一、listen+established+time wait+close wait。

listen:SELECT mean("listen") FROM "tcp.stat" WHERE "host" =~ /$machine$/ AND "type" =~ /$type$/ AND $timeFilter GROUP BY time($interval), "host" fill(null)  
     
      established:SELECT mean("established") FROM "tcp.stat" WHERE "host" =~ /$machine$/ AND "type" =~ /$type$/ AND $timeFilter GROUP BY time($interval), "host" fill(null)  
      
       time wait:SELECT mean("time_wait") FROM "tcp.stat" WHERE "host" =~ /$machine$/ AND "type" =~ /$type$/ AND $timeFilter GROUP BY time($interval), "host" fill(null)  
       
        close wait:SELECT mean("close_wait") FROM "tcp.stat" WHERE "host" =~ /$machine$/ AND "type" =~ /$type$/ AND $timeFilter GROUP BY time($interval), "host" fill(null)  
        
       
      
     

二、sync sent+sync recv+fin wait1+fln wait2+closing+close

sync sent:SELECT mean("syn_sent") FROM "tcp.stat" WHERE "host" =~ /$machine$/ AND "type" =~ /$type$/ AND $timeFilter GROUP BY time($interval), "host" fill(null)    
     
      sync recv:SELECT mean("syn_recv") FROM "tcp.stat" WHERE "host" =~ /$machine$/ AND "type" =~ /$type$/ AND $timeFilter GROUP BY time($interval), "host" fill(null)     
      
       fin wait1:SELECT mean("fin_wait1") FROM "tcp.stat" WHERE "host" =~ /$machine$/ AND "type" =~ /$type$/ AND $timeFilter GROUP BY time($interval), "host" fill(null)     
       
        fin wait2:SELECT mean("fin_wait2") FROM "tcp.stat" WHERE "host" =~ /$machine$/ AND "type" =~ /$type$/ AND $timeFilter GROUP BY time($interval), "host" fill(null)    
        
         closing:SELECT mean("closing") FROM "tcp.stat" WHERE "host" =~ /$machine$/ AND "type" =~ /$type$/ AND $timeFilter GROUP BY time($interval), "host" fill(null)  
         
          close:SELECT mean("close") FROM "tcp.stat" WHERE "host" =~ /$machine$/ AND "type" =~ /$type$/ AND $timeFilter GROUP BY time($interval), "host" fill(null)  
          
         
        
       
      
     

三、last ack

SELECT mean("last_ack") FROM "tcp.stat" WHERE "host" =~ /$machine$/ AND "type" =~ /$type$/ AND $timeFilter GROUP BY time($interval), "host" fill(null)