1SS(8)                       System Manager's Manual                      SS(8)
2
3
4

NAME

6       ss - another utility to investigate sockets
7

SYNOPSIS

9       ss [options] [ FILTER ]
10

DESCRIPTION

12       ss  is  used  to  dump socket statistics. It allows showing information
13       similar to netstat.  It can display more  TCP  information  than  state
14       than other tools.
15
16

OPTIONS

18       These  programs  follow  the  usual  GNU command line syntax, with long
19       options starting with two  dashes  (`-').   A  summary  of  options  is
20       included below.
21
22       -h, --help
23              Show summary of options.
24
25       -V, --version
26              Output version information.
27
28       -n, --numeric
29              Do now try to resolve service names.
30
31       -r, --resolve
32              Try to resolve numeric address/ports.
33
34       -a, --all
35              Display all sockets.
36
37       -l, --listening
38              Display listening sockets.
39
40       -o, --options
41              Show timer information.
42
43       -e, --extended
44              Show detailed socket information
45
46       -m, --memory
47              Show socket memory usage.
48
49       -p, --processes
50              Show process using socket.
51
52       -i, --info
53              Show internal TCP information.
54
55       -s, --summary
56              Print  summary  statistics.  This  option  does not parse socket
57              lists obtaining summary from various sources. It is useful  when
58              amount  of  sockets  is  so  huge  that parsing /proc/net/tcp is
59              painful.
60
61       -4, --ipv4
62              Display only IP version 4 sockets (alias for -f inet).
63
64       -6, --ipv6
65              Display only IP version 6 sockets (alias for -f inet6).
66
67       -0, --packet
68              Display PACKET sockets.
69
70       -t, --tcp
71              Display only TCP sockets.
72
73       -u, --udp
74              Display only UDP sockets.
75
76       -d, --dccp
77              Display only DCCP sockets.
78
79       -w, --raw
80              Display only RAW sockets.
81
82       -x, --unix
83              Display only Unix domain sockets.
84
85       -f FAMILY, --family=FAMILY
86              Display sockets of type FAMILY.  Currently the  following  fami‐
87              lies are supported: unix, inet, inet6, link, netlink.
88
89       -A QUERY, --query=QUERY
90              List  of socket tables to dump, separated by commas. The follow‐
91              ing identifiers are understood: all, inet, tcp, udp, raw,  unix,
92              packet,    netlink,    unix_dgram,    unix_stream,   packet_raw,
93              packet_dgram.
94
95       -D FILE
96              Do not display anything, just dump  raw  information  about  TCP
97              sockets  to  FILE after applying filters. If FILE is - stdout is
98              used.
99
100       -F FILE, --filter=FILE
101              Read filter information from FILE.  Each line of FILE is  inter‐
102              preted  like  single  command line option. If FILE is - stdin is
103              used.
104
105       FILTER := [ state TCP-STATE ] [ EXPRESSION ]
106              Please take a look at the official documentation (Debian package
107              iproute-doc) for details regarding filters.
108

USAGE EXAMPLES

110       ss -t -a
111              Display all TCP sockets.
112
113       ss -u -a
114              Display all UDP sockets.
115
116       ss -o state established '( dport = :ssh or sport = :ssh )'
117              Display all established ssh connections.
118
119       ss -x src
120              Find all local processes connected to X server.
121
122       ss  -o  state  fin-wait-1  '(  sport  =  :http or sport = :https )' dst
123       193.233.7/24
124              List all the tcp sockets in state FIN-WAIT-1 for our  apache  to
125              network 193.233.7/24 and look at their timers.
126

SEE ALSO

128       ip(8), /usr/share/doc/iproute-doc/ss.html (package iproutedoc)
129

AUTHOR

131       ss was written by Alexey Kuznetosv, <kuznet@ms2.inr.ac.ru>.
132
133       This  manual page was written by Michael Prokop <mika@grml.org> for the
134       Debian project (but may be used by others).
135
136
137
138                                                                         SS(8)