From: Vadim Kochan <vadi...@gmail.com>
Add the same note about using iptables to activate conntrack as it is
already described in 'flowtop -h', just to keep it in the man page too.
Signed-off-by: Vadim Kochan <vadi...@gmail.com>
---
flowtop.8 | 13 +++++++++++--
1 file changed, 11 insertions(+), 2 deletions(-)
diff --git a/flowtop.8 b/flowtop.8
index 761f4a7..61be0f6 100644
--- a/flowtop.8
+++ b/flowtop.8
@@ -37,7 +37,15 @@ The following information will be presented in flowtop's
output:
* Transport protocol state machine information
.PP
In order for flowtop to work, netfilter must be active and running
-on your machine, thus kernel-side connection tracking is active.
+on your machine, thus kernel-side connection tracking is active. If netfilter
+is not running, you can activate it with iptables(8):
+.in +4
+.sp
+$ iptables -A INPUT -p tcp -m state --state ESTABLISHED -j ACCEPT
+.sp
+$ iptables -A OUTPUT -p tcp -m state --state NEW,ESTABLISHED -j ACCEPT
+.in -4
+
.PP
flowtop's intention is just to get a quick look over your active connections.
If you want logging support, have a look at netfilter's conntrack(8) tools
@@ -125,7 +133,8 @@ Borkmann <dbor...@tik.ee.ethz.ch>.
.BR ifpps (8),
.BR bpfc (8),
.BR astraceroute (8),
-.BR curvetun (8)
+.BR curvetun (8),
+.BR iptables (8)
.PP
.SH AUTHOR
Manpage was written by Daniel Borkmann.
--
2.4.2
--
You received this message because you are subscribed to the Google Groups
"netsniff-ng" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to netsniff-ng+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
