Update 'README.md'
This commit is contained in:
parent
3418883eb5
commit
3f3e09cfcf
164
README.md
164
README.md
|
@ -17,81 +17,93 @@ The search criteria can be any of the following.
|
|||
* username
|
||||
|
||||
# Command Line Options
|
||||
```
|
||||
-a Show all connections.
|
||||
--drp Do not resolve port names.
|
||||
-i Invert the sort.
|
||||
-l Show the listening ports.
|
||||
-n Do not resolve the PTRs.
|
||||
--nc Do not use colors.
|
||||
--pct Show memory and CPU usage percent.
|
||||
-S <sort> The Net::Connection::Sort to use.
|
||||
-t Show only TCP connections.
|
||||
-u Show only UDP connections.
|
||||
-W Show the wchan.
|
||||
|
||||
-a Show all connections.
|
||||
--drp Do not resolve port names.
|
||||
-i Invert the sort.
|
||||
-l Show the listening ports.
|
||||
-n Do not resolve the PTRs.
|
||||
--nc Do not use colors.
|
||||
-S <sort> The Net::Connection::Sort to use.
|
||||
-t Show only TCP connections.
|
||||
-u Show only UDP connections.
|
||||
|
||||
-c <CIDRs> A comma seperated list of CIDRs to search for.
|
||||
--ci Invert the CIDR search.
|
||||
|
||||
-C Show the command to the first space.
|
||||
--Cl Show the whole command.
|
||||
|
||||
--cmd <cmds> A comma seperated list of commands to search for.
|
||||
--cmdi Invert the command search.
|
||||
|
||||
-p <ports> A comma seperated list of ports to search for.
|
||||
--pi Invert the port search.
|
||||
|
||||
-P <protos> A comma seperated list of protocols to search for.
|
||||
--Pi Invert your protocol search.
|
||||
|
||||
--pid <pids> A comma separated list of PIDs to search for.
|
||||
--pidi Invert the pid search.
|
||||
|
||||
--ptrr <rgx> A comma seperated list of regex to use for a PTR search.
|
||||
--ptrri Invert the RegexPTR search.
|
||||
--lptrr <rgx> A comma seperated list of regex to use for a local PTR search.
|
||||
--lptrri Invert the local RegexPTR search.
|
||||
--rptrr <rgx> A comma seperated list of regex to use for a remote PTR search.
|
||||
--rptrri Invert the remote RegexPTR search.
|
||||
|
||||
--ptr <PTRs> A comma seperated list of PTRs to search for.
|
||||
--ptri Invert the PTR search.
|
||||
--lptr <PTRs> A comma seperated list of local PTRs to search for.
|
||||
--lptri Invert the local PTR search.
|
||||
--rptr <PTRs> A comma seperated list of remote PTRs to search for.
|
||||
--rptri Invert the remote PTR search.
|
||||
|
||||
-s <states> A comma seperated list of states to search for.
|
||||
--si Invert the state search.
|
||||
|
||||
-u <users> A comma seperated list of usernames to search for.
|
||||
--ui Invert the username search.
|
||||
|
||||
--uid <uids> A comma separated list of UIDs to search for.
|
||||
--uidi Invert the UID search.
|
||||
|
||||
The default available sort methods are as below.
|
||||
host_f foreign host
|
||||
host_fl foreign host, local host
|
||||
host_l local host
|
||||
host_lf local host, foreign host
|
||||
pid process ID
|
||||
port_f foreign port, numerically
|
||||
port_fa foreign port, alphabetically
|
||||
port_l local port, numerically
|
||||
port_la local port, alphabetically
|
||||
proto protocol
|
||||
ptr_f foreign PTR
|
||||
ptr_l local PTR
|
||||
state state
|
||||
uid user ID
|
||||
user username
|
||||
|
||||
For PID and UID searches, the equalities below can be used, by
|
||||
directly prepending them to the number.
|
||||
<
|
||||
<=
|
||||
>
|
||||
>=
|
||||
-c <CIDRs> A comma seperated list of CIDRs to search for.
|
||||
--ci Invert the CIDR search.
|
||||
|
||||
-C Show the command to the first space.
|
||||
--Cl Show the whole command.
|
||||
|
||||
--cmd <cmds> A comma seperated list of commands to search for.
|
||||
--cmdi Invert the command search.
|
||||
|
||||
--cpu <pct> Show connections belonging to procs matching this CPU usage percent.
|
||||
--cpui Invert the CPU search.
|
||||
|
||||
--mem <pct> Show connections belonging to procs matching this memory usage percent.
|
||||
--memi Invert the memory usage search.
|
||||
|
||||
-p <ports> A comma seperated list of ports to search for.
|
||||
--pi Invert the port search.
|
||||
|
||||
-P <protos> A comma seperated list of protocols to search for.
|
||||
--Pi Invert your protocol search.
|
||||
|
||||
--pid <pids> A comma separated list of PIDs to search for.
|
||||
--pidi Invert the pid search.
|
||||
|
||||
--ptrr <rgx> A comma seperated list of regex to use for a PTR search.
|
||||
--ptrri Invert the RegexPTR search.
|
||||
--lptrr <rgx> A comma seperated list of regex to use for a local PTR search.
|
||||
--lptrri Invert the local RegexPTR search.
|
||||
--rptrr <rgx> A comma seperated list of regex to use for a remote PTR search.
|
||||
--rptrri Invert the remote RegexPTR search.
|
||||
|
||||
--ptr <PTRs> A comma seperated list of PTRs to search for.
|
||||
--ptri Invert the PTR search.
|
||||
--lptr <PTRs> A comma seperated list of local PTRs to search for.
|
||||
--lptri Invert the local PTR search.
|
||||
--rptr <PTRs> A comma seperated list of remote PTRs to search for.
|
||||
--rptri Invert the remote PTR search.
|
||||
|
||||
-s <states> A comma seperated list of states to search for.
|
||||
--si Invert the state search.
|
||||
|
||||
-U <users> A comma seperated list of usernames to search for.
|
||||
--Ui Invert the username search.
|
||||
|
||||
--uid <uids> A comma separated list of UIDs to search for.
|
||||
--uidi Invert the UID search.
|
||||
|
||||
-w <rgx> A comma separated list of regexp to use for matching wchan values.
|
||||
--wi Invert the wchan search.
|
||||
|
||||
The default available sort methods are as below.
|
||||
host_f foreign host
|
||||
host_fl foreign host, local host
|
||||
host_l local host
|
||||
host_lf local host, foreign host
|
||||
pid process ID
|
||||
port_f foreign port, numerically
|
||||
port_fa foreign port, alphabetically
|
||||
port_l local port, numerically
|
||||
port_la local port, alphabetically
|
||||
proto protocol
|
||||
ptr_f foreign PTR
|
||||
ptr_l local PTR
|
||||
state state
|
||||
uid user ID
|
||||
user username
|
||||
|
||||
For CPU, memory, PID, and UID searches, the equalities below can be
|
||||
used, by directly prepending them to the number.
|
||||
<
|
||||
<=
|
||||
>
|
||||
>=
|
||||
```
|
||||
|
||||
# Examples
|
||||
|
||||
|
@ -134,6 +146,10 @@ PTR info and print the whole command.
|
|||
|
||||
Show every connecttion by the user www that is not a HTTP or HTTPS connection.
|
||||
|
||||
ncnetstat --cpu '>5' --Cl --pct -W
|
||||
|
||||
Search for connections from procs using more than 5% of the CPU time. Show memory
|
||||
and CPU usage as well whole command and wait channel.
|
||||
|
||||
# Installing
|
||||
|
||||
|
|
Loading…
Reference in New Issue