Connections by Host Address
This DTrace one-liner counts inbound TCP connections by source IP address:
# dtrace -n 'tcp:::accept-established { @[args[3]->tcps_raddr] = count(); }'
dtrace: description 'tcp:::state-change' matched 1 probes
^C
127.0.0.1 1
192.0.2.35/27 1
fe80::214:4fff:fe8d:59aa 1
192.0.2.14/27 3
The preceding output shows there were 3
TCP connections from 192.0.2.14
, a single TCP connection from the IPv6 host fe80::214:4fff:fe8d:59aa
.