IP Tables State (iptstate) was originally written to implement the "state top" feature of IP Filter for netfilter/iptables. "State top" displays the states held by your stateful firewall in a top-like manner. Iptstate is only useful if netfilter CONNTRACK is enabled in the kernel.
