Forrest logo
back to the conntrack tool

conntrack:tldr:7abaa

conntrack: Display a real-time event log of connection changes for a specific IP address.
$ conntrack --event --orig-src ${ip_address}
try on your machine

The command conntrack --event --orig-src ${ip_address} is used to monitor events related to network connections established by the machine. Let's break down the command:

  • conntrack: It is a utility program that allows users to view and manipulate the in-kernel connection tracking state table.
  • --event: This flag instructs conntrack to print events related to network connections. It will display information whenever a connection is created, destroyed, or modified.
  • --orig-src: This flag filters the events based on the original source IP address of the connection.
  • ${ip_address}: This is a placeholder syntax to represent the specific IP address you want to filter events for. You need to replace ${ip_address} with the actual IP address you want to monitor.

By using this command, you can monitor events related to network connections that have a specific source IP address, as specified by ${ip_address}.

This explanation was created by an AI. In most cases those are correct. But please always be careful and never run a command you are not sure if it is safe.
back to the conntrack tool