Matching state in ra().

[Scott A. McIntyre]

Hi,

What's the best way to match a TCP connection state in a ra() query?
I know how to get it reported, but if I only want to report a specific
state, is there a twiddle somewhere that will do this?

Specifically, if I were wanting to get Established matches for a
specific port/protocol.

Thanks,

Scott