Manual Pages
Table of Contents
na_netstat - show network status
netstat [ -anx ]
netstat -mnrs
netstat -i | -I interface [ -dn ] [ -f { wide | normal } ]
netstat -w interval [ -i | -I interface ] [ -dn ]
netstat [ -p protocol ]
netstat [ -T ]
The netstat command symbolically displays the contents of
various network-related data structures. There are a number
of output formats, depending on the options for the
information presented. The first form of the command displays
a list of active sockets for each protocol.
The second form presents the contents of one of the other
network data structures according to the option selected.
The third form will display cumulative statistics for all
interfaces or, with an interface specified using the -I
option, cumulative statistics for that interface. It will
also display the sum of the cumulative statistics for all
configured network interfaces.
The fourth form continuously displays information regarding
packet traffic on the interface that was configured
first, or with an interface specified using the -I option,
packet traffic for that interface. It will also display
the sum of the cumulative traffic information for all configured
network interfaces.
The fifth form displays statistics about the protocol
specified by protocol.
The sixth form displays statistics about the TCP offload
engine.
-
-a
- Show the state of all sockets; normally
sockets used by server processes are not
shown.
-
-M
- This option displays the network context
that each socket belongs to--"lg" for nonMP
context and a positive integer for MP
context. This option has effect only for
TCP sockets and when -a option is specified.
-
-B
- This option displays the total number of
bytes sent and received over each socket.
For big numbers, a letter such as `K', `M',
`G', `T', and `P' is suffixed--'K' for kilo
bytes, `M' for mega bytes, and so on. This
has effect only for TCP connections and
when -a option is specified.
-
-x
- Applicable only to the first form of this
command. Shows extended state information
for TCP connections in the ESTABLISHED
state. This includes information on whether
MAC address and interface caching ("Fastpath")
is in use for this connection (On,
Off, or Partial). For more information on
Fastpath, see the description of the option
ip.fastpath.enable in the na_options (1)
man page.
-
-d
- With either interface display (option -i or
an interval, as described below), show the
number of dropped packets.
-
-I interface
- Show information only about this interface.
When used in the third form with an inter_val
specified as described below, information
about the indicated interface is highlighted
in a separated column. (The
default interface highlighted is the first
interface configured into the system.)
-
-i
- Show the state of interfaces which have
been configured.
-
-f
- If the argument is wide then print the output
assuming a wide screen. If the argument
is normal then format output so as to fit
it within 80 columns. This option has an
effect only when used along with the -i
option. The default on the console/telnet
is normal and via rsh is wide.
-
-m
- Show statistics recorded by the memory management
routines for the network's private
pool of buffers.
-
-n
- Show network addresses as numbers. netstat
normally interprets addresses and attempts
to display them symbolically. This option
may be used with any of the display formats
that display network addresses.
-
-p protocol
- Show statistics about protocol , which is
one of tcp, udp, ip, icmp, ip6, or icmp6.
A null response typically means that there
are no interesting numbers to report. The
program will complain if protocol is
unknown or if there is no statistics routine
for it.
-
-s
- Show per-protocol statistics. If this
option is repeated, counters with a value
of zero are suppressed.
-
-r
- Show the routing tables. When -s is also
present, show routing statistics instead.
-
-T
- Show the TCP offload engine statistics.
-
-w wait
- Show network interface statistics at intervals
of wait seconds.
The default display, for TCP sockets, shows the local and
remote addresses, send window and send queue size (in
bytes), receive window and receive queue sizes (in bytes),
and the state of the connection. For UDP sockets, it
shows the local and remote addresses, and the send and
receive queue size (in bytes). Address formats are of the
form ``host.port'' or ``network.port'' if a socket's
address specifies a network but no specific host address.
If known, the host and network addresses are displayed
symbolically according to the data bases /etc/hosts and
/etc/networks, respectively. If a symbolic name for an
address is not known, or if the -n option is specified,
the address is printed numerically, according to the
address family. Unspecified, or ``wildcard'', addresses
and ports appear as ``*''.
The interface display specified by the -i or -I options
provides a table of cumulative statistics regarding packets
transferred, errors, and collisions. The network
addresses of the interface and the maximum transmission
unit (``mtu'') are also displayed. If the interface is
currently down, then a ``*'' is appended to the interface
name.
When an interval is specified, a summary of the interface
information consisting of packets transferred, errors, and
collisions is displayed.
The routing table display indicates the available routes
and their status. Each route consists of a destination
host or network and a gateway to use in forwarding packets.
The flags field shows a collection of information
about the route stored as binary choices; the flags are:
-
2
- Protocol-specific routing flag #2 (for ARP
entries, means that the entry is "published").
-
C
- Use of this route will cause a new route to
be generated and used.
-
D
- The route was created dynamically by a redirect.
-
G
- The route is to a gateway.
-
H
- The route is to a host (otherwise, it's to a
net).
-
L
- The route includes valid protocol to link
address translation.
-
M
- The route was modified dynamically by a
redirect.
-
R
- The route has timed out.
-
S
- The route was manually added with a route
command (see na_route(1)).
-
U
- The route is usable (``up'').
Direct routes are created for each interface attached to
the local host when an IP address for the interface is
configured or the filer is rebooted. The gateway field
for such entries shows the link number of the outgoing
interface (direct routes have no next hop), and the interface
field shows the name of the interface.
Host routes are created as needed for traffic to hosts
that are on directly attached subnets, and these routes
will time out based on the arp timeout. The gateway field
for such entries is the MAC address of the host. Note that
permanent host routes can also be created using the arp
command. For more information about arp see the arp(1)
manual page.
The refcnt field gives the current number of active uses
of the route. Connection oriented protocols normally hold
on to a single route for the duration of a connection
while connectionless protocols obtain a route whenever
they transmit to a destination. The use field provides a
count of the number of packets sent using that route. The
interface entry indicates the network interface utilized
for the route.
When netstat is invoked with the -w option and an interval
argument, it displays a running count of statistics
related to network interfaces. An obsolescent version of
this option used a numeric parameter with no option, and
is currently supported for backward compatibility. This
display consists of a column for the primary interface and
a column summarizing information for all interfaces. The
default primary interface is the first interface configured
into the system. The primary interface may be
replaced with another interface with the -I option. The
first line of each screen of information contains a summary
since the system was last rebooted. Subsequent lines
of output show values accumulated over the preceding
interval.
When netstat is invoked with the -T option, it displays
the TCP offload engine statistics for all the TOE cards in
the system. The statistics for each TOE device include
TCP, IP, mbufs received and mbufs transmitted.
Each filer in a cluster maintains its own socket, routing,
and interface tables. If a filer is not in partner mode,
the netstat command displays the information in the tables
on the live filer. If a filer is in partner mode, it executes
the netstat command on behalf of the failed filer,
which displays the information in the tables on the failed
filer.
However, in takeover mode, counters displayed by the netstat
command represent the combined statistics of the live
filer and the failed filer. For example, from the statistics,
you cannot determine how many packets were received
on behalf of the live filer and how many packets were
received on behalf of the failed filer.
In takeover mode, network interface names used by the
failed filer are mapped to network interfaces on the live
filer. When you enter the netstat command in partner
mode, the network interface names displayed are the network
interface names on the failed filer.
If you enter the netstat command in partner mode, you
might see a plus sign (+) appended to some network
interface names in the output. The plus sign indicates
that the network interfaces are used as shared interfaces.
Statistics displayed by the netstat command are cumulative.
That is, a giveback operation does not zero out the
statistics. After giving back the virtual filer's
resources, the live filer does not subtract the statistics
about operations it performed on behalf of the failed
filer in takeover mode.
When run from a vfiler context, (e.g. via the vfiler run
command), netstat operates on the concerned vfiler. In
this mode, only the -r and the -n options are allowed. As
currently all vfilers in an ipspace share a routing table,
netstat -r [-n] in a vfiler context prints the routing
table of the vfiler's ipspace.
-
/etc/hosts
- host name data base
-
/etc/networks
- network name data base
na_ifconfig(1), na_nfsstat(1), na_partner(1), na_sysstat(1),
na_ipspace(1), na_vfiler(1), na_arp(1),
na_hosts(5), na_networks(5)
Table of Contents