In my security-related roles at various past jobs, I have often found the need to view open connections to a server. Sometimes I suspect a compromise, sometimes I’m troubleshooting a network issue. I had always used netstat to show me those open connections. Well, no more. I discovered iptstate (iptables state top), quite by accident, when pruning a distribution for size. From the man page:
iptstate displays information held in the IP Tables state table in real-time in a top-like format. Output can be sorted by any field, or any field reversed. Users can choose to have the output only print once and exit, rather than the top-like system. Refresh rate is configurable, IPs can be resolved to names, output can be formatted, the display can be filtered, and color coding are among some of the many features.
0 Responses to “iptstate — Your new connection-viewing friend”