HOW TO USE SS TO INVESTIGATE SOCKETS INSTEAD NETSTAT

If you're looking for network connections in Linux, you probably used the netstat at some point. It is very useful to list the connections created, see which ports the server listens, etc.

Well, it's a tool similar to netstat. Netstat tells us that we use ss on the page of his leg!

[note
This software is old. The netstat replacement is SS. Replace netstat -r is the ip path. Replace with netstat
Who am I alternative IP to netstat -g is ip maddr.]

Using ss, simply open and enter the device:

[ss]

For better information, you can give some options

[ss [options] [filter] ]

Let's start with "everything"

[ss -a]

That proved enough ... You'll see on the left side that you have some fixed connections and waiting times, etc.

We will reduce this a bit ... and we will only show the ports we hear. We will use -l (listen), -n (digital ports) and -p (see listening process).

[ss -lnp]

Very good? if you do not see operations using ports, it should be root, so put sudo in front of another command.

Display the help screen

[ss -h]

Will show this

• [Usage: ss [ OPTIONS ]
•        ss [ OPTIONS ] [ FILTER ]
•    -h, --help        this message
•    -V, --version    output version information
•    -n, --numeric    don't resolve service names
•    -r, --resolve       resolve host names
•    -a, --all        display all sockets
•    -l, --listening    display listening sockets
•    -o, --options       show timer information
•    -e, --extended      show detailed socket information
•    -m, --memory        show socket memory usage
•    -p, --processes    show process using socket
•    -i, --info        show internal TCP information
•    -s, --summary    show socket usage summary
•    -4, --ipv4          display only IP version 4 sockets
•    -6, --ipv6          display only IP version 6 sockets
•    -0, --packet    display PACKET sockets
•    -t, --tcp        display only TCP sockets
•    -u, --udp        display only UDP sockets
•    -d, --dccp        display only DCCP sockets
•    -w, --raw        display only RAW sockets
•    -x, --unix        display only Unix domain sockets
•    -f, --family=FAMILY display sockets of type FAMILY
•    -A, --query=QUERY, --socket=QUERY
•        QUERY := {all|inet|tcp|udp|raw|unix|packet|netlink}[,QUERY]
•    -D, --diag=FILE    Dump raw information about TCP sockets to FILE
•    -F, --filter=FILE   read filter information from FILE
•        FILTER := [ state TCP-STATE ] [ EXPRESSION] ]

• [message]
• Thanks for visiting this blog
• Support us by comment if you have a problem. thank you

Source and thanks to; Linux.org.

Let us know how you want it below in the comments!