.TH CONNTRACK 8 "Aug 9, 2019" "" "" .\" Man page written by Harald Welte = 2.6.30): .TP .BI "--sport, --orig-port-src " "PORT" Source port in original direction .TP .BI "--dport, --orig-port-dst " "PORT" Destination port in original direction .TP .BI "--reply-port-src " "PORT" Source port in reply direction .TP .BI "--reply-port-dst " "PORT" Destination port in reply direction .TP .BI "--state " "state" DCCP state, one of NONE, REQUEST, RESPOND, PARTOPEN, OPEN, CLOSEREQ, CLOSING, TIMEWAIT. .TP .BI "--role " "[client|server]" Role that the original conntrack tuple is tracking .TP GRE-specific fields: .TP .BI "--srckey, --orig-key-src " "KEY" Source key in original direction (in hexadecimal or decimal) .TP .BI "--dstkey, --orig-key-dst " "KEY" Destination key in original direction (in hexadecimal or decimal) .TP .BI "--reply-key-src " "KEY" Source key in reply direction (in hexadecimal or decimal) .TP .BI "--reply-key-dst " "KEY" Destination key in reply direction (in hexadecimal or decimal) .SH DIAGNOSTICS The exit code is 0 for correct function. Errors which appear to be caused by invalid command line parameters cause an exit code of 2. Any other errors cause an exit code of 1. .SH EXAMPLES .TP .B conntrack \-L Show the connection tracking table in /proc/net/ip_conntrack format .TP .B conntrack \-L -o extended Show the connection tracking table in /proc/net/nf_conntrack format, with additional information. .TP .B conntrack \-L \-o xml Show the connection tracking table in XML .TP .B conntrack \-L \-o save Show the connection tracking table in conntrack syntax format .TP .B conntrack \-L -f ipv6 -o extended Only dump IPv6 connections in /proc/net/nf_conntrack format, with additional information. .TP .B conntrack \-L --src-nat Show source NAT connections .TP .B conntrack \-E \-o timestamp Show connection events together with the timestamp .TP .B conntrack \-D \-s 1.2.3.4 Delete all flows whose source address is 1.2.3.4 .TP .B conntrack \-U \-s 1.2.3.4 \-m 1 Set connmark to 1 of all the flows whose source address is 1.2.3.4 .TP .B conntrack -L -w 11 -o save | sed "s/-w 11/-w 12/g" | conntrack --load-file - Copy all entries from ct zone 11 to ct zone 12 .SH BUGS Please, report them to netfilter-devel@vger.kernel.org or file a bug in Netfilter's bugzilla (https://bugzilla.netfilter.org). .SH SEE ALSO .BR nftables (8), iptables (8), conntrackd(8) .br See .BR "http://conntrack-tools.netfilter.org" .SH AUTHORS Jay Schulist, Patrick McHardy, Harald Welte and Pablo Neira Ayuso wrote the kernel-level "ctnetlink" interface that is used by the conntrack tool. .PP Pablo Neira Ayuso wrote and maintains the conntrack tool, Harald Welte added support for conntrack\-based accounting counters. .PP Man page written by Harald Welte and Pablo Neira Ayuso .