1.\" Copyright (c) 1983, 1990, 1992, 1993 2.\" The Regents of the University of California. All rights reserved. 3.\" 4.\" Redistribution and use in source and binary forms, with or without 5.\" modification, are permitted provided that the following conditions 6.\" are met: 7.\" 1. Redistributions of source code must retain the above copyright 8.\" notice, this list of conditions and the following disclaimer. 9.\" 2. Redistributions in binary form must reproduce the above copyright 10.\" notice, this list of conditions and the following disclaimer in the 11.\" documentation and/or other materials provided with the distribution. 12.\" 3. Neither the name of the University nor the names of its contributors 13.\" may be used to endorse or promote products derived from this software 14.\" without specific prior written permission. 15.\" 16.\" THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 17.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 18.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 19.\" ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 20.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 21.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 22.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 23.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 24.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 25.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 26.\" SUCH DAMAGE. 27.\" 28.\" @(#)netstat.1 8.8 (Berkeley) 4/18/94 29.\" $FreeBSD$ 30.\" 31.Dd April 19, 2023 32.Dt NETSTAT 1 33.Os 34.Sh NAME 35.Nm netstat 36.Nd show network status and statistics 37.Sh SYNOPSIS 38.Bk -words 39.Bl -tag -width "netstat" 40.It Nm 41.Op Fl -libxo 42.Op Fl 46AaCLnPRSTWx 43.Op Fl f Ar protocol_family | Fl p Ar protocol 44.It Nm Fl i | I Ar interface 45.Op Fl -libxo 46.Op Fl 46abdhnW 47.Op Fl f Ar address_family 48.Op Fl M Ar core 49.Op Fl N Ar system 50.It Nm Fl w Ar wait 51.Op Fl -libxo 52.Op Fl I Ar interface 53.Op Fl 46d 54.Op Fl M Ar core 55.Op Fl N Ar system 56.Op Fl q Ar howmany 57.It Nm Fl s 58.Op Fl -libxo 59.Op Fl 46sz 60.Op Fl f Ar protocol_family | Fl p Ar protocol 61.Op Fl M Ar core 62.Op Fl N Ar system 63.It Nm Fl i | I Ar interface Fl s 64.Op Fl -libxo 65.Op Fl 46s 66.Op Fl f Ar protocol_family | Fl p Ar protocol 67.Op Fl M Ar core 68.Op Fl N Ar system 69.It Nm Fl m 70.Op Fl -libxo 71.Op Fl M Ar core 72.Op Fl N Ar system 73.It Nm Fl B 74.Op Fl -libxo 75.Op Fl z 76.Op Fl I Ar interface 77.It Nm Fl r 78.Op Fl -libxo 79.Op Fl 46nW 80.Op Fl F Ar fibnum 81.Op Fl f Ar address_family 82.It Nm Fl rs 83.Op Fl -libxo 84.Op Fl s 85.Op Fl M Ar core 86.Op Fl N Ar system 87.It Nm Fl g 88.Op Fl -libxo 89.Op Fl 46W 90.Op Fl f Ar address_family 91.It Nm Fl gs 92.Op Fl -libxo 93.Op Fl 46s 94.Op Fl f Ar address_family 95.Op Fl M Ar core 96.Op Fl N Ar system 97.It Nm Fl Q 98.Op Fl -libxo 99.El 100.Ek 101.Sh DESCRIPTION 102The 103.Nm 104command symbolically displays the contents of various network-related 105data structures. 106There are a number of output formats, 107depending on the options for the information presented. 108.Bl -tag -width indent 109.It Xo 110.Bk -words 111.Nm 112.Op Fl 46AaCLnRSTWx 113.Op Fl f Ar protocol_family | Fl p Ar protocol 114.Ek 115.Xc 116Display a list of active sockets 117(protocol control blocks) 118for each network protocol. 119.Pp 120The default display for active sockets shows the local 121and remote addresses, send and receive queue sizes (in bytes), protocol, 122and the internal state of the protocol. 123Address formats are of the form 124.Dq host.port 125or 126.Dq network.port 127if a socket's address specifies a network but no specific host address. 128When known, the host and network addresses are displayed symbolically 129according to the databases 130.Xr hosts 5 131and 132.Xr networks 5 , 133respectively. 134If a symbolic name for an address is unknown, or if 135the 136.Fl n 137option is specified, the address is printed numerically, according 138to the address family. 139For more information regarding 140the Internet IPv4 141.Dq dot format , 142refer to 143.Xr inet 3 . 144Unspecified, 145or 146.Dq wildcard , 147addresses and ports appear as 148.Dq Li * . 149.Bl -tag -width indent 150.It Fl -libxo 151Generate output via 152.Xr libxo 3 153in a selection of different human and machine readable formats. 154See 155.Xr xo_parse_args 3 156for details on command line arguments. 157.It Fl 4 158Show IPv4 only. 159See 160.Sx GENERAL OPTIONS . 161.It Fl 6 162Show IPv6 only. 163See 164.Sx GENERAL OPTIONS . 165.It Fl A 166Show the address of a protocol control block (PCB) 167associated with a socket; used for debugging. 168.It Fl a 169Show the state of all sockets; 170normally sockets used by server processes are not shown. 171.It Fl c 172Show the used TCP stack for each session. 173.It Fl C 174Show the congestion control algorithm and diagnostic information of TCP sockets. 175.It Fl L 176Show the size of the various listen queues. 177The first count shows the number of unaccepted connections, 178the second count shows the amount of unaccepted incomplete connections, 179and the third count is the maximum number of queued connections. 180.It Fl n 181Do not resolve numeric addresses and port numbers to names. 182See 183.Sx GENERAL OPTIONS . 184.It Fl P 185Display the log ID for each socket. 186.It Fl R 187Display the flowid and flowtype for each socket. 188flowid is a 32 bit hardware specific identifier for each flow. 189flowtype defines which protocol fields are hashed to produce the id. 190A complete listing is available in 191.Pa sys/mbuf.h 192under 193.Dv M_HASHTYPE_* . 194.It Fl S 195Show network addresses as numbers (as with 196.Fl n ) 197but show ports symbolically. 198.It Fl T 199Display diagnostic information from the TCP control block. 200Fields include the number of packets requiring retransmission, 201received out-of-order, and those advertising a zero-sized window. 202.It Fl W 203Avoid truncating addresses even if this causes some fields to overflow. 204.It Fl x 205Display socket buffer and TCP timer statistics for each 206internet socket. 207.Pp 208The 209.Fl x 210flag causes 211.Nm 212to output all the information recorded about data 213stored in the socket buffers. 214The fields are: 215.Bl -column ".Li R-HIWA" 216.It Li R-HIWA Ta Receive buffer high water mark, in bytes. 217.It Li S-HIWA Ta Send buffer high water mark, in bytes. 218.It Li R-LOWA Ta Receive buffer low water mark, in bytes. 219.It Li S-LOWA Ta Send buffer low water mark, in bytes. 220.It Li R-BCNT Ta Receive buffer byte count. 221.It Li S-BCNT Ta Send buffer byte count. 222.It Li R-BMAX Ta Maximum bytes that can be used in the receive buffer. 223.It Li S-BMAX Ta Maximum bytes that can be used in the send buffer. 224.It Li rexmt Ta Time, in seconds, to fire Retransmit Timer, or 0 if not armed. 225.It Li persist Ta Time, in seconds, to fire Retransmit Persistence, or 0 if not armed. 226.It Li keep Ta Time, in seconds, to fire Keep Alive, or 0 if not armed. 227.It Li 2msl Ta Time, in seconds, to fire 2*msl TIME_WAIT Timer, or 0 if not armed. 228.It Li delack Ta Time, in seconds, to fire Delayed ACK Timer, or 0 if not armed. 229.It Li rcvtime Ta Time, in seconds, since last packet received. 230.El 231.It Fl f Ar protocol_family 232Filter by 233.Ar protocol_family . 234See 235.Sx GENERAL OPTIONS . 236.It Fl p Ar protocol 237Filter by 238.Ar protocol . 239See 240.Sx GENERAL OPTIONS . 241.El 242.It Xo 243.Bk -words 244.Nm 245.Fl i | I Ar interface 246.Op Fl 46abdhnW 247.Op Fl f Ar address_family 248.Op Fl M Ar core 249.Op Fl N Ar system 250.Ek 251.Xc 252Show the state of all network interfaces or a single 253.Ar interface 254which have been auto-configured 255(interfaces statically configured into a system, but not 256located at boot time are not shown). 257An asterisk 258.Pq Dq Li * 259after an interface name indicates that the interface is 260.Dq down . 261.Pp 262When 263.Nm 264is invoked with 265.Fl i 266.Pq all interfaces 267or 268.Fl I Ar interface , 269it provides a table of cumulative 270statistics regarding packets transferred, errors, and collisions. 271The network addresses of the interface 272and the maximum transmission unit 273.Pq Dq mtu 274are also displayed. 275If both 276.Fl i 277and 278.Fl I 279are specified, 280.Fl I 281overrides any instances of 282.Fl i . 283.Bl -tag -width indent 284.It Fl 4 285Show IPv4 only. 286See 287.Sx GENERAL OPTIONS . 288.It Fl 6 289Show IPv6 only. 290See 291.Sx GENERAL OPTIONS . 292.It Fl a 293Multicast addresses currently in use are shown 294for each Ethernet interface and for each IP interface address. 295Multicast addresses are shown on separate lines following the interface 296address with which they are associated. 297.It Fl b 298Show the number of bytes in and out. 299.It Fl d 300Show the number of dropped packets. 301.It Fl h 302Print all counters in human readable form. 303.It Fl n 304Do not resolve numeric addresses and port numbers to names. 305See 306.Sx GENERAL OPTIONS . 307.It Fl W 308Avoid truncating addresses even if this causes some fields to overflow. 309See 310.Sx GENERAL OPTIONS . 311.It Fl f Ar protocol_family 312Filter by 313.Ar protocol_family . 314See 315.Sx GENERAL OPTIONS . 316.El 317.It Xo 318.Bk -words 319.Nm 320.Fl w Ar wait 321.Op Fl I Ar interface 322.Op Fl 46d 323.Op Fl M Ar core 324.Op Fl N Ar system 325.Op Fl q Ar howmany 326.Ek 327.Xc 328At intervals of 329.Ar wait 330seconds, display the information regarding packet traffic on all 331configured network interfaces or a single 332.Ar interface . 333.Pp 334When 335.Nm 336is invoked with the 337.Fl w 338option and a 339.Ar wait 340interval argument, it displays a running count of statistics related to 341network interfaces. 342An obsolescent version of this option used a numeric parameter 343with no option, and is currently supported for backward compatibility. 344By default, this display summarizes information for all interfaces. 345Information for a specific interface may be displayed with the 346.Fl I Ar interface 347option. 348.Bl -tag -width indent 349.It Fl I Ar interface 350Only show information regarding 351.Ar interface 352.It Fl 4 353Show IPv4 only. 354See 355.Sx GENERAL OPTIONS . 356.It Fl 6 357Show IPv6 only. 358See 359.Sx GENERAL OPTIONS . 360.It Fl d 361Show the number of dropped packets. 362.It Fl M 363Use an alternative core. 364See 365.Sx GENERAL OPTIONS . 366.It Fl N 367Use an alternative kernel image. 368See 369.Sx GENERAL OPTIONS . 370.It Fl q 371Exit after 372.Ar howmany 373outputs. 374.El 375.It Xo 376.Bk -words 377.Nm 378.Fl s 379.Op Fl 46sz 380.Op Fl f Ar protocol_family | Fl p Ar protocol 381.Op Fl M Ar core 382.Op Fl N Ar system 383.Ek 384.Xc 385Display system-wide statistics for each network protocol. 386.Bl -tag -width indent 387.It Fl 4 388Show IPv4 only. 389See 390.Sx GENERAL OPTIONS . 391.It Fl 6 392Show IPv6 only. 393See 394.Sx GENERAL OPTIONS . 395.It Fl s 396If 397.Fl s 398is repeated, counters with a value of zero are suppressed. 399.It Fl z 400Reset statistic counters after displaying them. 401.It Fl f Ar protocol_family 402Filter by 403.Ar protocol_family . 404See 405.Sx GENERAL OPTIONS . 406.It Fl p Ar protocol 407Filter by 408.Ar protocol . 409See 410.Sx GENERAL OPTIONS . 411.It Fl M 412Use an alternative core. 413See 414.Sx GENERAL OPTIONS . 415.It Fl N 416Use an alternative kernel image 417See 418.Sx GENERAL OPTIONS . 419.El 420.It Xo 421.Bk -words 422.Nm 423.Fl i | I Ar interface Fl s 424.Op Fl 46s 425.Op Fl f Ar protocol_family | Fl p Ar protocol 426.Op Fl M Ar core 427.Op Fl N Ar system 428.Ek 429.Xc 430Display per-interface statistics for each network protocol. 431If both 432.Fl i 433and 434.Fl I 435are specified, 436.Fl I 437overrides any instances of 438.Fl i . 439.Bl -tag -width indent 440.It Fl 4 441Show IPv4 only 442See 443.Sx GENERAL OPTIONS . 444.It Fl 6 445Show IPv6 only 446See 447.Sx GENERAL OPTIONS . 448.It Fl s 449If 450.Fl s 451is repeated, counters with a value of zero are suppressed. 452.It Fl f Ar protocol_family 453Filter by 454.Ar protocol_family . 455See 456.Sx GENERAL OPTIONS . 457.It Fl p Ar protocol 458Filter by 459.Ar protocol . 460See 461.Sx GENERAL OPTIONS . 462.It Fl M 463Use an alternative core 464See 465.Sx GENERAL OPTIONS . 466.It Fl N 467Use an alternative kernel image 468See 469.Sx GENERAL OPTIONS . 470.El 471.It Xo 472.Bk -words 473.Nm 474.Fl m 475.Op Fl M Ar core 476.Op Fl N Ar system 477.Ek 478.Xc 479Show statistics recorded by the memory management routines 480.Pq Xr mbuf 9 . 481The network manages a private pool of memory buffers. 482.Bl -tag -width indent 483.It Fl M 484Use an alternative core 485See 486.Sx GENERAL OPTIONS . 487.It Fl N 488Use an alternative kernel image 489See 490.Sx GENERAL OPTIONS . 491.El 492.It Xo 493.Bk -words 494.Nm 495.Fl B 496.Op Fl z 497.Op Fl I Ar interface 498.Ek 499.Xc 500Show statistics about 501.Xr bpf 4 502peers. 503This includes information like 504how many packets have been matched, dropped and received by the 505bpf device, also information about current buffer sizes and device 506states. 507.Pp 508The 509.Xr bpf 4 510flags displayed when 511.Nm 512is invoked with the 513.Fl B 514option represent the underlying parameters of the bpf peer. 515Each flag is 516represented as a single lower case letter. 517The mapping between the letters and flags in order of appearance are: 518.Bl -column ".Li i" 519.It Li p Ta Set if listening promiscuously 520.It Li i Ta Dv BIOCIMMEDIATE No has been set on the device 521.It Li f Ta Dv BIOCGHDRCMPLT No status: source link addresses are being 522filled automatically 523.It Li s Ta Dv BIOCGSEESENT No status: see packets originating locally and 524remotely on the interface. 525.It Li a Ta Packet reception generates a signal 526.It Li l Ta Dv BIOCLOCK No status: descriptor has been locked 527.El 528.Pp 529For more information about these flags, please refer to 530.Xr bpf 4 . 531.Bl -tag -width indent 532.It Fl z 533Reset statistic counters after displaying them. 534.El 535.It Xo 536.Bk -words 537.Nm 538.Fl r 539.Op Fl 46AnW 540.Op Fl F Ar fibnum 541.Op Fl f Ar address_family 542.Op Fl M Ar core 543.Op Fl N Ar system 544.Ek 545.Xc 546Display the contents of routing tables. 547.Pp 548When 549.Nm 550is invoked with the routing table option 551.Fl r , 552it lists the available routes and their status. 553Each route consists of a destination host or network, and a gateway to use 554in forwarding packets. 555The flags field shows a collection of information about the route stored 556as binary choices. 557The individual flags are discussed in more detail in the 558.Xr route 8 559and 560.Xr route 4 561manual pages. 562The mapping between letters and flags is: 563.Bl -column ".Li W" ".Dv RTF_WASCLONED" 564.It Li 1 Ta Dv RTF_PROTO1 Ta "Protocol specific routing flag #1" 565.It Li 2 Ta Dv RTF_PROTO2 Ta "Protocol specific routing flag #2" 566.It Li 3 Ta Dv RTF_PROTO3 Ta "Protocol specific routing flag #3" 567.It Li B Ta Dv RTF_BLACKHOLE Ta "Just discard pkts (during updates)" 568.It Li b Ta Dv RTF_BROADCAST Ta "The route represents a broadcast address" 569.It Li D Ta Dv RTF_DYNAMIC Ta "Created dynamically (by redirect)" 570.It Li G Ta Dv RTF_GATEWAY Ta "Destination requires forwarding by intermediary" 571.It Li H Ta Dv RTF_HOST Ta "Host entry (net otherwise)" 572.It Li L Ta Dv RTF_LLINFO Ta "Valid protocol to link address translation" 573.It Li M Ta Dv RTF_MODIFIED Ta "Modified dynamically (by redirect)" 574.It Li R Ta Dv RTF_REJECT Ta "Host or net unreachable" 575.It Li S Ta Dv RTF_STATIC Ta "Manually added" 576.It Li U Ta Dv RTF_UP Ta "Route usable" 577.It Li X Ta Dv RTF_XRESOLVE Ta "External daemon translates proto to link address" 578.El 579.Pp 580Direct routes are created for each 581interface attached to the local host; 582the gateway field for such entries shows the address of the outgoing interface. 583The refcnt field gives the 584current number of active uses of the route. 585Connection oriented 586protocols normally hold on to a single route for the duration of 587a connection while connectionless protocols obtain a route while sending 588to the same destination. 589The use field provides a count of the number of packets 590sent using that route. 591The interface entry indicates the network interface utilized for the route. 592.Bl -tag -width indent 593.It Fl 4 594Show IPv4 only. 595See 596.Sx GENERAL OPTIONS . 597.It Fl 6 598Show IPv6 only. 599See 600.Sx GENERAL OPTIONS . 601.It Fl n 602Do not resolve numeric addresses and port numbers to names. 603See 604.Sx GENERAL OPTIONS . 605.It Fl W 606Show the path MTU for each route, and print interface names with a 607wider field size. 608.It Fl F 609Display the routing table with the number 610.Ar fibnum . 611If the specified 612.Ar fibnum 613is -1 or 614.Fl F 615is not specified, 616the default routing table is displayed. 617.It Fl f 618Display the routing table for a particular 619.Ar address_family . 620.It Fl M 621Use an alternative core 622See 623.Sx GENERAL OPTIONS . 624.It Fl N 625Use an alternative kernel image 626See 627.Sx GENERAL OPTIONS . 628.El 629.It Xo 630.Bk -words 631.Nm 632.Fl rs 633.Op Fl s 634.Op Fl M Ar core 635.Op Fl N Ar system 636.Ek 637.Xc 638Display routing statistics. 639.Bl -tag -width indent 640.It Fl s 641If 642.Fl s 643is repeated, counters with a value of zero are suppressed. 644.It Fl M 645Use an alternative core 646See 647.Sx GENERAL OPTIONS . 648.It Fl N 649Use an alternative kernel image 650See 651.Sx GENERAL OPTIONS . 652.El 653.It Xo 654.Bk -words 655.Nm 656.Fl g 657.Op Fl 46W 658.Op Fl f Ar address_family 659.Op Fl M Ar core 660.Op Fl N Ar system 661.Ek 662.Xc 663Display the contents of the multicast virtual interface tables, 664and multicast forwarding caches. 665Entries in these tables will appear only when the kernel is 666actively forwarding multicast sessions. 667This option is applicable only to the 668.Cm inet 669and 670.Cm inet6 671address families. 672.Bl -tag -width indent 673.It Fl 4 674Show IPv4 only 675See 676.Sx GENERAL OPTIONS . 677.It Fl 6 678Show IPv6 only 679See 680.Sx GENERAL OPTIONS . 681.It Fl W 682Avoid truncating addresses even if this causes some fields to overflow. 683.It Fl f Ar protocol_family 684Filter by 685.Ar protocol_family . 686See 687.Sx GENERAL OPTIONS . 688.It Fl M 689Use an alternative core 690See 691.Sx GENERAL OPTIONS . 692.It Fl N 693Use an alternative kernel image 694See 695.Sx GENERAL OPTIONS . 696.El 697.It Xo 698.Bk -words 699.Nm 700.Fl gs 701.Op Fl 46s 702.Op Fl f Ar address_family 703.Op Fl M Ar core 704.Op Fl N Ar system 705.Ek 706.Xc 707Show multicast routing statistics. 708.Bl -tag -width indent 709.It Fl 4 710Show IPv4 only 711See 712.Sx GENERAL OPTIONS . 713.It Fl 6 714Show IPv6 only 715See 716.Sx GENERAL OPTIONS . 717.It Fl s 718If 719.Fl s 720is repeated, counters with a value of zero are suppressed. 721.It Fl f Ar protocol_family 722Filter by 723.Ar protocol_family . 724See 725.Sx GENERAL OPTIONS . 726.It Fl M 727Use an alternative core 728See 729.Sx GENERAL OPTIONS . 730.It Fl N 731Use an alternative kernel image 732See 733.Sx GENERAL OPTIONS . 734.El 735.It Xo 736.Bk -words 737.Nm 738.Fl Q 739.Ek 740.Xc 741Show 742.Xr netisr 9 743statistics. 744The flags field shows available ISR handlers: 745.Bl -column ".Li W" ".Dv NETISR_SNP_FLAGS_DRAINEDCPU" 746.It Li C Ta Dv NETISR_SNP_FLAGS_M2CPUID Ta "Able to map mbuf to cpu id" 747.It Li D Ta Dv NETISR_SNP_FLAGS_DRAINEDCPU Ta "Has queue drain handler" 748.It Li F Ta Dv NETISR_SNP_FLAGS_M2FLOW Ta "Able to map mbuf to flow id" 749.El 750.El 751.Ss GENERAL OPTIONS 752Some options have the general meaning: 753.Bl -tag -width flag 754.It Fl 4 755Is shorthand for 756.Fl f 757.Ar inet 758.Pq Show only IPv4 759.It Fl 6 760Is shorthand for 761.Fl f 762.Ar inet6 763.Pq Show only IPv6 764.It Fl f Ar address_family , Fl p Ar protocol 765Limit display to those records 766of the specified 767.Ar address_family 768or a single 769.Ar protocol . 770The following address families and protocols are recognized: 771.Pp 772.Bl -tag -width ".Cm netgraph , ng Pq Dv AF_NETGRAPH" -compact 773.It Em Family 774.Em Protocols 775.It Cm inet Pq Dv AF_INET 776.Cm divert , icmp , igmp , ip , ipsec , pim, sctp , tcp , udp 777.It Cm inet6 Pq Dv AF_INET6 778.Cm icmp6 , ip6 , ipsec6 , rip6 , sctp , tcp , udp 779.It Cm pfkey Pq Dv PF_KEY 780.Cm pfkey 781.It Cm netgraph , ng Pq Dv AF_NETGRAPH 782.Cm ctrl , data 783.It Cm unix Pq Dv AF_UNIX 784.It Cm link Pq Dv AF_LINK 785.El 786.Pp 787The program will complain if 788.Ar protocol 789is unknown or if there is no statistics routine for it. 790.It Fl M 791Extract values associated with the name list from the specified core 792instead of the default 793.Pa /dev/kmem . 794.It Fl N 795Extract the name list from the specified system instead of the default, 796which is the kernel image the system has booted from. 797.It Fl n 798Show network addresses and ports as numbers. 799Normally 800.Nm 801attempts to resolve addresses and ports, 802and display them symbolically. 803.It Fl W 804Wider output; expand address fields, etc, to avoid truncation. 805Non-numeric values such as domain names may still be truncated; use the 806.Fl n 807option if necessary to avoid ambiguity. 808.El 809.Sh EXAMPLES 810Show packet traffic information (packets, bytes, errors, packet drops, etc) for 811interface re0 updated every 2 seconds and exit after 5 outputs: 812.Bd -literal -offset indent 813$ netstat -w 2 -q 5 -I re0 814.Ed 815.Pp 816Show statistics for ICMP on any interface: 817.Bd -literal -offset indent 818$ netstat -s -p icmp 819.Ed 820.Pp 821Show routing tables: 822.Bd -literal -offset indent 823$ netstat -r 824.Ed 825.Pp 826Same as above, but without resolving numeric addresses and port numbers to 827names: 828.Bd -literal -offset indent 829$ netstat -rn 830.Ed 831.Sh SEE ALSO 832.Xr fstat 1 , 833.Xr nfsstat 1 , 834.Xr procstat 1 , 835.Xr ps 1 , 836.Xr sockstat 1 , 837.Xr libxo 3 , 838.Xr xo_parse_args 3 , 839.Xr bpf 4 , 840.Xr inet 4 , 841.Xr route 4 , 842.Xr unix 4 , 843.Xr hosts 5 , 844.Xr networks 5 , 845.Xr protocols 5 , 846.Xr services 5 , 847.Xr iostat 8 , 848.Xr route 8 , 849.Xr vmstat 8 , 850.Xr mbuf 9 851.Sh HISTORY 852The 853.Nm 854command appeared in 855.Bx 4.2 . 856.Pp 857IPv6 support was added by WIDE/KAME project. 858.Sh BUGS 859The notion of errors is ill-defined. 860