Linux Network Monitoring Tool ss, network monitoring ss
The ss command is used to display information about active sockets. Similar to netstat, but faster and more efficient than netstat.
ss -h
Usage: ss [OPTIONS] ss [OPTIONS] [FILTER]-h, -- help this message-V, -- version output version information-n, -- numeric don't resolve service names does not parse the service name-r, -- resolve host names resolves the host name-a, -- all display all sockets-l, -- listening display listening sockets: display listening socket-o, -- options show timer information display timer information-e, -- extended show detailed socket information display detailed socket information-m, -- memory show socket memory usage-p, -- processes show process using socket display process message-I, -- info show internal TCP information-s, -- summary show socket usage summary information-4, -- ipv4 display only IP version 4 sockets-6, -- ipv6 display only IP version 6 sockets-0, -- packet display PACKET sockets-t, -- tcp display only TCP sockets-u, -- udp display only UDP sockets-d, -- dccp display only DCCP sockets-w, -- raw display only RAW sockets-x, -- unix display only Unix domain sockets-f, -- family = FAMILY display sockets of type FAMILY-A, -- query = QUERY, -- socket = QUERY :={ all | inet | tcp | udp | raw | unix | packet | netlink} [, QUERY]-D, -- diag = FILE Dump raw information about TCP sockets to FILE-F, -- filter = FILE read filter information from file filter: = [state TCP-STATE] [EXPRESSION]
View the process listening port
ss -pl