I've looked through help using help netstat and can't see a way to just show tun interfaces (or sockets).
I found one netstat option that isn't listed in the help, netstat -u which only shows "Active LOCAL (UNIX) domain sockets".
I can grep the results of that command for ".sock" but would like to only one command.
I am wondering if there are any more "unlisted" netstat options for the mac version of netstat.
The man-page for netstat lists these options:
A, a, b, c, d, f, g, I, i, L, l, ll, lll, m, n, p, q, r, R, s, S, v, W, w, x and z.
The source code for netstat lists these options:
A, a, b, c, d, F, f, g, I, i, L, l, ll, lll, m, n, P, p, Q, q, r, R, s, S, t, u, v, W, w, x and z
So the unlisted netstat options are: F, P, Q, t and u.
You have already discovered u, which means to list only AF_UNIX sockets.
The rest have this meaning:
This means that there's no "secret" option that will make netstat output what you desire. You can either use a different (probably custom made) tool, or parse its output with tools like grep.
For example you could dig information about utun interfaces out of the System Configuration daemon by running a command like this:
echo list "State:/Network/Interface/utun.*" | scutil
The scutil commands also allows you to watch for changes, so that you can run the command in the background and report whenever an interface is created or destroyed.
