Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Michael <mutk@iprimus.com.au>
To: netfilter ML <netfilter@lists.samba.org>
Subject: Re: understanding ip_conntrack entry
Date: Fri, 04 Oct 2002 12:45:04 +1000	[thread overview]
Message-ID: <3D9D00B0.8080901@iprimus.com.au> (raw)
In-Reply-To: 000f01c26b18$2d114990$3201a8c0@leonardo

netstat uses files in /proc/net (from netstat man page) :
/proc/net/dev -- device information

/proc/net/raw -- raw socket information

/proc/net/tcp -- TCP socket information

/proc/net/udp -- UDP socket information

/proc/net/igmp -- IGMP multicast information

/proc/net/unix -- Unix domain socket information

/proc/net/ipx -- IPX socket information

/proc/net/ax25 -- AX25 socket information

/proc/net/appletalk -- DDP (appletalk) socket information

/proc/net/nr -- NET/ROM socket information

/proc/net/route -- IP routing information

/proc/net/ax25_route -- AX25 routing information

/proc/net/ipx_route -- IPX routing information

/proc/net/nr_nodes -- NET/ROM nodelist

/proc/net/nr_neigh -- NET/ROM neighbours

/proc/net/ip_masquerade -- masqueraded connections

/proc/net/snmp -- statistics

It doesn't use or know anything about ip_conntrack
Therefore any statefull activity cannot be shown in netstat. Maybe it 
needs re-writing ?? :)

Cheers,
Michael



Leonardo Rodrigues ( listas ) wrote:

>    Hello Guys,
>
>    I'd like your help to understand this entry from /proc/net/ip_conntrack:
>
>tcp      6 325849 ESTABLISHED src=192.168.10.1 dst=192.168.229.25
>sport=53699 dport=80 [UNREPLIED] \
>    src=192.168.229.25 dst=192.168.10.1 sport=80 dport=53699 use=1
>
>
>    Well ...... 192.168.10.1 is my iptables box and 192.168.229.25 is one of
>my remote machines. My question is .... if this connection is marked as
>ESTABLISHED, shouldnt it appear on 'netstat -an' entries ??? I think it
>should, but it's not appearing there .....
>
>    Sincerily,
>    Leonardo Rodrigues
>
>
>
>
>  
>





  parent reply	other threads:[~2002-10-04  2:45 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2002-10-03 20:05 understanding ip_conntrack entry Leonardo Rodrigues ( listas )
2002-10-03 22:40 ` Antony Stone
2002-10-04  2:45 ` Michael [this message]
2002-10-04  8:31   ` Eric Leblond
2002-10-04  9:36     ` Antony Stone

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=3D9D00B0.8080901@iprimus.com.au \
    --to=mutk@iprimus.com.au \
    --cc=netfilter@lists.samba.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox