diff --git a/bin/netvm-topology.sh b/bin/netvm-topology.sh
index 51b749b..83ec920 100755
--- a/bin/netvm-topology.sh
+++ b/bin/netvm-topology.sh
@@ -12,3 +12,8 @@ for ns in $(ip netns list 2>/dev/null | awk '{print $1}' | grep '^warp-'); do
   printf 'node=%s netns=%s ifaces=%s/%s handshake=%s egress=%s\n' "$NODE" "$ns" "$WG" "$VETH" "$hs" "${egress:-?}"
 done
 iptables -t nat -L POSTROUTING -n 2>/dev/null | grep '10.201\.' || echo "(no netvm NAT rules on host)"
+echo "--- CDP bridges (per netns PREROUTING) ---"
+for ns in $(ip netns list 2>/dev/null | awk '{print $1}' | grep '^warp-'); do
+  redir=$(ip netns exec "$ns" iptables -t nat -L PREROUTING -n 2>/dev/null | grep -c REDIRECT || true)
+  echo "$ns: $redir REDIRECT rule(s)"
+done