netstat-nat(1)

Usage

netstat-nat [options]

Overview

netstat-nat Displays NAT connections managed by netfilter/iptables which comes with the > 2.4.x linux kernels.

The program reads its information from '/proc/net/ip_conntrack' or '/proc/net/nf_conntrack', which is the temporary conntrack-storage of netfilter.

Options

-h: displays help

-n: don't resolve IPs/portnumbers to host/portnames

-p <protocol>: display NAT connections with protocol selection (see /etc/protocols)

`-s <source host>`	display connections by source IP/hostname
`-d <destination host>`	display connections by destination IP/hostname

-S: display SNAT connections

-D: display DNAT connections

-L: display only connections to NAT box self (doesn't show SNAT & DNAT)

-R: display only connections routed through the NAT box (doesn't show SNAT & DNAT)

-x: extended view of hostnames

-r <src|dst|src-port|dst-port|state>: sort connections

-o: no output header

-N: display NAT box connection information (only valid with SNAT & DNAT)

-v: prints version

Files

/proc/net/ip_conntrack or /proc/net/nf_conntrack

Releases

12 releases since Debian 3.1 (Sarge); the text changed 3 times.

-N since Arch Linux 2026-11-01; -R since Debian 5.0 (Lenny); -h since Arch Linux 2026-11-01; -r since Arch Linux 2026-11-01; -v since Arch Linux 2026-11-01.

-X until Debian 13 (Trixie); -d until Debian 13 (Trixie); -g until Debian 13 (Trixie); -s until Debian 13 (Trixie).