xref: /freebsd/usr.bin/netstat/netstat.1 (revision 39ee7a7a6bdd1557b1c3532abf60d139798ac88b)
1.\" Copyright (c) 1983, 1990, 1992, 1993
2.\"	The Regents of the University of California.  All rights reserved.
3.\"
4.\" Redistribution and use in source and binary forms, with or without
5.\" modification, are permitted provided that the following conditions
6.\" are met:
7.\" 1. Redistributions of source code must retain the above copyright
8.\"    notice, this list of conditions and the following disclaimer.
9.\" 2. Redistributions in binary form must reproduce the above copyright
10.\"    notice, this list of conditions and the following disclaimer in the
11.\"    documentation and/or other materials provided with the distribution.
12.\" 4. Neither the name of the University nor the names of its contributors
13.\"    may be used to endorse or promote products derived from this software
14.\"    without specific prior written permission.
15.\"
16.\" THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
17.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19.\" ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
20.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
24.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
25.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
26.\" SUCH DAMAGE.
27.\"
28.\"	@(#)netstat.1	8.8 (Berkeley) 4/18/94
29.\" $FreeBSD$
30.\"
31.Dd August 27, 2015
32.Dt NETSTAT 1
33.Os
34.Sh NAME
35.Nm netstat
36.Nd show network status and statistics
37.Sh SYNOPSIS
38.Bk -words
39.Bl -tag -width "netstat"
40.It Nm
41.Op Fl -libxo
42.Op Fl 46AaLnRSTWx
43.Op Fl f Ar protocol_family | Fl p Ar protocol
44.Op Fl M Ar core
45.Op Fl N Ar system
46.It Nm Fl i | I Ar interface
47.Op Fl -libxo
48.Op Fl 46abdhnW
49.Op Fl f Ar address_family
50.Op Fl M Ar core
51.Op Fl N Ar system
52.It Nm Fl w Ar wait
53.Op Fl -libxo
54.Op Fl I Ar interface
55.Op Fl 46d
56.Op Fl M Ar core
57.Op Fl N Ar system
58.Op Fl q Ar howmany
59.It Nm Fl s
60.Op Fl -libxo
61.Op Fl 46sz
62.Op Fl f Ar protocol_family | Fl p Ar protocol
63.Op Fl M Ar core
64.Op Fl N Ar system
65.It Nm Fl i | I Ar interface Fl s
66.Op Fl -libxo
67.Op Fl 46s
68.Op Fl f Ar protocol_family | Fl p Ar protocol
69.Op Fl M Ar core
70.Op Fl N Ar system
71.It Nm Fl m
72.Op Fl -libxo
73.Op Fl M Ar core
74.Op Fl N Ar system
75.It Nm Fl B
76.Op Fl -libxo
77.Op Fl z
78.Op Fl I Ar interface
79.It Nm Fl r
80.Op Fl -libxo
81.Op Fl 46nW
82.Op Fl F Ar fibnum
83.Op Fl f Ar address_family
84.It Nm Fl rs
85.Op Fl -libxo
86.Op Fl s
87.Op Fl M Ar core
88.Op Fl N Ar system
89.It Nm Fl g
90.Op Fl -libxo
91.Op Fl 46W
92.Op Fl f Ar address_family
93.It Nm Fl gs
94.Op Fl -libxo
95.Op Fl 46s
96.Op Fl f Ar address_family
97.Op Fl M Ar core
98.Op Fl N Ar system
99.It Nm Fl Q
100.Op Fl -libxo
101.El
102.Ek
103.Sh DESCRIPTION
104The
105.Nm
106command symbolically displays the contents of various network-related
107data structures.
108There are a number of output formats,
109depending on the options for the information presented.
110.Bl -tag -width indent
111.It Xo
112.Bk -words
113.Nm
114.Op Fl 46AaLnRSTWx
115.Op Fl f Ar protocol_family | Fl p Ar protocol
116.Op Fl M Ar core
117.Op Fl N Ar system
118.Ek
119.Xc
120Display a list of active sockets
121(protocol control blocks)
122for each network protocol.
123.Pp
124The default display for active sockets shows the local
125and remote addresses, send and receive queue sizes (in bytes), protocol,
126and the internal state of the protocol.
127Address formats are of the form
128.Dq host.port
129or
130.Dq network.port
131if a socket's address specifies a network but no specific host address.
132When known, the host and network addresses are displayed symbolically
133according to the databases
134.Xr hosts 5
135and
136.Xr networks 5 ,
137respectively.
138If a symbolic name for an address is unknown, or if
139the
140.Fl n
141option is specified, the address is printed numerically, according
142to the address family.
143For more information regarding
144the Internet IPv4
145.Dq dot format ,
146refer to
147.Xr inet 3 .
148Unspecified,
149or
150.Dq wildcard ,
151addresses and ports appear as
152.Dq Li * .
153.Bl -tag -width indent
154.It Fl 4
155Show IPv4 only.
156See
157.Sx GENERAL OPTIONS .
158.It Fl 6
159Show IPv6 only.
160See
161.Sx GENERAL OPTIONS .
162.It Fl A
163Show the address of a protocol control block (PCB)
164associated with a socket; used for debugging.
165.It Fl a
166Show the state of all sockets;
167normally sockets used by server processes are not shown.
168.It Fl L
169Show the size of the various listen queues.
170The first count shows the number of unaccepted connections,
171the second count shows the amount of unaccepted incomplete connections,
172and the third count is the maximum number of queued connections.
173.It Fl n
174Do not resolve numeric addresses and port numbers to names.
175See
176.Sx GENERAL OPTIONS .
177.It Fl R
178Display the flowid and flowtype for each socket.
179flowid is a 32 bit hardware specific identifier for each flow.
180flowtype defines which protocol fields are hashed to produce the id.
181A complete listing is available in
182.Pa sys/mbuf.h
183under
184.Dv M_HASHTYPE_* .
185.It Fl S
186Show network addresses as numbers (as with
187.Fl n )
188but show ports symbolically.
189.It Fl T
190Display diagnostic information from the TCP control block.
191Fields include the number of packets requiring retransmission,
192received out-of-order, and those advertising a zero-sized window.
193.It Fl W
194Avoid truncating addresses even if this causes some fields to overflow.
195.It Fl x
196Display socket buffer and TCP timer statistics for each
197internet socket.
198.Pp
199The
200.Fl x
201flag causes
202.Nm
203to output all the information recorded about data
204stored in the socket buffers.
205The fields are:
206.Bl -column ".Li R-MBUF"
207.It Li R-MBUF Ta Number of mbufs in the receive queue.
208.It Li S-MBUF Ta Number of mbufs in the send queue.
209.It Li R-CLUS Ta Number of clusters, of any type, in the receive
210queue.
211.It Li S-CLUS Ta Number of clusters, of any type, in the send queue.
212.It Li R-HIWA Ta Receive buffer high water mark, in bytes.
213.It Li S-HIWA Ta Send buffer high water mark, in bytes.
214.It Li R-LOWA Ta Receive buffer low water mark, in bytes.
215.It Li S-LOWA Ta Send buffer low water mark, in bytes.
216.It Li R-BCNT Ta Receive buffer byte count.
217.It Li S-BCNT Ta Send buffer byte count.
218.It Li R-BMAX Ta Maximum bytes that can be used in the receive buffer.
219.It Li S-BMAX Ta Maximum bytes that can be used in the send buffer.
220.It Li rexmt Ta Time, in seconds, to fire Retransmit Timer, or 0 if not armed.
221.It Li persist Ta Time, in seconds, to fire Retransmit Persistence, or 0 if not armed.
222.It Li keep Ta Time, in seconds, to fire Keep Alive, or 0 if not armed.
223.It Li 2msl Ta Time, in seconds, to fire 2*msl TIME_WAIT Timer, or 0 if not armed.
224.It Li delack Ta Time, in seconds, to fire Delayed ACK Timer, or 0 if not armed.
225.It Li rcvtime Ta Time, in seconds, since last packet received.
226.El
227.It Fl f Ar protocol_family
228Filter by
229.Ar protocol_family .
230See
231.Sx GENERAL OPTIONS .
232.It Fl p Ar protocol
233Filter by
234.Ar protocol .
235See
236.Sx GENERAL OPTIONS .
237.It Fl M
238Use an alternative core.
239See
240.Sx GENERAL OPTIONS .
241.It Fl N
242Use an alternative kernel image.
243See
244.Sx GENERAL OPTIONS .
245.El
246.It Xo
247.Bk -words
248.Nm
249.Fl i | I Ar interface
250.Op Fl 46abdhnW
251.Op Fl f Ar address_family
252.Op Fl M Ar core
253.Op Fl N Ar system
254.Ek
255.Xc
256Show the state of all network interfaces or a single
257.Ar interface
258which have been auto-configured
259(interfaces statically configured into a system, but not
260located at boot time are not shown).
261An asterisk
262.Pq Dq Li *
263after an interface name indicates that the interface is
264.Dq down .
265.Pp
266When
267.Nm
268is invoked with
269.Fl i
270.Pq all interfaces
271or
272.Fl I Ar interface ,
273it provides a table of cumulative
274statistics regarding packets transferred, errors, and collisions.
275The network addresses of the interface
276and the maximum transmission unit
277.Pq Dq mtu
278are also displayed.
279.Bl -tag -width indent
280.It Fl 4
281Show IPv4 only.
282See
283.Sx GENERAL OPTIONS .
284.It Fl 6
285Show IPv6 only.
286See
287.Sx GENERAL OPTIONS .
288.It Fl a
289Multicast addresses currently in use are shown
290for each Ethernet interface and for each IP interface address.
291Multicast addresses are shown on separate lines following the interface
292address with which they are associated.
293.It Fl b
294Show the number of bytes in and out.
295.It Fl d
296Show the number of dropped packets.
297.It Fl h
298Print all counters in human readable form.
299.It Fl n
300Do not resolve numeric addresses and port numbers to names.
301See
302.Sx GENERAL OPTIONS .
303.It Fl W
304Avoid truncating interface names even if this causes some fields to overflow.
305.Sx GENERAL OPTIONS .
306.It Fl f Ar protocol_family
307Filter by
308.Ar protocol_family .
309See
310.Sx GENERAL OPTIONS .
311.El
312.It Xo
313.Bk -words
314.Nm
315.Fl w Ar wait
316.Op Fl I Ar interface
317.Op Fl 46d
318.Op Fl M Ar core
319.Op Fl N Ar system
320.Op Fl q Ar howmany
321.Ek
322.Xc
323At intervals of
324.Ar wait
325seconds, display the information regarding packet traffic on all
326configured network interfaces or a single
327.Ar interface .
328.Pp
329When
330.Nm
331is invoked with the
332.Fl w
333option and a
334.Ar wait
335interval argument, it displays a running count of statistics related to
336network interfaces.
337An obsolescent version of this option used a numeric parameter
338with no option, and is currently supported for backward compatibility.
339By default, this display summarizes information for all interfaces.
340Information for a specific interface may be displayed with the
341.Fl I Ar interface
342option.
343.Bl -tag -width indent
344.It Fl I Ar interface
345Only show information regarding
346.Ar interface
347.It Fl 4
348Show IPv4 only.
349See
350.Sx GENERAL OPTIONS .
351.It Fl 6
352Show IPv6 only.
353See
354.Sx GENERAL OPTIONS .
355.It Fl d
356Show the number of dropped packets.
357.It Fl M
358Use an alternative core.
359See
360.Sx GENERAL OPTIONS .
361.It Fl N
362Use an alternative kernel image.
363See
364.Sx GENERAL OPTIONS .
365.It Fl q
366Exit after
367.Ar howmany
368outputs.
369.El
370.It Xo
371.Bk -words
372.Nm
373.Fl s
374.Op Fl 46sz
375.Op Fl f Ar protocol_family | Fl p Ar protocol
376.Op Fl M Ar core
377.Op Fl N Ar system
378.Ek
379.Xc
380Display system-wide statistics for each network protocol.
381.Bl -tag -width indent
382.It Fl 4
383Show IPv4 only.
384See
385.Sx GENERAL OPTIONS .
386.It Fl 6
387Show IPv6 only.
388See
389.Sx GENERAL OPTIONS .
390.It Fl s
391If
392.Fl s
393is repeated, counters with a value of zero are suppressed.
394.It Fl z
395Reset statistic counters after displaying them.
396.It Fl f Ar protocol_family
397Filter by
398.Ar protocol_family .
399See
400.Sx GENERAL OPTIONS .
401.It Fl p Ar protocol
402Filter by
403.Ar protocol .
404See
405.Sx GENERAL OPTIONS .
406.It Fl M
407Use an alternative core.
408See
409.Sx GENERAL OPTIONS .
410.It Fl N
411Use an alternative kernel image
412See
413.Sx GENERAL OPTIONS .
414.El
415.It Xo
416.Bk -words
417.Nm
418.Fl i | I Ar interface Fl s
419.Op Fl 46s
420.Op Fl f Ar protocol_family | Fl p Ar protocol
421.Op Fl M Ar core
422.Op Fl N Ar system
423.Ek
424.Xc
425Display per-interface statistics for each network protocol.
426.Bl -tag -width indent
427.It Fl 4
428Show IPv4 only
429See
430.Sx GENERAL OPTIONS .
431.It Fl 6
432Show IPv6 only
433See
434.Sx GENERAL OPTIONS .
435.It Fl s
436If
437.Fl s
438is repeated, counters with a value of zero are suppressed.
439.It Fl f Ar protocol_family
440Filter by
441.Ar protocol_family .
442See
443.Sx GENERAL OPTIONS .
444.It Fl p Ar protocol
445Filter by
446.Ar protocol .
447See
448.Sx GENERAL OPTIONS .
449.It Fl M
450Use an alternative core
451See
452.Sx GENERAL OPTIONS .
453.It Fl N
454Use an alternative kernel image
455See
456.Sx GENERAL OPTIONS .
457.El
458.It Xo
459.Bk -words
460.Nm
461.Fl m
462.Op Fl M Ar core
463.Op Fl N Ar system
464.Ek
465.Xc
466Show statistics recorded by the memory management routines
467.Pq Xr mbuf 9 .
468The network manages a private pool of memory buffers.
469.Bl -tag -width indent
470.It Fl M
471Use an alternative core
472See
473.Sx GENERAL OPTIONS .
474.It Fl N
475Use an alternative kernel image
476See
477.Sx GENERAL OPTIONS .
478.El
479.It Xo
480.Bk -words
481.Nm
482.Fl B
483.Op Fl z
484.Op Fl I Ar interface
485.Ek
486.Xc
487Show statistics about
488.Xr bpf 4
489peers.
490This includes information like
491how many packets have been matched, dropped and received by the
492bpf device, also information about current buffer sizes and device
493states.
494.Pp
495The
496.Xr bpf 4
497flags displayed when
498.Nm
499is invoked with the
500.Fl B
501option represent the underlying parameters of the bpf peer.
502Each flag is
503represented as a single lower case letter.
504The mapping between the letters and flags in order of appearance are:
505.Bl -column ".Li i"
506.It Li p Ta Set if listening promiscuously
507.It Li i Ta Dv BIOCIMMEDIATE No has been set on the device
508.It Li f Ta Dv BIOCGHDRCMPLT No status: source link addresses are being
509filled automatically
510.It Li s Ta Dv BIOCGSEESENT No status: see packets originating locally and
511remotely on the interface.
512.It Li a Ta Packet reception generates a signal
513.It Li l Ta Dv BIOCLOCK No status: descriptor has been locked
514.El
515.Pp
516For more information about these flags, please refer to
517.Xr bpf 4 .
518.Bl -tag -width indent
519.It Fl z
520Reset statistic counters after displaying them.
521.El
522.It Xo
523.Bk -words
524.Nm
525.Fl r
526.Op Fl 46AnW
527.Op Fl F Ar fibnum
528.Op Fl f Ar address_family
529.Op Fl M Ar core
530.Op Fl N Ar system
531.Ek
532.Xc
533Display the contents of routing tables.
534.Pp
535When
536.Nm
537is invoked with the routing table option
538.Fl r ,
539it lists the available routes and their status.
540Each route consists of a destination host or network, and a gateway to use
541in forwarding packets.
542The flags field shows a collection of information about the route stored
543as binary choices.
544The individual flags are discussed in more detail in the
545.Xr route 8
546and
547.Xr route 4
548manual pages.
549The mapping between letters and flags is:
550.Bl -column ".Li W" ".Dv RTF_WASCLONED"
551.It Li 1 Ta Dv RTF_PROTO1 Ta "Protocol specific routing flag #1"
552.It Li 2 Ta Dv RTF_PROTO2 Ta "Protocol specific routing flag #2"
553.It Li 3 Ta Dv RTF_PROTO3 Ta "Protocol specific routing flag #3"
554.It Li B Ta Dv RTF_BLACKHOLE Ta "Just discard pkts (during updates)"
555.It Li b Ta Dv RTF_BROADCAST Ta "The route represents a broadcast address"
556.It Li D Ta Dv RTF_DYNAMIC Ta "Created dynamically (by redirect)"
557.It Li G Ta Dv RTF_GATEWAY Ta "Destination requires forwarding by intermediary"
558.It Li H Ta Dv RTF_HOST Ta "Host entry (net otherwise)"
559.It Li L Ta Dv RTF_LLINFO Ta "Valid protocol to link address translation"
560.It Li M Ta Dv RTF_MODIFIED Ta "Modified dynamically (by redirect)"
561.It Li R Ta Dv RTF_REJECT Ta "Host or net unreachable"
562.It Li S Ta Dv RTF_STATIC Ta "Manually added"
563.It Li U Ta Dv RTF_UP Ta "Route usable"
564.It Li X Ta Dv RTF_XRESOLVE Ta "External daemon translates proto to link address"
565.El
566.Pp
567Direct routes are created for each
568interface attached to the local host;
569the gateway field for such entries shows the address of the outgoing interface.
570The refcnt field gives the
571current number of active uses of the route.
572Connection oriented
573protocols normally hold on to a single route for the duration of
574a connection while connectionless protocols obtain a route while sending
575to the same destination.
576The use field provides a count of the number of packets
577sent using that route.
578The interface entry indicates the network interface utilized for the route.
579.Bl -tag -width indent
580.It Fl 4
581Show IPv4 only.
582See
583.Sx GENERAL OPTIONS .
584.It Fl 6
585Show IPv6 only.
586See
587.Sx GENERAL OPTIONS .
588.It Fl n
589Do not resolve numeric addresses and port numbers to names.
590See
591.Sx GENERAL OPTIONS .
592.It Fl W
593Show the path MTU for each route, and print interface names with a
594wider field size.
595.It Fl F
596Display the routing table with the number
597.Ar fibnum .
598If the specified
599.Ar fibnum
600is -1 or
601.Fl F
602is not specified,
603the default routing table is displayed.
604.It Fl f
605Display the routing table for a particular
606.Ar address_family .
607.It Fl M
608Use an alternative core
609See
610.Sx GENERAL OPTIONS .
611.It Fl N
612Use an alternative kernel image
613See
614.Sx GENERAL OPTIONS .
615.El
616.It Xo
617.Bk -words
618.Nm
619.Fl rs
620.Op Fl s
621.Op Fl M Ar core
622.Op Fl N Ar system
623.Ek
624.Xc
625Display routing statistics.
626.Bl -tag -width indent
627.It Fl s
628If
629.Fl s
630is repeated, counters with a value of zero are suppressed.
631.It Fl M
632Use an alternative core
633See
634.Sx GENERAL OPTIONS .
635.It Fl N
636Use an alternative kernel image
637See
638.Sx GENERAL OPTIONS .
639.El
640.It Xo
641.Bk -words
642.Nm
643.Fl g
644.Op Fl 46W
645.Op Fl f Ar address_family
646.Op Fl M Ar core
647.Op Fl N Ar system
648.Ek
649.Xc
650Display the contents of the multicast virtual interface tables,
651and multicast forwarding caches.
652Entries in these tables will appear only when the kernel is
653actively forwarding multicast sessions.
654This option is applicable only to the
655.Cm inet
656and
657.Cm inet6
658address families.
659.Bl -tag -width indent
660.It Fl 4
661Show IPv4 only
662See
663.Sx GENERAL OPTIONS .
664.It Fl 6
665Show IPv6 only
666See
667.Sx GENERAL OPTIONS .
668.It Fl W
669Avoid truncating addresses even if this causes some fields to overflow.
670.It Fl f Ar protocol_family
671Filter by
672.Ar protocol_family .
673See
674.Sx GENERAL OPTIONS .
675.It Fl M
676Use an alternative core
677See
678.Sx GENERAL OPTIONS .
679.It Fl N
680Use an alternative kernel image
681See
682.Sx GENERAL OPTIONS .
683.El
684.It Xo
685.Bk -words
686.Nm
687.Fl gs
688.Op Fl 46s
689.Op Fl f Ar address_family
690.Op Fl M Ar core
691.Op Fl N Ar system
692.Ek
693.Xc
694Show multicast routing statistics.
695.Bl -tag -width indent
696.It Fl 4
697Show IPv4 only
698See
699.Sx GENERAL OPTIONS .
700.It Fl 6
701Show IPv6 only
702See
703.Sx GENERAL OPTIONS .
704.It Fl s
705If
706.Fl s
707is repeated, counters with a value of zero are suppressed.
708.It Fl f Ar protocol_family
709Filter by
710.Ar protocol_family .
711See
712.Sx GENERAL OPTIONS .
713.It Fl M
714Use an alternative core
715See
716.Sx GENERAL OPTIONS .
717.It Fl N
718Use an alternative kernel image
719See
720.Sx GENERAL OPTIONS .
721.El
722.It Xo
723.Bk -words
724.Nm
725.Fl Q
726.Ek
727.Xc
728Show
729.Xr netisr 9
730statistics.
731The flags field shows available ISR handlers:
732.Bl -column ".Li W" ".Dv NETISR_SNP_FLAGS_DRAINEDCPU"
733.It Li C Ta Dv NETISR_SNP_FLAGS_M2CPUID Ta "Able to map mbuf to cpu id"
734.It Li D Ta Dv NETISR_SNP_FLAGS_DRAINEDCPU  Ta "Has queue drain handler"
735.It Li F Ta Dv NETISR_SNP_FLAGS_M2FLOW Ta "Able to map mbuf to flow id"
736.El
737.El
738.Pp
739.Ss GENERAL OPTIONS
740Some options have the general meaning:
741.Bl -tag -width flag
742.It Fl 4
743Is shorthand for
744.Fl f
745.Ar inet
746.Pq Show only IPv4
747.It Fl 6
748Is shorthand for
749.Fl f
750.Ar inet6
751.Pq Show only IPv6
752.It Fl f Ar address_family , Fl p Ar protocol
753Limit display to those records
754of the specified
755.Ar address_family
756or a single
757.Ar protocol .
758The following address families and protocols are recognized:
759.Pp
760.Bl -tag -width ".Cm netgraph , ng Pq Dv AF_NETGRAPH" -compact
761.It Em Family
762.Em Protocols
763.It Cm inet Pq Dv AF_INET
764.Cm divert , icmp , igmp , ip , ipsec , pim, sctp , tcp , udp
765.It Cm inet6 Pq Dv AF_INET6
766.Cm icmp6 , ip6 , ipsec6 , rip6 , tcp , udp
767.It Cm pfkey Pq Dv PF_KEY
768.Cm pfkey
769.It Cm netgraph , ng Pq Dv AF_NETGRAPH
770.Cm ctrl , data
771.It Cm unix Pq Dv AF_UNIX
772.It Cm link Pq Dv AF_LINK
773.El
774.Pp
775The program will complain if
776.Ar protocol
777is unknown or if there is no statistics routine for it.
778.It Fl M
779Extract values associated with the name list from the specified core
780instead of the default
781.Pa /dev/kmem .
782.It Fl N
783Extract the name list from the specified system instead of the default,
784which is the kernel image the system has booted from.
785.It Fl n
786Show network addresses and ports as numbers.
787Normally
788.Nm
789attempts to resolve addresses and ports,
790and display them symbolically.
791.El
792.Sh SEE ALSO
793.Xr fstat 1 ,
794.Xr nfsstat 1 ,
795.Xr procstat 1 ,
796.Xr ps 1 ,
797.Xr sockstat 1 ,
798.Xr libxo 3 ,
799.Xr xo_parse_args 3 ,
800.Xr bpf 4 ,
801.Xr inet 4 ,
802.Xr route 4 ,
803.Xr unix 4 ,
804.Xr hosts 5 ,
805.Xr networks 5 ,
806.Xr protocols 5 ,
807.Xr services 5 ,
808.Xr iostat 8 ,
809.Xr route 8 ,
810.Xr trpt 8 ,
811.Xr vmstat 8 ,
812.Xr mbuf 9
813.Sh HISTORY
814The
815.Nm
816command appeared in
817.Bx 4.2 .
818.Pp
819IPv6 support was added by WIDE/KAME project.
820.Sh BUGS
821The notion of errors is ill-defined.
822