Manual Pages
Table of Contents
na_netstat - Shows network status.
netstat [ -anx ]
netstat -mnrs
netstat -i | -I interface [ -dn ] [ -f { wide | normal } ]
netstat -w interval [ -i | -I interface ] [ -dn ]
netstat [ -p protocol ]
netstat [ -p ip6 -I interface ]
netstat [ -p icmp6 -I interface ]
netstat [ -T ]
The netstat command symbolically displays the contents of
various network-related data structures. There are a number
of output formats, depending on the options for the
information presented. The first form of the command displays
a list of active sockets for each protocol.
The second form presents the contents of one of the other
network data structures according to the option selected.
The third form will display cumulative statistics for all
interfaces or, with an interface specified using the -I
option, cumulative statistics for that interface. It will
also display the sum of the cumulative statistics for all
configured network interfaces.
The fourth form continuously displays information regarding
packet traffic on the interface that was configured
first, or with an interface specified using the -I option,
packet traffic for that interface. It will also display
the sum of the cumulative traffic information for all configured
network interfaces.
The fifth form displays statistics about the protocol
specified by protocol.
The sixth form displays statistics about the TCP offload
engine.
- -a
- Show the state of all sockets; normally
sockets used by server processes are not
shown.
- -M
- This option displays the network context
that each socket belongs to--"lg" for nonMP
context and a positive integer for MP
context. This option has effect only for
TCP sockets and when -a option is specified.
- -B
- This option displays the total number of
bytes sent and received over each socket.
For big numbers, a letter such as `K', `M',
`G', `T', and `P' is suffixed--'K' for
kilobytes, `M' for megabytes, and so on.
This has effect only for TCP connections
and when -a option is specified.
- -C
- This option displays the congestion window
and the slow start threshold size for each
socket. This has effect only for TCP connections.
- -U
- This option displays the time since the
last upcall was made by the network stack
and time since the last read was done on
the socket. This has effect only for TCP
connections.
- -x
- Applicable only to the first form of this
command. Shows extended state information
for TCP connections in the ESTABLISHED
state. This includes information on whether
MAC address and interface caching ("Fastpath")
is in use for this connection (On,
Off, or Partial). Partial is not a settable
value, it is set automatically under
certain conditions. It means that fastpath
uses interface caching but not mac caching
(this will allow most of the benefits of
fastpath even in a Windows NT load-balancing/asymmetric
route environment). For
more information on Fastpath, see the
description of the option ip.fastpath.enable
in the na_options (1) man page.
- -d
- With either interface display (option -i or
an interval, as described below), show the
number of dropped packets.
- -I interface
- Show information only about this interface.
When used in the third form with an
interval specified as described below,
information about the indicated interface
is highlighted in a separated column. (The
default interface highlighted is the first
interface configured into the system.)
- -i
- Show the state of interfaces which have
been configured.
- -f
- If the argument is wide then print the output
assuming a wide screen. If the argument
is normal then format output so as to fit
it within 80 columns. This option has an
effect only when used along with the -i
option. The default on the console/telnet
is normal while the default via rsh is
wide.
- -m
- Show statistics recorded by the memory management
routines for the network's private
pool of buffers.
- -n
- Show network addresses as numbers. netstat
normally interprets addresses and attempts
to display them symbolically. This option
may be used with any of the display formats
that display network addresses.
- -p protocol
- Show statistics about protocol, which is
one of tcp, udp, ip, icmp, ip6, or icmp6.
A null response typically means that there
are no interesting numbers to report. The
program will complain if protocol is
unknown or if there is no statistics routine
for it.
- -s
- Show per-protocol statistics. If this
option is repeated, counters with a value
of zero are suppressed.
- -r
- Show the routing tables. When -s is also
present, show routing statistics instead.
- -T
- Show the TCP offload engine statistics.
- -w wait
- Show network interface statistics at intervals
of wait seconds.
The default display, for TCP sockets, shows the local and
remote addresses, send window and send queue size (in
bytes), receive window and receive queue sizes (in bytes),
and the state of the connection. For UDP sockets, it
shows the local and remote addresses, and the send and
receive queue size (in bytes). Address formats are of the
form ``host.port'' or ``network.port'' if a socket's
address specifies a network but no specific host address.
If known, the host and network addresses are displayed
symbolically according to the data bases /etc/hosts and
/etc/networks, respectively. If a symbolic name for an
address is not known, or if the -n option is specified,
the address is printed numerically, according to the
address family. Unspecified, or ``wildcard'', addresses
and ports appear as ``*''.
The interface display specified by the -i or -I options
provides a table of cumulative statistics regarding packets
transferred, errors, and collisions. The network
addresses of the interface and the maximum transmission
unit (``mtu'') are also displayed. If the interface is
currently down, then a ``*'' is appended to the interface
name.
When an interval is specified, a summary of the interface
information consisting of packets transferred, errors, and
collisions is displayed.
The routing table display indicates the available routes
and their status. Each route consists of a destination
host or network and a gateway to use in forwarding packets.
The flags field shows a collection of information
about the route stored as binary choices; the flags are:
- 2
- Protocol-specific routing flag #2 (for ARP
entries, means that the entry is "published").
- C
- Use of this route will cause a new route to
be generated and used.
- D
- The route was created dynamically by a
redirect.
- G
- The route is to a gateway.
- H
- The route is to a host (otherwise, it's to a
net).
- L
- The route includes valid protocol to link
address translation.
- M
- The route was modified dynamically by a
redirect.
- R
- The route has timed out.
- S
- The route was manually added with a route
command (see na_route(1)).
- U
- The route is usable (``up'').
Direct routes are created for each interface attached to
the local host when an IP address for the interface is
configured or the node is rebooted. The gateway field for
such entries shows the link number of the outgoing interface
(direct routes have no next hop), and the interface
field shows the name of the interface.
Host routes are created as needed for traffic to hosts
that are on directly attached subnets, and these routes
will time out based on the arp timeout. The gateway field
for such entries is the MAC address of the host. Note that
permanent host routes can also be created using the arp
command. For more information about arp see the arp(1)
manual page.
The refcnt field gives the current number of active uses
of the route. Connection oriented protocols normally hold
on to a single route for the duration of a connection
while connectionless protocols obtain a route whenever
they transmit to a destination. The use field provides a
count of the number of packets sent using that route. The
interface entry indicates the network interface utilized
for the route.
When netstat is invoked with the -w option and an interval
argument, it displays a running count of statistics
related to network interfaces. An obsolescent version of
this option used a numeric parameter with no option, and
is currently supported for backward compatibility. This
display consists of a column for the primary interface and
a column summarizing information for all interfaces. The
default primary interface is the first interface configured
into the system. The primary interface may be
replaced with another interface with the -I option. The
first line of each screen of information contains a summary
since the system was last rebooted. Subsequent lines
of output show values accumulated over the preceding
interval.
When netstat is invoked with the -T option, it displays
the TCP offload engine statistics for all the TOE cards in
the system. The statistics for each TOE device include
TCP, IP, mbufs received and mbufs transmitted.
Each node in an HA pair maintains its own socket, routing,
and interface tables. If a node is not in partner mode,
the netstat command displays the information in the tables
on the live node. If a node is in partner mode, it executes
the netstat command on behalf of the failed node,
which displays the information in the tables on the failed
node.
However, in takeover mode, counters displayed by the netstat
command represent the combined statistics of the live
node and the failed node. For example, from the statistics,
you cannot determine how many packets were received
on behalf of the live node and how many packets were
received on behalf of the failed node.
In takeover mode, network interface names used by the
failed node are mapped to network interfaces on the live
node. When you enter the netstat command in partner mode,
the network interface names displayed are the network
interface names on the failed node.
If you enter the netstat command in partner mode, you
might see a plus sign (+) appended to some network interface
names in the output. The plus sign indicates that the
network interfaces are used as shared interfaces.
Statistics displayed by the netstat command are cumulative.
That is, a giveback operation does not zero out the
statistics. After giving back the virtual node's
resources, the live node does not subtract the statistics
about operations it performed on behalf of the failed node
in takeover mode.
When run from a vfiler context, (for example, via the
vfiler run command), netstat operates on the concerned
vfiler. In this mode, only the -r and the -n options are
allowed. As currently all vfilers in an ipspace share a
routing table, netstat -r [-n] in a vfiler context prints
the routing table of the vfiler's ipspace.
- /etc/hosts
- host name data base
- /etc/networks
- network name data base
na_ifconfig(1), na_nfsstat(1), na_partner(1), na_sysstat(1),
na_ipspace(1), na_vfiler(1), na_arp(1),
na_hosts(5), na_networks(5)
Table of Contents
