B - initial SYN from outside, D - DNS, d - dump,
E - outside back connection, F - outside FIN, f - inside FIN,
G - group, H - H.323, I - inbound data, M - SMTP data,
m - SIP media, O - outbound data, P - inside back connection,
q - SQL*Net data, R - outside acknowledged FIN,
R - UDP RPC, r - inside acknowledged FIN, S - awaiting inside SYN,
s - awaiting outside SYN, T - SIP, t - SIP transient, U - up
obtained from show conn ...
look at the top of the results.