.TH CONNTRACK 8 "Apr 11, 2009" "" "" .\" Man page written by Harald Welte = 2.6.30): .TP .BI "--sport, --orig-port-src " "PORT" Source port in original direction .TP .BI "--dport, --orig-port-dst " "PORT" Destination port in original direction .TP .BI "--reply-port-src " "PORT" Source port in reply direction .TP .BI "--reply-port-dst " "PORT" Destination port in reply direction .TP .BI "--state " "[NONE | REQUEST | RESPOND | PARTOPEN | OPEN | CLOSEREQ | CLOSING | TIMEWAIT]" DCCP state .BI "--role " "[client | server]" Role that the original conntrack tuple is tracking .TP GRE-specific fields: .TP .BI "--srckey, --orig-key-src " "KEY" Source key in original direction (in hexadecimal or decimal) .TP .BI "--dstkey, --orig-key-dst " "KEY" Destination key in original direction (in hexadecimal or decimal) .TP .BI "--reply-key-src " "KEY" Source key in reply direction (in hexadecimal or decimal) .TP .BI "--reply-key-dst " "KEY" Destination key in reply direction (in hexadecimal or decimal) .TP .SH DIAGNOSTICS The exit code is 0 for correct function. Errors which appear to be caused by invalid command line parameters cause an exit code of 2. Any other errors cause an exit code of 1. .SH EXAMPLES .TP .B conntrack \-L Show the connection tracking table in /proc/net/ip_conntrack format .TP .B conntrack \-L -o extended Show the connection tracking table in /proc/net/nf_conntrack format .TP .B conntrack \-L \-o xml Show the connection tracking table in XML .TP .B conntrack \-L -f ipv6 -o extended Only dump IPv6 connections in /proc/net/nf_conntrack format .TP .B conntrack \-L --src-nat Show source NAT connections .TP .B conntrack \-E \-o timestamp Show connection events together with the timestamp .TP .B conntrack \-D \-s 1.2.3.4 Delete all flow whose source address is 1.2.3.4 .TP .B conntrack \-U \-s 1.2.3.4 \-m 1 Set connmark to 1 of all the flows whose source address is 1.2.3.4 .SH BUGS Please, report them to netfilter-devel@vger.kernel.org or file a bug in Netfilter's bugzilla (https://bugzilla.netfilter.org). .SH SEE ALSO .BR iptables (8) .br See .BR "http://conntrack-tools.netfilter.org" .SH AUTHORS Jay Schulist, Patrick McHardy, Harald Welte and Pablo Neira Ayuso wrote the kernel-level "ctnetlink" interface that is used by the conntrack tool. .PP Pablo Neira Ayuso wrote and maintain the conntrack tool, Harald Welte added support for conntrack based accounting counters. .PP Man page written by Harald Welte and Pablo Neira Ayuso .