ss [options] [ FILTER ]

       ss  is  used  to  dump socket statistics. It allows showing information
       similar to netstat.  It can display more  TCP  and  state  informations
       than other tools.

       When  no  option  is  used ss displays a list of open non-listening TCP
       sockets that have established connection.

       -h, --help
              Show summary of options.

       -V, --version
              Output version information.

       -n, --numeric
              Do not try to resolve service names.

       -r, --resolve
              Try to resolve numeric address/ports.

       -a, --all
              Display both listening and non-listening  (for  TCP  this  means
              established connections) sockets.

       -l, --listening
              Display only listening sockets (these are omitted by default).

       -o, --options
              Show timer information.

       -e, --extended
              Show detailed socket information

       -m, --memory
              Show socket memory usage.

       -p, --processes
              Show process using socket.

       -i, --info
              Show internal TCP information.

       -s, --summary
              Print  summary  statistics.  This  option  does not parse socket
              lists obtaining summary from various sources. It is useful  when
              amount  of  sockets  is  so  huge  that parsing /proc/net/tcp is

       -t, --tcp
              Display TCP sockets.

       -u, --udp
              Display UDP sockets.

       -d, --dccp
              Display DCCP sockets.

       -w, --raw
              Display RAW sockets.

       -x, --unix
              Display Unix domain sockets (alias for -f unix).

       -f FAMILY, --family=FAMILY
              Display  sockets  of type FAMILY.  Currently the following fami-
              lies are supported: unix, inet, inet6, link, netlink.

       -A QUERY, --query=QUERY, --socket=QUERY
              List of socket tables to dump, separated by commas. The  follow-
              ing  identifiers are understood: all, inet, tcp, udp, raw, unix,
              packet,   netlink,    unix_dgram,    unix_stream,    packet_raw,

       -D FILE, --diag=FILE
              Do  not  display  anything,  just dump raw information about TCP
              sockets to FILE after applying filters. If FILE is -  stdout  is

       -F FILE, --filter=FILE
              Read  filter information from FILE.  Each line of FILE is inter-
              preted like single command line option. If FILE is  -  stdin  is

       FILTER := [ state TCP-STATE ] [ EXPRESSION ]
              Please take a look at the official documentation (Debian package
              iproute-doc) for details regarding filters.

       ss -t -a
              Display all TCP sockets.

       ss -u -a
              Display all UDP sockets.

       ss -o state established '( dport = :ssh or sport = :ssh )'
              Display all established ssh connections.

       ss -x src /tmp/.X11-unix/*
              Find all local processes connected to X server.

       ss -o state fin-wait-1 '( sport =  :http  or  sport  =  :https  )'  dst

Man Pages Copyright Respective Owners. Site Copyright (C) 1994 - 2019 Hurricane Electric. All Rights Reserved.