iptstate1
A top-like display of ip tables state table entries
Usage
iptstate [-fhlRst]
[-r
seconds]
[-b
[{d | p | s | t}]]
Overview
iptstate displays information held in the IP Tables state table in real-time in a top-like format. Output can be sorted by any field, or any field reversed. Users can choose to have the output only print once and exit. Refresh rate is also customizable.
Options
-
-b -
This option tells IPTState how to sort the output. The options are:
d Destination IP
p Protocol
s State
t TTL
-
-d -
Do not dynamically size the window based on terminal sizing information; instead use default iptstate sizing.
-
-f -
Filter anything on loopback.
-
-h -
Display help message.
-
-l -
Resolve all IP address to domain names. This truncates from the Source address from the right (you know your own domain) and destination addresses from the left (domains are most helpful here). Warning: this can take a long time to startup due to all the resolving.
-
-r seconds -
This tells IPTState what refresh rate you want (ignored when used with -s).
-
-R -
Sort in reverse.
-
-s -
Single-run mode. This will print the state table formatted on the screen once without using curses.
-
-t -
Show totals (total states, total TCP states, etc.)
Options
The following my be used while IPTState is running to change its behavior (unless you use -s).
d-
Toggle between letting iptstate dynamically size the columns and using the old default sizes
f-
Toggle filtering of loopback
l-
Toggle DNS lookups on IP addresses
q-
Quit
r-
Toggle reverse sorting
s-
Change sorting to the next field
t-
Toggle display of totals
space-
Immediately update the display. Use this if you resize the window.
Notes
The truncation of names in lookup mode happens from the right for source because you most likely know your own domain name, and from the left for destination because knowing your users are connection to "mail.a." doesn't help much.