| blob | d6215191014e1246eac95f4952dfc47a5cc4794e |
1 '\" te
2 .\" Copyright (C) 2002, Sun Microsystems, Inc. All Rights Reserved
3 .\" Copyright 1989 AT&T
4 .\" Copyright (c) 1983 Regents of the University of California. All rights reserved. The Berkeley software License Agreement specifies the terms and conditions for redistribution.
5 .TH NETSTAT 8 "Sep 02, 2015"
6 .SH NAME
7 netstat \- show network status
8 .SH SYNOPSIS
9 .LP
10 .nf
11 \fBnetstat\fR [\fB-anv\fR] [\fB-f\fR \fIaddress_family\fR] [\fB-P\fR \fIprotocol\fR]
12 .fi
14 .LP
15 .nf
16 \fBnetstat\fR \fB-g\fR [\fB-nv\fR] [\fB-f\fR \fIaddress_family\fR]
17 .fi
19 .LP
20 .nf
21 \fBnetstat\fR \fB-p\fR [\fB-n\fR] [\fB-f\fR \fIaddress_family\fR]
22 .fi
24 .LP
25 .nf
26 \fBnetstat\fR \fB-s\fR [\fB-f\fR \fIaddress_family\fR] [\fB-P\fR \fIprotocol\fR]
27 [\fB-T\fR u | d ] [\fIinterval\fR [\fIcount\fR]]
28 .fi
30 .LP
31 .nf
32 \fBnetstat\fR \fB-m\fR [\fB-T\fR u | d ] [\fB-v\fR] [\fIinterval\fR [\fIcount\fR]]
33 .fi
35 .LP
36 .nf
37 \fBnetstat\fR \fB-i\fR [\fB-I\fR \fIinterface\fR] [\fB-an\fR] [\fB-f\fR \fIaddress_family\fR]
38 [\fB-T\fR u | d ] [\fIinterval\fR [\fIcount\fR]]
39 .fi
41 .LP
42 .nf
43 \fBnetstat\fR \fB-r\fR [\fB-anv\fR] [\fB-f\fR \fIaddress_family\fR | \fIfilter\fR]
44 .fi
46 .LP
47 .nf
48 \fBnetstat\fR \fB-M\fR [\fB-ns\fR] [\fB-f\fR \fIaddress_family\fR]
49 .fi
51 .LP
52 .nf
53 \fBnetstat\fR \fB-D\fR [\fB-I\fR \fIinterface\fR] [\fB-f\fR \fIaddress_family\fR]
54 .fi
56 .SH DESCRIPTION
57 .LP
58 The \fBnetstat\fR command displays the contents of certain network-related data
59 structures in various formats, depending on the options you select.
60 .LP
61 The \fBnetstat\fR command has the several forms shown in the SYNOPSIS section,
62 above, listed as follows:
63 .RS +4
64 .TP
65 .ie t \(bu
66 .el o
67 The first form of the command (with no required arguments) displays a list of
68 active sockets for each protocol.
69 .RE
70 .RS +4
71 .TP
72 .ie t \(bu
73 .el o
74 The second, third, and fourth forms (\fB-g\fR, \fB-p\fR, and \fB-s\fR options)
75 display information from various network data structures.
76 .RE
77 .RS +4
78 .TP
79 .ie t \(bu
80 .el o
81 The fifth form (\fB-m\fR option) displays STREAMS memory statistics.
82 .RE
83 .RS +4
84 .TP
85 .ie t \(bu
86 .el o
87 The sixth form (\fB-i\fR option) shows the state of the interfaces.
88 .RE
89 .RS +4
90 .TP
91 .ie t \(bu
92 .el o
93 The seventh form (\fB-r\fR option) displays the routing table.
94 .RE
95 .RS +4
96 .TP
97 .ie t \(bu
98 .el o
99 The eighth form (\fB-M\fR option) displays the multicast routing table.
100 .RE
101 .RS +4
102 .TP
103 .ie t \(bu
104 .el o
105 The ninth form (\fB-D\fR option) displays the state of \fBDHCP\fR on one or all
106 interfaces.
107 .RE
108 .LP
109 These forms are described in greater detail below.
110 .LP
111 With no arguments (the first form), \fBnetstat\fR displays connected sockets
112 for \fBPF_INET\fR, \fBPF_INET6\fR, and \fBPF_UNIX\fR, unless modified otherwise
113 by the \fB-f\fR option.
114 .SH OPTIONS
115 .ne 2
116 .na
117 \fB\fB-a\fR\fR
118 .ad
119 .sp .6
120 .RS 4n
121 Show the state of all sockets, all routing table entries, or all interfaces,
122 both physical and logical. Normally, listener sockets used by server processes
123 are not shown. Under most conditions, only interface, host, network, and
124 default routes are shown and only the status of physical interfaces is shown.
125 .RE
127 .sp
128 .ne 2
129 .na
130 \fB\fB-f\fR \fIaddress_family\fR\fR
131 .ad
132 .sp .6
133 .RS 4n
134 Limit all displays to those of the specified \fIaddress_family\fR. The value of
135 \fIaddress_family\fR can be one of the following:
136 .sp
137 .ne 2
138 .na
139 \fB\fBinet\fR\fR
140 .ad
141 .RS 9n
142 For the \fBAF_INET\fR address family showing IPv4 information.
143 .RE
145 .sp
146 .ne 2
147 .na
148 \fB\fBinet6\fR\fR
149 .ad
150 .RS 9n
151 For the \fBAF_INET6\fR address family showing IPv6 information.
152 .RE
154 .sp
155 .ne 2
156 .na
157 \fB\fBunix\fR\fR
158 .ad
159 .RS 9n
160 For the \fBAF_UNIX\fR address family.
161 .RE
163 .RE
165 .sp
166 .ne 2
167 .na
168 \fB\fB-f\fR \fIfilter\fR\fR
169 .ad
170 .sp .6
171 .RS 4n
172 With \fB-r\fR only, limit the display of routes to those matching the specified
173 filter. A filter rule consists of a \fIkeyword\fR:\fIvalue\fR pair. The known
174 keywords and the value syntax are:
175 .sp
176 .ne 2
177 .na
178 \fB\fBaf:\fR{\fBinet\fR|\fBinet6\fR|\fBunix\fR|\fInumber\fR}\fR
179 .ad
180 .sp .6
181 .RS 4n
182 Selects an address family. This is identical to \fB-f\fR \fIaddress_family\fR
183 and both syntaxes are supported.
184 .RE
186 .sp
187 .ne 2
188 .na
189 \fB\fBoutif\fR:{\fIname\fR|\fIifIndex\fR|\fBany\fR|\fBnone\fR}\fR
190 .ad
191 .sp .6
192 .RS 4n
193 Selects an output interface. You can specify the interface by name (such as
194 \fBhme0\fR) or by \fBifIndex\fR number (for example, \fB2\fR). If \fBany\fR is
195 used, the filter matches all routes having a specified interface (anything
196 other than null). If \fBnone\fR is used, the filter matches all routes having a
197 null interface. Note that you can view the index number (\fIifIndex\fR) for an
198 interface with the \fB-a\fR option of \fBifconfig\fR(8).
199 .RE
201 .sp
202 .ne 2
203 .na
204 \fB\fBdst\fR:{\fIip-address\fR[/\fImask\fR]|\fBany\fR|\fBnone\fR}\fR
205 .ad
206 .sp .6
207 .RS 4n
208 Selects a destination IP address. If specified with a mask length, then any
209 routes with matching or longer (more specific) masks are selected. If \fBany\fR
210 is used, then all but addresses but 0 are selected. If \fBnone\fR is used, then
211 address 0 is selected.
212 .RE
214 .sp
215 .ne 2
216 .na
217 \fB\fBflags:\fR[\fB+ -\fR]?[\fBABDGHLMSU\fR]\fB+\fR\fR
218 .ad
219 .sp .6
220 .RS 4n
221 Selects routes tagged with the specified flags. By default, the flags as
222 specified must be set in order to match. With a leading \fB+\fR, the flags
223 specified must be set but others are ignored. With a leading \fB-\fR, the flags
224 specified must not be set and others are permitted.
225 .RE
227 You can specify multiple instances of \fB-f\fR to specify multiple filters. For
228 example:
229 .sp
230 .in +2
231 .nf
232 % netstat -nr -f outif:hme0 -f outif:hme1 -f dst:10.0.0.0/8
233 .fi
234 .in -2
235 .sp
237 The preceding command displays routes within network 10.0.0.0/8, with mask
238 length 8 or greater, and an output interface of either \fBhme0\fR or
239 \fBhme1\fR, and excludes all other routes.
240 .RE
242 .sp
243 .ne 2
244 .na
245 \fB\fB-g\fR\fR
246 .ad
247 .sp .6
248 .RS 4n
249 Show the multicast group memberships for all interfaces. If the \fB-v\fR option
250 is included, source-specific membership information is also displayed. See
251 DISPLAYS, below.
252 .RE
254 .sp
255 .ne 2
256 .na
257 \fB\fB-i\fR\fR
258 .ad
259 .sp .6
260 .RS 4n
261 Show the state of the interfaces that are used for \fBIP\fR traffic. Normally
262 this shows statistics for the physical interfaces. When combined with the
263 \fB-a\fR option, this will also report information for the logical interfaces.
264 See \fBifconfig\fR(8).
265 .RE
267 .sp
268 .ne 2
269 .na
270 \fB\fB-m\fR\fR
271 .ad
272 .sp .6
273 .RS 4n
274 Show the STREAMS memory statistics.
275 .RE
277 .sp
278 .ne 2
279 .na
280 \fB\fB-n\fR\fR
281 .ad
282 .sp .6
283 .RS 4n
284 Show network addresses as numbers. \fBnetstat\fR normally displays addresses as
285 symbols. This option may be used with any of the display formats.
286 .RE
288 .sp
289 .ne 2
290 .na
291 \fB\fB-p\fR\fR
292 .ad
293 .sp .6
294 .RS 4n
295 Show the net to media tables. See DISPLAYS, below.
296 .RE
298 .sp
299 .ne 2
300 .na
301 \fB\fB-r\fR\fR
302 .ad
303 .sp .6
304 .RS 4n
305 Show the routing tables. Normally, only interface, host, network, and default
306 routes are shown, but when this option is combined with the \fB-a\fR option,
307 all routes will be displayed, including cache. If you have not set up a
308 multicast route, \fB-ra\fR might not show any multicast routing entries,
309 although the kernel will derive such an entry if needed.
310 .RE
312 .sp
313 .ne 2
314 .na
315 \fB\fB-s\fR\fR
316 .ad
317 .sp .6
318 .RS 4n
319 Show per-protocol statistics. When used with the \fB-M\fR option, show
320 multicast routing statistics instead. When used with the \fB-a\fR option,
321 per-interface statistics will be displayed, when available, in addition to
322 statistics global to the system. See DISPLAYS, below.
323 .RE
325 .sp
326 .ne 2
327 .na
328 \fB\fB-T\fR \fBu\fR | \fBd\fR\fR
329 .ad
330 .sp .6
331 .RS 4n
332 Display a time stamp.
333 .sp
334 Specify \fBu\fR for a printed representation of the internal representation of
335 time. See \fBtime\fR(2). Specify \fBd\fR for standard date format. See
336 \fBdate\fR(1).
337 .RE
339 .sp
340 .ne 2
341 .na
342 \fB\fB-v\fR\fR
343 .ad
344 .sp .6
345 .RS 4n
346 Verbose. Show additional information for the sockets, STREAMS memory
347 statistics, routing table, and multicast group memberships.
348 .RE
350 .sp
351 .ne 2
352 .na
353 \fB\fB-I\fR \fIinterface\fR\fR
354 .ad
355 .sp .6
356 .RS 4n
357 Show the state of a particular interface. \fIinterface\fR can be any valid
358 interface such as \fBhme0\fR or \fBeri0\fR. Normally, the status and statistics
359 for physical interfaces are displayed. When this option is combined with the
360 \fB-a\fR option, information for the logical interfaces is also reported.
361 .RE
363 .sp
364 .ne 2
365 .na
366 \fB\fB-M\fR\fR
367 .ad
368 .sp .6
369 .RS 4n
370 Show the multicast routing tables. When used with the \fB-s\fR option, show
371 multicast routing statistics instead.
372 .RE
374 .sp
375 .ne 2
376 .na
377 \fB\fB-P\fR \fIprotocol\fR\fR
378 .ad
379 .sp .6
380 .RS 4n
381 Limit display of statistics or state of all sockets to those applicable to
382 \fIprotocol\fR. The protocol can be one of \fBip\fR, \fBipv6\fR, \fBicmp\fR,
383 \fBicmpv6\fR, \fBicmp\fR, \fBicmpv6\fR, \fBigmp\fR, \fBudp\fR, \fBtcp\fR,
384 \fBrawip\fR. \fBrawip\fR can also be specified as \fBraw\fR. The command
385 accepts protocol options only as all lowercase.
386 .RE
388 .sp
389 .ne 2
390 .na
391 \fB\fB-D\fR\fR
392 .ad
393 .sp .6
394 .RS 4n
395 Show the status of \fBDHCP\fR configured interfaces.
396 .RE
398 .SH OPERANDS
399 .ne 2
400 .na
401 \fB\fIinterval\fR\fR
402 .ad
403 .RS 12n
404 Display statistics accumulated since last display every \fIinterval\fR seconds,
405 repeating forever, unless \fIcount\fR is specified. When invoked with
406 \fIinterval\fR, the first row of netstat output shows statistics accumulated
407 since last reboot.
408 .sp
409 The following options support \fIinterval\fR: \fB-i\fR, \fB-m\fR, \fB-s\fR and
410 \fB-Ms\fR. Some values are configuration parameters and are just redisplayed at
411 each interval.
412 .RE
414 .sp
415 .ne 2
416 .na
417 \fB\fIcount\fR\fR
418 .ad
419 .RS 12n
420 Display interface statistics the number of times specified by \fIcount\fR, at
421 the interval specified by \fIinterval\fR.
422 .RE
424 .SH DISPLAYS
425 .SS "Active Sockets (First Form)"
426 .LP
427 The display for each active socket shows the local and remote address, the send
428 and receive queue sizes (in bytes), the send and receive windows (in bytes),
429 and the internal state of the protocol.
430 .LP
431 The symbolic format normally used to display socket addresses is either:
432 .sp
433 .in +2
434 .nf
435 \fBhostname\fR.\fIport\fR
436 .fi
437 .in -2
438 .sp
439 when the name of the host is specified, or
440 .sp
441 .in +2
442 .nf
443 \fInetwork\fR.\fIport\fR
444 .fi
445 .in -2
446 .sp
447 if a socket address specifies a network but no specific host.
448 .LP
449 The numeric host address or network number associated with the socket is used
450 to look up the corresponding symbolic hostname or network name in the
451 \fIhosts\fR or \fInetworks\fR database.
452 .LP
453 If the network or hostname for an address is not known, or if the \fB-n\fR
454 option is specified, the numerical network address is shown. Unspecified, or
455 "wildcard", addresses and ports appear as an asterisk (\fB*\fR). For more
456 information regarding the Internet naming conventions, refer to \fBinet\fR(7P)
457 and \fBinet6\fR(7P).
458 .LP
459 For SCTP sockets, because an endpoint can be represented by multiple addresses,
460 the verbose option (\fB-v\fR) displays the list of all the local and remote
461 addresses.
462 .SS "\fITCP Sockets\fR"
463 .LP
464 The possible state values for \fBTCP\fR sockets are as follows:
465 .sp
466 .ne 2
467 .na
468 \fB\fBBOUND\fR\fR
469 .ad
470 .RS 16n
471 Bound, ready to connect or listen.
472 .RE
474 .sp
475 .ne 2
476 .na
477 \fB\fBCLOSED\fR\fR
478 .ad
479 .RS 16n
480 Closed. The socket is not being used.
481 .RE
483 .sp
484 .ne 2
485 .na
486 \fB\fBCLOSING\fR\fR
487 .ad
488 .RS 16n
489 Closed, then remote shutdown; awaiting acknowledgment.
490 .RE
492 .sp
493 .ne 2
494 .na
495 \fB\fBCLOSE_WAIT\fR\fR
496 .ad
497 .RS 16n
498 Remote shutdown; waiting for the socket to close.
499 .RE
501 .sp
502 .ne 2
503 .na
504 \fB\fBESTABLISHED\fR\fR
505 .ad
506 .RS 16n
507 Connection has been established.
508 .RE
510 .sp
511 .ne 2
512 .na
513 \fB\fBFIN_WAIT_1\fR\fR
514 .ad
515 .RS 16n
516 Socket closed; shutting down connection.
517 .RE
519 .sp
520 .ne 2
521 .na
522 \fB\fBFIN_WAIT_2\fR\fR
523 .ad
524 .RS 16n
525 Socket closed; waiting for shutdown from remote.
526 .RE
528 .sp
529 .ne 2
530 .na
531 \fB\fBIDLE\fR\fR
532 .ad
533 .RS 16n
534 Idle, opened but not bound.
535 .RE
537 .sp
538 .ne 2
539 .na
540 \fB\fBLAST_ACK\fR\fR
541 .ad
542 .RS 16n
543 Remote shutdown, then closed; awaiting acknowledgment.
544 .RE
546 .sp
547 .ne 2
548 .na
549 \fB\fBLISTEN\fR\fR
550 .ad
551 .RS 16n
552 Listening for incoming connections.
553 .RE
555 .sp
556 .ne 2
557 .na
558 \fB\fBSYN_RECEIVED\fR\fR
559 .ad
560 .RS 16n
561 Initial synchronization of the connection under way.
562 .RE
564 .sp
565 .ne 2
566 .na
567 \fB\fBSYN_SENT\fR\fR
568 .ad
569 .RS 16n
570 Actively trying to establish connection.
571 .RE
573 .sp
574 .ne 2
575 .na
576 \fB\fBTIME_WAIT\fR\fR
577 .ad
578 .RS 16n
579 Wait after close for remote shutdown retransmission.
580 .RE
582 .SS "\fISCTP Sockets\fR"
583 .LP
584 The possible state values for SCTP sockets are as follows:
585 .sp
586 .ne 2
587 .na
588 \fB\fBCLOSED\fR\fR
589 .ad
590 .RS 21n
591 Closed. The socket is not being used.
592 .RE
594 .sp
595 .ne 2
596 .na
597 \fB\fBLISTEN\fR\fR
598 .ad
599 .RS 21n
600 Listening for incoming associations.
601 .RE
603 .sp
604 .ne 2
605 .na
606 \fB\fBESTABLISHED\fR\fR
607 .ad
608 .RS 21n
609 Association has been established.
610 .RE
612 .sp
613 .ne 2
614 .na
615 \fB\fBCOOKIE_WAIT\fR\fR
616 .ad
617 .RS 21n
618 \fBINIT\fR has been sent to the peer, awaiting acknowledgment.
619 .RE
621 .sp
622 .ne 2
623 .na
624 \fB\fBCOOKIE_ECHOED\fR\fR
625 .ad
626 .RS 21n
627 State cookie from the INIT-ACK has been sent to the peer, awaiting
628 acknowledgement.
629 .RE
631 .sp
632 .ne 2
633 .na
634 \fB\fBSHUTDOWN_PENDING\fR\fR
635 .ad
636 .RS 21n
637 \fBSHUTDOWN\fR has been received from the upper layer, awaiting acknowledgement
638 of all outstanding \fBDATA\fR from the peer.
639 .RE
641 .sp
642 .ne 2
643 .na
644 \fB\fBSHUTDOWN_SENT\fR\fR
645 .ad
646 .RS 21n
647 All outstanding data has been acknowledged in the \fBSHUTDOWN_SENT\fR state.
648 \fBSHUTDOWN\fR has been sent to the peer, awaiting acknowledgement.
649 .RE
651 .sp
652 .ne 2
653 .na
654 \fB\fBSHUTDOWN_RECEIVED\fR\fR
655 .ad
656 .RS 21n
657 \fBSHUTDOWN\fR has been received from the peer, awaiting acknowledgement of all
658 outstanding \fBDATA\fR.
659 .RE
661 .sp
662 .ne 2
663 .na
664 \fB\fBSHUTDOWN_ACK_SENT\fR\fR
665 .ad
666 .RS 21n
667 All outstanding data has been acknowledged in the \fBSHUTDOWN_RECEIVED\fR
668 state. \fBSHUTDOWN_ACK\fR has been sent to the peer.
669 .RE
671 .SS "Network Data Structures (Second Through Fifth Forms)"
672 .LP
673 The form of the display depends upon which of the \fB-g\fR, \fB-m\fR, \fB-p\fR,
674 or \fB-s\fR options you select.
675 .sp
676 .ne 2
677 .na
678 \fB\fB-g\fR\fR
679 .ad
680 .RS 6n
681 Displays the list of multicast group membership.
682 .RE
684 .sp
685 .ne 2
686 .na
687 \fB\fB-m\fR\fR
688 .ad
689 .RS 6n
690 Displays the memory usage, for example, STREAMS mblks.
691 .RE
693 .sp
694 .ne 2
695 .na
696 \fB\fB-p\fR\fR
697 .ad
698 .RS 6n
699 Displays the net to media mapping table. For IPv4, the address resolution table
700 is displayed. See \fBarp\fR(8). For IPv6, the neighbor cache is displayed.
701 .RE
703 .sp
704 .ne 2
705 .na
706 \fB\fB-s\fR\fR
707 .ad
708 .RS 6n
709 Displays the statistics for the various protocol layers.
710 .RE
712 .sp
713 .LP
714 The statistics use the MIB specified variables. The defined values for
715 \fBipForwarding\fR are:
716 .sp
717 .ne 2
718 .na
719 \fB\fBforwarding (1)\fR\fR
720 .ad
721 .RS 21n
722 Acting as a gateway.
723 .RE
725 .sp
726 .ne 2
727 .na
728 \fB\fBnot-forwarding (2)\fR\fR
729 .ad
730 .RS 21n
731 Not acting as a gateway.
732 .RE
734 .sp
735 .LP
736 The IPv6 and ICMPv6 protocol layers maintain per-interface statistics. If the
737 \fB-a\fR option is specified with the \fB-s\fR option, then the per-interface
738 statistics as well as the total sums are displayed. Otherwise, just the sum of
739 the statistics are shown.
740 .LP
741 For the second, third, and fourth forms of the command, you must specify at
742 least \fB-g\fR, \fB-p\fR, or \fB-s\fR. You can specify any combination of these
743 options. You can also specify \fB-m\fR (the fifth form) with any set of the
744 \fB-g\fR, \fB-p\fR, and \fB-s\fR options. If you specify more than one of these
745 options, \fBnetstat\fR displays the information for each one of them.
746 .SS "Interface Status (Sixth Form)"
747 .LP
748 The interface status display lists information for all current interfaces, one
749 interface per line. If an interface is specified using the \fB-I\fR option, it
750 displays information for only the specified interface.
751 .LP
752 The list consists of the interface name, \fBmtu\fR (maximum transmission unit,
753 or maximum packet size)(see \fBifconfig\fR(8)), the network to which the
754 interface is attached, addresses for each interface, and counter associated
755 with the interface. The counters show the number of input packets, input
756 errors, output packets, output errors, and collisions, respectively. For
757 Point-to-Point interfaces, the Net/Dest field is the name or address on the
758 other side of the link.
759 .LP
760 If the \fB-a\fR option is specified with either the \fB-i\fR option or the
761 \fB-I\fR option, then the output includes names of the physical interface(s),
762 counts for input packets and output packets for each logical interface, plus
763 additional information.
764 .LP
765 If the \fB-n\fR option is specified, the list displays the IP address instead
766 of the interface name.
767 .LP
768 If an optional \fIinterval\fR is specified, the output will be continually
769 displayed in \fIinterval\fR seconds until interrupted by the user or until
770 \fIcount\fR is reached. See OPERANDS.
771 .LP
772 The physical interface is specified using the \fB-I\fR option. When used with
773 the \fIinterval\fR operand, output for the \fB-I\fR option has the following
774 format:
775 .sp
776 .in +2
777 .nf
778 input eri0 output input (Total) output
779 packets errs packets errs colls packets errs packets errs colls
780 227681 0 659471 1 502 261331 0 99597 1 502
781 10 0 0 0 0 10 0 0 0 0
782 8 0 0 0 0 8 0 0 0 0
783 10 0 2 0 0 10 0 2 0 0
784 .fi
785 .in -2
786 .sp
787 .LP
788 If the input interface is not specified, the first interface of address family
789 \fBinet\fR or \fBinet6\fR will be displayed.
790 .SS "Routing Table (Seventh Form)"
791 .LP
792 The routing table display lists the available routes and the status of each.
793 Each route consists of a destination host or network, and a gateway to use in
794 forwarding packets. The \fIflags\fR column shows the status of the route. These
795 flags are as follows:
796 .sp
797 .ne 2
798 .na
799 \fB\fBU\fR\fR
800 .ad
801 .RS 5n
802 Indicates route is \fBup\fR.
803 .RE
805 .sp
806 .ne 2
807 .na
808 \fB\fBG\fR\fR
809 .ad
810 .RS 5n
811 Route is to a gateway.
812 .RE
814 .sp
815 .ne 2
816 .na
817 \fB\fBH\fR\fR
818 .ad
819 .RS 5n
820 Route is to a host and not a network.
821 .RE
823 .sp
824 .ne 2
825 .na
826 \fB\fBS\fR\fR
827 .ad
828 .RS 5n
829 Route was established using the \fB-setsrc\fR option.
830 .RE
832 .sp
833 .ne 2
834 .na
835 \fB\fBD\fR\fR
836 .ad
837 .RS 5n
838 Route was created dynamically by a redirect.
839 .RE
841 .sp
842 .LP
843 If the \fB-a\fR option is specified, there will be routing entries with the
844 following flags:
845 .sp
846 .ne 2
847 .na
848 \fB\fBA\fR\fR
849 .ad
850 .RS 5n
851 Combined routing and address resolution entries.
852 .RE
854 .sp
855 .ne 2
856 .na
857 \fB\fBB\fR\fR
858 .ad
859 .RS 5n
860 Broadcast addresses.
861 .RE
863 .sp
864 .ne 2
865 .na
866 \fB\fBL\fR\fR
867 .ad
868 .RS 5n
869 Local addresses for the host.
870 .RE
872 .LP
873 Interface routes are created for each interface attached to the local host; the
874 gateway field for such entries shows the address of the outgoing interface.
875 .LP
876 The \fBuse\fR column displays the number of packets sent using a combined
877 routing and address resolution (\fBA\fR) or a broadcast (\fBB\fR) route. For a
878 local (\fBL\fR) route, this count is the number of packets received, and for
879 all other routes it is the number of times the routing entry has been used to
880 create a new combined route and address resolution entry.
881 .LP
882 The \fIinterface\fR entry indicates the network interface utilized for the
883 route.
884 .SS "Multicast Routing Tables (Eighth Form)"
885 .LP
886 The multicast routing table consists of the virtual interface table and the
887 actual routing table.
888 .SS "DHCP Interface Information (Ninth Form)"
889 .LP
890 The \fBDHCP\fR interface information consists of the interface name, its
891 current state, lease information, packet counts, and a list of flags.
892 .LP
893 The states correlate with the specifications set forth in \fIRFC 2131\fR.
894 .LP
895 Lease information includes:
896 .RS +4
897 .TP
898 .ie t \(bu
899 .el o
900 when the lease began;
901 .RE
902 .RS +4
903 .TP
904 .ie t \(bu
905 .el o
906 when lease renewal will begin; and
907 .RE
908 .RS +4
909 .TP
910 .ie t \(bu
911 .el o
912 when the lease will expire.
913 .RE
914 .sp
915 .LP
916 The flags currently defined include:
917 .sp
918 .ne 2
919 .na
920 \fB\fBBOOTP\fR\fR
921 .ad
922 .RS 11n
923 The interface has a lease obtained through \fBBOOTP\fR (IPv4 only).
924 .RE
926 .sp
927 .ne 2
928 .na
929 \fB\fBBUSY\fR\fR
930 .ad
931 .RS 11n
932 The interface is busy with a \fBDHCP\fR transaction.
933 .RE
935 .sp
936 .ne 2
937 .na
938 \fB\fBPRIMARY\fR\fR
939 .ad
940 .RS 11n
941 The interface is the primary interface. See \fBdhcpinfo\fR(1) and
942 \fBifconfig\fR(8).
943 .RE
945 .sp
946 .ne 2
947 .na
948 \fB\fBFAILED\fR\fR
949 .ad
950 .RS 11n
951 The interface is in failure state and must be manually restarted.
952 .RE
954 .LP
955 Packet counts are maintained for the number of packets sent, the number of
956 packets received, and the number of lease offers declined by the \fBDHCP\fR
957 client. All three counters are initialized to zero and then incremented while
958 obtaining a lease. The counters are reset when the period of lease renewal
959 begins for the interface. Thus, the counters represent either the number of
960 packets sent, received, and declined while obtaining the current lease, or the
961 number of packets sent, received, and declined while attempting to obtain a
962 future lease.
963 .SH FILES
964 .ne 2
965 .na
966 \fB\fB/etc/default/inet_type\fR\fR
967 .ad
968 .RS 26n
969 \fBDEFAULT_IP\fR setting
970 .RE
972 .SH SEE ALSO
973 .LP
974 \fBarp\fR(8), \fBdhcpinfo\fR(1), \fBdhcpagent\fR(8), \fBifconfig\fR(8),
975 \fBiostat\fR(8), \fBkstat\fR(8), \fBmibiisa\fR(8), \fBndp\fR(8), \fBsavecore\fR(8),
976 \fBvmstat\fR(8), \fBhosts\fR(4), \fBinet_type\fR(4), \fBnetworks\fR(4),
977 \fBprotocols\fR(4), \fBservices\fR(4), \fBattributes\fR(5), \fBdhcp\fR(5),
978 \fBkstat\fR(7D), \fBinet\fR(7P), \fBinet6\fR(7P)
979 .sp
980 .LP
981 Droms, R., \fIRFC 2131, Dynamic Host Configuration Protocol\fR, Network Working
982 Group, March 1997.
983 .sp
984 .LP
985 Droms, R. \fIRFC 3315, Dynamic Host Configuration Protocol for IPv6
986 (DHCPv6)\fR. Cisco Systems. July 2003.
987 .SH NOTES
988 .LP
989 When displaying interface information, \fBnetstat\fR honors the
990 \fBDEFAULT_IP\fR setting in \fB/etc/default/inet_type\fR. If it is set to
991 \fBIP_VERSION4\fR, then \fBnetstat\fR will omit information relating to IPv6
992 interfaces, statistics, connections, routes and the like.
993 .LP
994 However, you can override the \fBDEFAULT_IP\fR setting in
995 \fB/etc/default/inet_type\fR on the command-line. For example, if you have used
996 the command-line to explicitly request IPv6 information by using the
997 \fBinet6\fR address family or one of the IPv6 protocols, it will override the
998 \fBDEFAULT_IP\fR setting.
999 .LP
1000 If you need to examine network status information following a kernel crash, use
1001 the \fBmdb\fR(1) utility on the \fBsavecore\fR(8) output.
1002 .LP
1003 The \fBnetstat\fR utility obtains TCP statistics from the system by opening
1004 \fB/dev/tcp\fR and issuing queries. Because of this, \fBnetstat\fR might
1005 display an extra, unused connection in \fBIDLE\fR state when reporting
1006 connection status.
1007 .LP
1008 Previous versions of \fBnetstat\fR had undocumented methods for reporting
1009 kernel statistics published using the \fBkstat\fR(7D) facility. This
1010 functionality has been removed. Use \fBkstat\fR(8) instead.
1011 .LP
1012 \fBnetstat\fR restricts its output to information that is relevant to the zone
1013 in which \fBnetstat\fR runs. (This is true for both shared-IP and exclusive-IP
1014 zones.)