| blob | 0ade14bb79a409c9462a7c0dbbe9c7be4b7a5ed9 |
1 '\" te
2 .\" Copyright (C) 2002, Sun Microsystems, Inc. All Rights Reserved
3 .\" Copyright 1989 AT&T
4 .\" Copyright (c) 1983 Regents of the University of California. All rights reserved. The Berkeley software License Agreement specifies the terms and conditions for redistribution.
5 .TH NETSTAT 1M "Jun 16, 2009"
6 .SH NAME
7 netstat \- show network status
8 .SH SYNOPSIS
9 .LP
10 .nf
11 \fBnetstat\fR [\fB-anvR\fR] [\fB-f\fR \fIaddress_family\fR] [\fB-P\fR \fIprotocol\fR]
12 .fi
14 .LP
15 .nf
16 \fBnetstat\fR \fB-g\fR [\fB-nv\fR] [\fB-f\fR \fIaddress_family\fR]
17 .fi
19 .LP
20 .nf
21 \fBnetstat\fR \fB-p\fR [\fB-n\fR] [\fB-f\fR \fIaddress_family\fR]
22 .fi
24 .LP
25 .nf
26 \fBnetstat\fR \fB-s\fR [\fB-f\fR \fIaddress_family\fR] [\fB-P\fR \fIprotocol\fR]
27 [\fB-T\fR u | d ] [\fIinterval\fR [\fIcount\fR]]
28 .fi
30 .LP
31 .nf
32 \fBnetstat\fR \fB-m\fR [\fB-T\fR u | d ] [\fB-v\fR] [\fIinterval\fR [\fIcount\fR]]
33 .fi
35 .LP
36 .nf
37 \fBnetstat\fR \fB-i\fR [\fB-I\fR \fIinterface\fR] [\fB-an\fR] [\fB-f\fR \fIaddress_family\fR]
38 [\fB-T\fR u | d ] [\fIinterval\fR [\fIcount\fR]]
39 .fi
41 .LP
42 .nf
43 \fBnetstat\fR \fB-r\fR [\fB-anvR\fR] [\fB-f\fR \fIaddress_family\fR | \fIfilter\fR]
44 .fi
46 .LP
47 .nf
48 \fBnetstat\fR \fB-M\fR [\fB-ns\fR] [\fB-f\fR \fIaddress_family\fR]
49 .fi
51 .LP
52 .nf
53 \fBnetstat\fR \fB-D\fR [\fB-I\fR \fIinterface\fR] [\fB-f\fR \fIaddress_family\fR]
54 .fi
56 .SH DESCRIPTION
57 .sp
58 .LP
59 The \fBnetstat\fR command displays the contents of certain network-related data
60 structures in various formats, depending on the options you select.
61 .sp
62 .LP
63 The \fBnetstat\fR command has the several forms shown in the SYNOPSIS section,
64 above, listed as follows:
65 .RS +4
66 .TP
67 .ie t \(bu
68 .el o
69 The first form of the command (with no required arguments) displays a list of
70 active sockets for each protocol.
71 .RE
72 .RS +4
73 .TP
74 .ie t \(bu
75 .el o
76 The second, third, and fourth forms (\fB-g\fR, \fB-p\fR, and \fB-s\fR options)
77 display information from various network data structures.
78 .RE
79 .RS +4
80 .TP
81 .ie t \(bu
82 .el o
83 The fifth form (\fB-m\fR option) displays STREAMS memory statistics.
84 .RE
85 .RS +4
86 .TP
87 .ie t \(bu
88 .el o
89 The sixth form (\fB-i\fR option) shows the state of the interfaces.
90 .RE
91 .RS +4
92 .TP
93 .ie t \(bu
94 .el o
95 The seventh form (\fB-r\fR option) displays the routing table.
96 .RE
97 .RS +4
98 .TP
99 .ie t \(bu
100 .el o
101 The eighth form (\fB-M\fR option) displays the multicast routing table.
102 .RE
103 .RS +4
104 .TP
105 .ie t \(bu
106 .el o
107 The ninth form (\fB-D\fR option) displays the state of \fBDHCP\fR on one or all
108 interfaces.
109 .RE
110 .sp
111 .LP
112 These forms are described in greater detail below.
113 .sp
114 .LP
115 With no arguments (the first form), \fBnetstat\fR displays connected sockets
116 for \fBPF_INET\fR, \fBPF_INET6\fR, and \fBPF_UNIX\fR, unless modified otherwise
117 by the \fB-f\fR option.
118 .SH OPTIONS
119 .sp
120 .ne 2
121 .na
122 \fB\fB-a\fR\fR
123 .ad
124 .sp .6
125 .RS 4n
126 Show the state of all sockets, all routing table entries, or all interfaces,
127 both physical and logical. Normally, listener sockets used by server processes
128 are not shown. Under most conditions, only interface, host, network, and
129 default routes are shown and only the status of physical interfaces is shown.
130 .RE
132 .sp
133 .ne 2
134 .na
135 \fB\fB-f\fR \fIaddress_family\fR\fR
136 .ad
137 .sp .6
138 .RS 4n
139 Limit all displays to those of the specified \fIaddress_family\fR. The value of
140 \fIaddress_family\fR can be one of the following:
141 .sp
142 .ne 2
143 .na
144 \fB\fBinet\fR\fR
145 .ad
146 .RS 9n
147 For the \fBAF_INET\fR address family showing IPv4 information.
148 .RE
150 .sp
151 .ne 2
152 .na
153 \fB\fBinet6\fR\fR
154 .ad
155 .RS 9n
156 For the \fBAF_INET6\fR address family showing IPv6 information.
157 .RE
159 .sp
160 .ne 2
161 .na
162 \fB\fBunix\fR\fR
163 .ad
164 .RS 9n
165 For the \fBAF_UNIX\fR address family.
166 .RE
168 .RE
170 .sp
171 .ne 2
172 .na
173 \fB\fB-f\fR \fIfilter\fR\fR
174 .ad
175 .sp .6
176 .RS 4n
177 With \fB-r\fR only, limit the display of routes to those matching the specified
178 filter. A filter rule consists of a \fIkeyword\fR:\fIvalue\fR pair. The known
179 keywords and the value syntax are:
180 .sp
181 .ne 2
182 .na
183 \fB\fBaf:\fR{\fBinet\fR|\fBinet6\fR|\fBunix\fR|\fInumber\fR}\fR
184 .ad
185 .sp .6
186 .RS 4n
187 Selects an address family. This is identical to \fB-f\fR \fIaddress_family\fR
188 and both syntaxes are supported.
189 .RE
191 .sp
192 .ne 2
193 .na
194 \fB\fBoutif\fR:{\fIname\fR|\fIifIndex\fR|\fBany\fR|\fBnone\fR}\fR
195 .ad
196 .sp .6
197 .RS 4n
198 Selects an output interface. You can specify the interface by name (such as
199 \fBhme0\fR) or by \fBifIndex\fR number (for example, \fB2\fR). If \fBany\fR is
200 used, the filter matches all routes having a specified interface (anything
201 other than null). If \fBnone\fR is used, the filter matches all routes having a
202 null interface. Note that you can view the index number (\fIifIndex\fR) for an
203 interface with the \fB-a\fR option of \fBifconfig\fR(1M).
204 .RE
206 .sp
207 .ne 2
208 .na
209 \fB\fBdst\fR:{\fIip-address\fR[/\fImask\fR]|\fBany\fR|\fBnone\fR}\fR
210 .ad
211 .sp .6
212 .RS 4n
213 Selects a destination IP address. If specified with a mask length, then any
214 routes with matching or longer (more specific) masks are selected. If \fBany\fR
215 is used, then all but addresses but 0 are selected. If \fBnone\fR is used, then
216 address 0 is selected.
217 .RE
219 .sp
220 .ne 2
221 .na
222 \fB\fBflags:\fR[\fB+ -\fR]?[\fBABDGHLMSU\fR]\fB+\fR\fR
223 .ad
224 .sp .6
225 .RS 4n
226 Selects routes tagged with the specified flags. By default, the flags as
227 specified must be set in order to match. With a leading \fB+\fR, the flags
228 specified must be set but others are ignored. With a leading \fB-\fR, the flags
229 specified must not be set and others are permitted.
230 .RE
232 You can specify multiple instances of \fB-f\fR to specify multiple filters. For
233 example:
234 .sp
235 .in +2
236 .nf
237 % netstat -nr -f outif:hme0 -f outif:hme1 -f dst:10.0.0.0/8
238 .fi
239 .in -2
240 .sp
242 The preceding command displays routes within network 10.0.0.0/8, with mask
243 length 8 or greater, and an output interface of either \fBhme0\fR or
244 \fBhme1\fR, and excludes all other routes.
245 .RE
247 .sp
248 .ne 2
249 .na
250 \fB\fB-g\fR\fR
251 .ad
252 .sp .6
253 .RS 4n
254 Show the multicast group memberships for all interfaces. If the \fB-v\fR option
255 is included, source-specific membership information is also displayed. See
256 DISPLAYS, below.
257 .RE
259 .sp
260 .ne 2
261 .na
262 \fB\fB-i\fR\fR
263 .ad
264 .sp .6
265 .RS 4n
266 Show the state of the interfaces that are used for \fBIP\fR traffic. Normally
267 this shows statistics for the physical interfaces. When combined with the
268 \fB-a\fR option, this will also report information for the logical interfaces.
269 See \fBifconfig\fR(1M).
270 .RE
272 .sp
273 .ne 2
274 .na
275 \fB\fB-m\fR\fR
276 .ad
277 .sp .6
278 .RS 4n
279 Show the STREAMS memory statistics.
280 .RE
282 .sp
283 .ne 2
284 .na
285 \fB\fB-n\fR\fR
286 .ad
287 .sp .6
288 .RS 4n
289 Show network addresses as numbers. \fBnetstat\fR normally displays addresses as
290 symbols. This option may be used with any of the display formats.
291 .RE
293 .sp
294 .ne 2
295 .na
296 \fB\fB-p\fR\fR
297 .ad
298 .sp .6
299 .RS 4n
300 Show the net to media tables. See DISPLAYS, below.
301 .RE
303 .sp
304 .ne 2
305 .na
306 \fB\fB-r\fR\fR
307 .ad
308 .sp .6
309 .RS 4n
310 Show the routing tables. Normally, only interface, host, network, and default
311 routes are shown, but when this option is combined with the \fB-a\fR option,
312 all routes will be displayed, including cache. If you have not set up a
313 multicast route, \fB-ra\fR might not show any multicast routing entries,
314 although the kernel will derive such an entry if needed.
315 .RE
317 .sp
318 .ne 2
319 .na
320 \fB\fB-s\fR\fR
321 .ad
322 .sp .6
323 .RS 4n
324 Show per-protocol statistics. When used with the \fB-M\fR option, show
325 multicast routing statistics instead. When used with the \fB-a\fR option,
326 per-interface statistics will be displayed, when available, in addition to
327 statistics global to the system. See DISPLAYS, below.
328 .RE
330 .sp
331 .ne 2
332 .na
333 \fB\fB-T\fR \fBu\fR | \fBd\fR\fR
334 .ad
335 .sp .6
336 .RS 4n
337 Display a time stamp.
338 .sp
339 Specify \fBu\fR for a printed representation of the internal representation of
340 time. See \fBtime\fR(2). Specify \fBd\fR for standard date format. See
341 \fBdate\fR(1).
342 .RE
344 .sp
345 .ne 2
346 .na
347 \fB\fB-v\fR\fR
348 .ad
349 .sp .6
350 .RS 4n
351 Verbose. Show additional information for the sockets, STREAMS memory
352 statistics, routing table, and multicast group memberships.
353 .RE
355 .sp
356 .ne 2
357 .na
358 \fB\fB-I\fR \fIinterface\fR\fR
359 .ad
360 .sp .6
361 .RS 4n
362 Show the state of a particular interface. \fIinterface\fR can be any valid
363 interface such as \fBhme0\fR or \fBeri0\fR. Normally, the status and statistics
364 for physical interfaces are displayed. When this option is combined with the
365 \fB-a\fR option, information for the logical interfaces is also reported.
366 .RE
368 .sp
369 .ne 2
370 .na
371 \fB\fB-M\fR\fR
372 .ad
373 .sp .6
374 .RS 4n
375 Show the multicast routing tables. When used with the \fB-s\fR option, show
376 multicast routing statistics instead.
377 .RE
379 .sp
380 .ne 2
381 .na
382 \fB\fB-P\fR \fIprotocol\fR\fR
383 .ad
384 .sp .6
385 .RS 4n
386 Limit display of statistics or state of all sockets to those applicable to
387 \fIprotocol\fR. The protocol can be one of \fBip\fR, \fBipv6\fR, \fBicmp\fR,
388 \fBicmpv6\fR, \fBicmp\fR, \fBicmpv6\fR, \fBigmp\fR, \fBudp\fR, \fBtcp\fR,
389 \fBrawip\fR. \fBrawip\fR can also be specified as \fBraw\fR. The command
390 accepts protocol options only as all lowercase.
391 .RE
393 .sp
394 .ne 2
395 .na
396 \fB\fB-D\fR\fR
397 .ad
398 .sp .6
399 .RS 4n
400 Show the status of \fBDHCP\fR configured interfaces.
401 .RE
403 .sp
404 .ne 2
405 .na
406 \fB\fB-R\fR\fR
407 .ad
408 .sp .6
409 .RS 4n
410 This modifier displays extended security attributes for sockets and routing
411 table entries. The \fB-R\fR modifier is available only if the system is
412 configured with the Solaris Trusted Extensions feature.
413 .sp
414 With \fB-r\fR only, this option displays the routing entries' gateway security
415 attributes. See \fBroute\fR(1M) for more information on security attributes.
416 .sp
417 When displaying socket information using the first form of the commmand, this
418 option displays additional information for Multi-Level Port(MLP) sockets. This
419 includes:
420 .RS +4
421 .TP
422 .ie t \(bu
423 .el o
424 The label for the peer if the socket is connected.
425 .RE
426 .RS +4
427 .TP
428 .ie t \(bu
429 .el o
430 The following flags can be appended to the socket's "State" output:
431 .RS
433 .sp
434 .ne 2
435 .na
436 \fB\fBP\fR\fR
437 .ad
438 .RS 5n
439 The socket is a MLP on zone-private IP addresses.
440 .RE
442 .sp
443 .ne 2
444 .na
445 \fB\fBS\fR\fR
446 .ad
447 .RS 5n
448 The socket is a MLP on IP addresses shared between zones.
449 .RE
451 .RE
453 .RE
454 .RE
456 .SH OPERANDS
457 .sp
458 .ne 2
459 .na
460 \fB\fIinterval\fR\fR
461 .ad
462 .RS 12n
463 Display statistics accumulated since last display every \fIinterval\fR seconds,
464 repeating forever, unless \fIcount\fR is specified. When invoked with
465 \fIinterval\fR, the first row of netstat output shows statistics accumulated
466 since last reboot.
467 .sp
468 The following options support \fIinterval\fR: \fB-i\fR, \fB-m\fR, \fB-s\fR and
469 \fB-Ms\fR. Some values are configuration parameters and are just redisplayed at
470 each interval.
471 .RE
473 .sp
474 .ne 2
475 .na
476 \fB\fIcount\fR\fR
477 .ad
478 .RS 12n
479 Display interface statistics the number of times specified by \fIcount\fR, at
480 the interval specified by \fIinterval\fR.
481 .RE
483 .SH DISPLAYS
484 .SS "Active Sockets (First Form)"
485 .sp
486 .LP
487 The display for each active socket shows the local and remote address, the send
488 and receive queue sizes (in bytes), the send and receive windows (in bytes),
489 and the internal state of the protocol.
490 .sp
491 .LP
492 The symbolic format normally used to display socket addresses is either:
493 .sp
494 .in +2
495 .nf
496 \fBhostname\fR.\fIport\fR
497 .fi
498 .in -2
499 .sp
501 .sp
502 .LP
503 when the name of the host is specified, or
504 .sp
505 .in +2
506 .nf
507 \fInetwork\fR.\fIport\fR
508 .fi
509 .in -2
510 .sp
512 .sp
513 .LP
514 if a socket address specifies a network but no specific host.
515 .sp
516 .LP
517 The numeric host address or network number associated with the socket is used
518 to look up the corresponding symbolic hostname or network name in the
519 \fIhosts\fR or \fInetworks\fR database.
520 .sp
521 .LP
522 If the network or hostname for an address is not known, or if the \fB-n\fR
523 option is specified, the numerical network address is shown. Unspecified, or
524 "wildcard", addresses and ports appear as an asterisk (\fB*\fR). For more
525 information regarding the Internet naming conventions, refer to \fBinet\fR(7P)
526 and \fBinet6\fR(7P).
527 .sp
528 .LP
529 For SCTP sockets, because an endpoint can be represented by multiple addresses,
530 the verbose option (\fB-v\fR) displays the list of all the local and remote
531 addresses.
532 .SS "\fITCP Sockets\fR"
533 .sp
534 .LP
535 The possible state values for \fBTCP\fR sockets are as follows:
536 .sp
537 .ne 2
538 .na
539 \fB\fBBOUND\fR\fR
540 .ad
541 .RS 16n
542 Bound, ready to connect or listen.
543 .RE
545 .sp
546 .ne 2
547 .na
548 \fB\fBCLOSED\fR\fR
549 .ad
550 .RS 16n
551 Closed. The socket is not being used.
552 .RE
554 .sp
555 .ne 2
556 .na
557 \fB\fBCLOSING\fR\fR
558 .ad
559 .RS 16n
560 Closed, then remote shutdown; awaiting acknowledgment.
561 .RE
563 .sp
564 .ne 2
565 .na
566 \fB\fBCLOSE_WAIT\fR\fR
567 .ad
568 .RS 16n
569 Remote shutdown; waiting for the socket to close.
570 .RE
572 .sp
573 .ne 2
574 .na
575 \fB\fBESTABLISHED\fR\fR
576 .ad
577 .RS 16n
578 Connection has been established.
579 .RE
581 .sp
582 .ne 2
583 .na
584 \fB\fBFIN_WAIT_1\fR\fR
585 .ad
586 .RS 16n
587 Socket closed; shutting down connection.
588 .RE
590 .sp
591 .ne 2
592 .na
593 \fB\fBFIN_WAIT_2\fR\fR
594 .ad
595 .RS 16n
596 Socket closed; waiting for shutdown from remote.
597 .RE
599 .sp
600 .ne 2
601 .na
602 \fB\fBIDLE\fR\fR
603 .ad
604 .RS 16n
605 Idle, opened but not bound.
606 .RE
608 .sp
609 .ne 2
610 .na
611 \fB\fBLAST_ACK\fR\fR
612 .ad
613 .RS 16n
614 Remote shutdown, then closed; awaiting acknowledgment.
615 .RE
617 .sp
618 .ne 2
619 .na
620 \fB\fBLISTEN\fR\fR
621 .ad
622 .RS 16n
623 Listening for incoming connections.
624 .RE
626 .sp
627 .ne 2
628 .na
629 \fB\fBSYN_RECEIVED\fR\fR
630 .ad
631 .RS 16n
632 Initial synchronization of the connection under way.
633 .RE
635 .sp
636 .ne 2
637 .na
638 \fB\fBSYN_SENT\fR\fR
639 .ad
640 .RS 16n
641 Actively trying to establish connection.
642 .RE
644 .sp
645 .ne 2
646 .na
647 \fB\fBTIME_WAIT\fR\fR
648 .ad
649 .RS 16n
650 Wait after close for remote shutdown retransmission.
651 .RE
653 .SS "\fISCTP Sockets\fR"
654 .sp
655 .LP
656 The possible state values for SCTP sockets are as follows:
657 .sp
658 .ne 2
659 .na
660 \fB\fBCLOSED\fR\fR
661 .ad
662 .RS 21n
663 Closed. The socket is not being used.
664 .RE
666 .sp
667 .ne 2
668 .na
669 \fB\fBLISTEN\fR\fR
670 .ad
671 .RS 21n
672 Listening for incoming associations.
673 .RE
675 .sp
676 .ne 2
677 .na
678 \fB\fBESTABLISHED\fR\fR
679 .ad
680 .RS 21n
681 Association has been established.
682 .RE
684 .sp
685 .ne 2
686 .na
687 \fB\fBCOOKIE_WAIT\fR\fR
688 .ad
689 .RS 21n
690 \fBINIT\fR has been sent to the peer, awaiting acknowledgment.
691 .RE
693 .sp
694 .ne 2
695 .na
696 \fB\fBCOOKIE_ECHOED\fR\fR
697 .ad
698 .RS 21n
699 State cookie from the INIT-ACK has been sent to the peer, awaiting
700 acknowledgement.
701 .RE
703 .sp
704 .ne 2
705 .na
706 \fB\fBSHUTDOWN_PENDING\fR\fR
707 .ad
708 .RS 21n
709 \fBSHUTDOWN\fR has been received from the upper layer, awaiting acknowledgement
710 of all outstanding \fBDATA\fR from the peer.
711 .RE
713 .sp
714 .ne 2
715 .na
716 \fB\fBSHUTDOWN_SENT\fR\fR
717 .ad
718 .RS 21n
719 All outstanding data has been acknowledged in the \fBSHUTDOWN_SENT\fR state.
720 \fBSHUTDOWN\fR has been sent to the peer, awaiting acknowledgement.
721 .RE
723 .sp
724 .ne 2
725 .na
726 \fB\fBSHUTDOWN_RECEIVED\fR\fR
727 .ad
728 .RS 21n
729 \fBSHUTDOWN\fR has been received from the peer, awaiting acknowledgement of all
730 outstanding \fBDATA\fR.
731 .RE
733 .sp
734 .ne 2
735 .na
736 \fB\fBSHUTDOWN_ACK_SENT\fR\fR
737 .ad
738 .RS 21n
739 All outstanding data has been acknowledged in the \fBSHUTDOWN_RECEIVED\fR
740 state. \fBSHUTDOWN_ACK\fR has been sent to the peer.
741 .RE
743 .SS "Network Data Structures (Second Through Fifth Forms)"
744 .sp
745 .LP
746 The form of the display depends upon which of the \fB-g\fR, \fB-m\fR, \fB-p\fR,
747 or \fB-s\fR options you select.
748 .sp
749 .ne 2
750 .na
751 \fB\fB-g\fR\fR
752 .ad
753 .RS 6n
754 Displays the list of multicast group membership.
755 .RE
757 .sp
758 .ne 2
759 .na
760 \fB\fB-m\fR\fR
761 .ad
762 .RS 6n
763 Displays the memory usage, for example, STREAMS mblks.
764 .RE
766 .sp
767 .ne 2
768 .na
769 \fB\fB-p\fR\fR
770 .ad
771 .RS 6n
772 Displays the net to media mapping table. For IPv4, the address resolution table
773 is displayed. See \fBarp\fR(1M). For IPv6, the neighbor cache is displayed.
774 .RE
776 .sp
777 .ne 2
778 .na
779 \fB\fB-s\fR\fR
780 .ad
781 .RS 6n
782 Displays the statistics for the various protocol layers.
783 .RE
785 .sp
786 .LP
787 The statistics use the MIB specified variables. The defined values for
788 \fBipForwarding\fR are:
789 .sp
790 .ne 2
791 .na
792 \fB\fBforwarding(1)\fR\fR
793 .ad
794 .RS 21n
795 Acting as a gateway.
796 .RE
798 .sp
799 .ne 2
800 .na
801 \fB\fBnot-forwarding(2)\fR\fR
802 .ad
803 .RS 21n
804 Not acting as a gateway.
805 .RE
807 .sp
808 .LP
809 The IPv6 and ICMPv6 protocol layers maintain per-interface statistics. If the
810 \fB-a\fR option is specified with the \fB-s\fR option, then the per-interface
811 statistics as well as the total sums are displayed. Otherwise, just the sum of
812 the statistics are shown.
813 .sp
814 .LP
815 For the second, third, and fourth forms of the command, you must specify at
816 least \fB-g\fR, \fB-p\fR, or \fB-s\fR. You can specify any combination of these
817 options. You can also specify \fB-m\fR (the fifth form) with any set of the
818 \fB-g\fR, \fB-p\fR, and \fB-s\fR options. If you specify more than one of these
819 options, \fBnetstat\fR displays the information for each one of them.
820 .SS "Interface Status (Sixth Form)"
821 .sp
822 .LP
823 The interface status display lists information for all current interfaces, one
824 interface per line. If an interface is specified using the \fB-I\fR option, it
825 displays information for only the specified interface.
826 .sp
827 .LP
828 The list consists of the interface name, \fBmtu\fR (maximum transmission unit,
829 or maximum packet size)(see \fBifconfig\fR(1M)), the network to which the
830 interface is attached, addresses for each interface, and counter associated
831 with the interface. The counters show the number of input packets, input
832 errors, output packets, output errors, and collisions, respectively. For
833 Point-to-Point interfaces, the Net/Dest field is the name or address on the
834 other side of the link.
835 .sp
836 .LP
837 If the \fB-a\fR option is specified with either the \fB-i\fR option or the
838 \fB-I\fR option, then the output includes names of the physical interface(s),
839 counts for input packets and output packets for each logical interface, plus
840 additional information.
841 .sp
842 .LP
843 If the \fB-n\fR option is specified, the list displays the IP address instead
844 of the interface name.
845 .sp
846 .LP
847 If an optional \fIinterval\fR is specified, the output will be continually
848 displayed in \fIinterval\fR seconds until interrupted by the user or until
849 \fIcount\fR is reached. See OPERANDS.
850 .sp
851 .LP
852 The physical interface is specified using the \fB-I\fR option. When used with
853 the \fIinterval\fR operand, output for the \fB-I\fR option has the following
854 format:
855 .sp
856 .in +2
857 .nf
858 input eri0 output input (Total) output
859 packets errs packets errs colls packets errs packets errs colls
860 227681 0 659471 1 502 261331 0 99597 1 502
861 10 0 0 0 0 10 0 0 0 0
862 8 0 0 0 0 8 0 0 0 0
863 10 0 2 0 0 10 0 2 0 0
864 .fi
865 .in -2
866 .sp
868 .sp
869 .LP
870 If the input interface is not specified, the first interface of address family
871 \fBinet\fR or \fBinet6\fR will be displayed.
872 .SS "Routing Table (Seventh Form)"
873 .sp
874 .LP
875 The routing table display lists the available routes and the status of each.
876 Each route consists of a destination host or network, and a gateway to use in
877 forwarding packets. The \fIflags\fR column shows the status of the route. These
878 flags are as follows:
879 .sp
880 .ne 2
881 .na
882 \fB\fBU\fR\fR
883 .ad
884 .RS 5n
885 Indicates route is \fBup\fR.
886 .RE
888 .sp
889 .ne 2
890 .na
891 \fB\fBG\fR\fR
892 .ad
893 .RS 5n
894 Route is to a gateway.
895 .RE
897 .sp
898 .ne 2
899 .na
900 \fB\fBH\fR\fR
901 .ad
902 .RS 5n
903 Route is to a host and not a network.
904 .RE
906 .sp
907 .ne 2
908 .na
909 \fB\fBM\fR\fR
910 .ad
911 .RS 5n
912 Redundant route established with the \fB-multirt\fR option.
913 .RE
915 .sp
916 .ne 2
917 .na
918 \fB\fBS\fR\fR
919 .ad
920 .RS 5n
921 Route was established using the \fB-setsrc\fR option.
922 .RE
924 .sp
925 .ne 2
926 .na
927 \fB\fBD\fR\fR
928 .ad
929 .RS 5n
930 Route was created dynamically by a redirect.
931 .RE
933 .sp
934 .LP
935 If the \fB-a\fR option is specified, there will be routing entries with the
936 following flags:
937 .sp
938 .ne 2
939 .na
940 \fB\fBA\fR\fR
941 .ad
942 .RS 5n
943 Combined routing and address resolution entries.
944 .RE
946 .sp
947 .ne 2
948 .na
949 \fB\fBB\fR\fR
950 .ad
951 .RS 5n
952 Broadcast addresses.
953 .RE
955 .sp
956 .ne 2
957 .na
958 \fB\fBL\fR\fR
959 .ad
960 .RS 5n
961 Local addresses for the host.
962 .RE
964 .sp
965 .LP
966 Interface routes are created for each interface attached to the local host; the
967 gateway field for such entries shows the address of the outgoing interface.
968 .sp
969 .LP
970 The \fBuse\fR column displays the number of packets sent using a combined
971 routing and address resolution (\fBA\fR) or a broadcast (\fBB\fR) route. For a
972 local (\fBL\fR) route, this count is the number of packets received, and for
973 all other routes it is the number of times the routing entry has been used to
974 create a new combined route and address resolution entry.
975 .sp
976 .LP
977 The \fIinterface\fR entry indicates the network interface utilized for the
978 route.
979 .SS "Multicast Routing Tables (Eighth Form)"
980 .sp
981 .LP
982 The multicast routing table consists of the virtual interface table and the
983 actual routing table.
984 .SS "DHCP Interface Information (Ninth Form)"
985 .sp
986 .LP
987 The \fBDHCP\fR interface information consists of the interface name, its
988 current state, lease information, packet counts, and a list of flags.
989 .sp
990 .LP
991 The states correlate with the specifications set forth in \fIRFC 2131\fR.
992 .sp
993 .LP
994 Lease information includes:
995 .RS +4
996 .TP
997 .ie t \(bu
998 .el o
999 when the lease began;
1000 .RE
1001 .RS +4
1002 .TP
1003 .ie t \(bu
1004 .el o
1005 when lease renewal will begin; and
1006 .RE
1007 .RS +4
1008 .TP
1009 .ie t \(bu
1010 .el o
1011 when the lease will expire.
1012 .RE
1013 .sp
1014 .LP
1015 The flags currently defined include:
1016 .sp
1017 .ne 2
1018 .na
1019 \fB\fBBOOTP\fR\fR
1020 .ad
1021 .RS 11n
1022 The interface has a lease obtained through \fBBOOTP\fR (IPv4 only).
1023 .RE
1025 .sp
1026 .ne 2
1027 .na
1028 \fB\fBBUSY\fR\fR
1029 .ad
1030 .RS 11n
1031 The interface is busy with a \fBDHCP\fR transaction.
1032 .RE
1034 .sp
1035 .ne 2
1036 .na
1037 \fB\fBPRIMARY\fR\fR
1038 .ad
1039 .RS 11n
1040 The interface is the primary interface. See \fBdhcpinfo\fR(1) and
1041 \fBifconfig\fR(1M).
1042 .RE
1044 .sp
1045 .ne 2
1046 .na
1047 \fB\fBFAILED\fR\fR
1048 .ad
1049 .RS 11n
1050 The interface is in failure state and must be manually restarted.
1051 .RE
1053 .sp
1054 .LP
1055 Packet counts are maintained for the number of packets sent, the number of
1056 packets received, and the number of lease offers declined by the \fBDHCP\fR
1057 client. All three counters are initialized to zero and then incremented while
1058 obtaining a lease. The counters are reset when the period of lease renewal
1059 begins for the interface. Thus, the counters represent either the number of
1060 packets sent, received, and declined while obtaining the current lease, or the
1061 number of packets sent, received, and declined while attempting to obtain a
1062 future lease.
1063 .SH FILES
1064 .sp
1065 .ne 2
1066 .na
1067 \fB\fB/etc/default/inet_type\fR\fR
1068 .ad
1069 .RS 26n
1070 \fBDEFAULT_IP\fR setting
1071 .RE
1073 .SH SEE ALSO
1074 .sp
1075 .LP
1076 \fBarp\fR(1M), \fBdhcpinfo\fR(1), \fBdhcpagent\fR(1M), \fBifconfig\fR(1M),
1077 \fBiostat\fR(1M), \fBkstat\fR(1M), \fBmibiisa\fR(1M), \fBsavecore\fR(1M),
1078 \fBvmstat\fR(1M), \fBhosts\fR(4), \fBinet_type\fR(4), \fBnetworks\fR(4),
1079 \fBprotocols\fR(4), \fBservices\fR(4), \fBattributes\fR(5), \fBdhcp\fR(5),
1080 \fBkstat\fR(7D), \fBinet\fR(7P), \fBinet6\fR(7P)
1081 .sp
1082 .LP
1083 Droms, R., \fIRFC 2131, Dynamic Host Configuration Protocol\fR, Network Working
1084 Group, March 1997.
1085 .sp
1086 .LP
1087 Droms, R. \fIRFC 3315, Dynamic Host Configuration Protocol for IPv6
1088 (DHCPv6)\fR. Cisco Systems. July 2003.
1089 .SH NOTES
1090 .sp
1091 .LP
1092 When displaying interface information, \fBnetstat\fR honors the
1093 \fBDEFAULT_IP\fR setting in \fB/etc/default/inet_type\fR. If it is set to
1094 \fBIP_VERSION4\fR, then \fBnetstat\fR will omit information relating to IPv6
1095 interfaces, statistics, connections, routes and the like.
1096 .sp
1097 .LP
1098 However, you can override the \fBDEFAULT_IP\fR setting in
1099 \fB/etc/default/inet_type\fR on the command-line. For example, if you have used
1100 the command-line to explicitly request IPv6 information by using the
1101 \fBinet6\fR address family or one of the IPv6 protocols, it will override the
1102 \fBDEFAULT_IP\fR setting.
1103 .sp
1104 .LP
1105 If you need to examine network status information following a kernel crash, use
1106 the \fBmdb\fR(1) utility on the \fBsavecore\fR(1M) output.
1107 .sp
1108 .LP
1109 The \fBnetstat\fR utility obtains TCP statistics from the system by opening
1110 \fB/dev/tcp\fR and issuing queries. Because of this, \fBnetstat\fR might
1111 display an extra, unused connection in \fBIDLE\fR state when reporting
1112 connection status.
1113 .sp
1114 .LP
1115 Previous versions of \fBnetstat\fR had undocumented methods for reporting
1116 kernel statistics published using the \fBkstat\fR(7D) facility. This
1117 functionality has been removed. Use \fBkstat\fR(1M) instead.
1118 .sp
1119 .LP
1120 \fBnetstat\fR restricts its output to information that is relevant to the zone
1121 in which \fBnetstat\fR runs. (This is true for both shared-IP and exclusive-IP
1122 zones.)