diff --git a/linux/ss.md b/linux/ss.md
new file mode 100644
index 0000000000..9000f4fb11
--- /dev/null
+++ b/linux/ss.md
@@ -0,0 +1,19 @@
+# ss
+
+> Utility to investigate sockets
+
+- Dump all TCP/UDP/RAW/UNIX sockets
+
+`ss -a {{-t/-u/-w/-x}}`
+
+- Filter TCP sockets by states, only/exclude
+
+`ss {{state/exclude}} {{bucket/big/connected/synchronized/...}}`
+
+- Filter sockets by address and/or port
+
+`ss {{dst/src/dport/sport}} {{==/!=/>/</...}} {{prefix:port/unix:STRING/:port/...}}`
+
+- Only list IPv4 or IPv6 sockets
+
+`ss {{-4/-6}}`