Forrest logo
back to the conntrack tool

conntrack:tldr:c61a9

conntrack: Display a real-time event log of connection changes and associated timestamps.
$ conntrack --event -o timestamp
try on your machine

The conntrack command is used to examine and interact with the connection tracking system in the Linux kernel. It allows you to view and modify the state of network connections being tracked.

The --event option is used to display real-time events related to the connection tracking. It shows events such as connection creation, deletion, modification, etc. This can be useful for monitoring network traffic and debugging network issues.

The -o timestamp option is used to include a timestamp with each event displayed. It adds the current date and time to the event output, providing a chronological reference for each event.

By combining both options, conntrack --event -o timestamp will continuously display connection tracking events in real-time, with a timestamp for each event.

This explanation was created by an AI. In most cases those are correct. But please always be careful and never run a command you are not sure if it is safe.
back to the conntrack tool