ss.md 514 B
ss
Utility to investigate sockets
- Dump all TCP/UDP/RAW/UNIX sockets
ss -a {{-t/-u/-w/-x}}
- Show process(es) that using socket
ss -p
- Filter TCP sockets by states, only/exclude
ss {{state/exclude}} {{bucket/big/connected/synchronized/...}}
- Filter sockets by address and/or port
ss -t dst 1.2.3.4:80
ss -u src 127/8
ss -t 'dport >= :1024'
ss -x "src /tmp/.X11-unix/*"
ss -t state established '( dport = :ssh or sport = :ssh )'
- Only list IPv4 or IPv6 sockets
ss {{-4/-6}}