tldr/pages/linux/ss.md

ss

Utility to investigate sockets. More information: https://manned.org/ss.8.

• Show all TCP/UDP/RAW/UNIX sockets:

ss {{[-a|--all]}} {{-t|-u|-w|-x}}

• Filter TCP sockets by states, only/exclude:

ss {{state|exclude}} {{bucket|big|connected|synchronized|...}}

• Show all TCP sockets connected to the local HTTPS port (443):

ss {{[-t|--tcp]}} src :{{443}}

• Show all TCP sockets listening on the local 8080 port:

ss {{[-lt|--listening --tcp]}} src :{{8080}}

• Show all TCP sockets along with processes connected to a remote SSH port:

ss {{[-pt|--processes --tcp]}} dst :{{ssh}}

• Show all UDP sockets connected on specific source and destination ports:

ss {{[-u|--udp]}} 'sport == :{{source_port}} and dport == :{{destination_port}}'

• Show all TCP IPv4 sockets locally connected on the subnet 192.168.0.0/16:

ss {{[-4t|--ipv4 --tcp]}} src {{192.168/16}}

• Kill IPv4 or IPv6 Socket Connection with destination IP 192.168.1.17 and destination port 8080:

ss {{[-K|--kill]}} dst {{192.168.1.17}} dport = {{8080}}