display help message.
- Resolve all IP address to domain names. This truncates from the Source address from the right (you know your own domain) and destination addresses from the left (domains are most helpful here). Warning: this can take a long time to startup due to all the resolving.
- -r seconds
- This tells IPTState what refresh rate you want (ignored when used with -s).
- Sort in reverse.
- Single-run mode. This will print the state table formatted on the screen once without using curses.
- Show totals (total states, total TCP states, etc.)
INTERACTIVE OPTIONSThe following my be used while IPTState is running to change its behavior (unless you use -s).
- Toggle between letting iptstate dynamically size the columns and using the old default sizes
- Toggle filtering of loopback
- Toggle DNS lookups on IP addresses
- Toggle reverse sorting
- Change sorting to the next field
- Toggle display of totals
- Immediately update the display. Use this if you resize the window.
BUGSThe only known bug at this point is a memory leak. If you have a lot of traffic I don't recommend leaving IPTState running overnight on your firewall because it may run out of memory. Since I don't use any dynamic data structures I have not been able to find the memory leak, but feel free to try.
BUG REPORTSAll bugs should be reported to Phil Dibowitz <firstname.lastname@example.org>, NOT your local distribution bug list. Please see the README and BUGS for more information on bug reports. Please read the WISHLIST before sending in features you hope to see.
NOTESThe truncation of names in lookup mode happens from the right for source because you most likely know your own domain name, and from the left for destination because knowing your users are connection to "mail.a." doesn't help much.
AUTHORIPTState (and this man page) was written by
Phil Dibowitz <email@example.com>