ss is used to dump socket statistics. It allows showing information similar to netstat. It can display more TCP and state informations than other tools.
Questions tagged [ss]
51 questions
30
votes
3 answers
ss - linux socket statistics utility output format
When using ss with -p option, user/pid/fd column jumps underneath the particular line. For instance this is it what I'm actually seeing:
# ss -nulp4
State Recv-Q Send-Q Local Address:Port …
NarūnasK
- 2,276
- 4
- 25
- 35
10
votes
3 answers
How to check whether a socket is listening or not?
I want to observe a socket status periodically, so I need to check the socket status by command.
Currently I list all listening sockets by ss and filter them by grep.
ss -l | grep -q /run/php/php7.0-fpm.sock
Is there better way to check socket's…
ironsand
- 5,085
- 12
- 50
- 73
8
votes
2 answers
Detailed output of ss command
I would want to know the meaning of some items in the ss command output. Eg:
# sudo ss -iepn '( dport = :3443 )'
Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port
tcp ESTAB 0 …
sebelk
- 4,209
- 10
- 35
- 54
5
votes
5 answers
How to continuously monitor PIDs connecting to local sockets?
Some local processes are connecting and disconnecting to 127.0.0.1 on port 1234.
I would like to log all connection to this port (or to server process).
I've tried
ss -tpn | grep 1234
It shows a list, but then stops; It doesn't keep logging new…
Hernán Eche
- 143
- 2
- 11
5
votes
1 answer
How can I sniff unix dgram socket without having file path?
From that article, I realized that:
a UNIX domain socket is bound to a file path.
So, I need to sniff DGRAM Unix socket through the socat as mentioned here. But when I try to retrieve the path for this purpose, I find that the target application…
z0lupka
- 275
- 2
- 11
4
votes
1 answer
How can I remove this annoying message: "Failed to find cgroup2 mount"?
I run this command
ss -tulpnoea|grep -i water|grep -v 127
Failed to find cgroup2 mount
Failed to find cgroup2 mount
Failed to find cgroup2 mount
Failed to find cgroup2 mount
Failed to find cgroup2 mount
Failed to find cgroup2 mount
Failed to find…
elbarna
- 12,050
- 22
- 92
- 170
4
votes
0 answers
Is there a command like `time` that monitors the network traffic of commands?
I can use the time command to measure the time some command takes:
time node -e ""
node -e "" 0.06s user 0.01s system 92% cpu 0.076 total
Is there a similar way to measure a command's network traffic (the bandwidth it used, the hosts it sent…
HappyFace
- 1,493
- 9
- 21
4
votes
2 answers
What is the alternative of netstat in linux?
'netstat' is deprecated for Linux os. So I am looking for the right alternative of the 'netstat', So what will be right alternative for netstat?
I found out one 'SS' command but it is not sufficient enough to achieve our requirements.
We are looking…
Dhruv Patel2
- 41
- 1
- 3
3
votes
1 answer
What does address 224.0.0.251:5353 represent?
I read some tutorials,they say that netstat is deprecated. I tried ss command. THis is the output
Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port …
TrajcheS
- 33
- 1
- 1
- 4
3
votes
1 answer
ss showing socket stuck in SYN-SENT with no traceable PID
On a client I see the following:
[root@redacted_local ~]# ss | grep -i syn
SYN-SENT 0 1 redacted_local_ip:792 redacted_server_ip:nfs
This status has remained the same. I'm unable to…
Kahn
- 1,652
- 2
- 19
- 36
3
votes
1 answer
Why ss -e doesn't show uid?
I have a debian VM, here the info:
las@Client:~$ cat /etc/os-release
PRETTY_NAME="Debian GNU/Linux 8 (jessie)"
NAME="Debian GNU/Linux"
VERSION_ID="8"
VERSION="8 (jessie)"
When I type ss -nte I expect to see the uid of the process that uses the…
Francesco
- 808
- 7
- 24
3
votes
1 answer
what does the wildcard expression mean in command ss?
ss -lnt
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 128 127.0.0.53%lo:53 0.0.0.0:*
LISTEN 0 128 0.0.0.0:22 0.0.0.0:*
LISTEN 0 …
zzzgoo
- 183
- 1
- 1
- 4
3
votes
1 answer
ss command: difference between raw and unix sockets
The ss command (from the iproute2 set of tools which comes as a newer alternative to netstat) has in its --help the following options
-0, --packet display PACKET sockets
-t, --tcp display only TCP sockets
-S, --sctp …
pkaramol
- 2,587
- 4
- 36
- 71
2
votes
1 answer
Can a single unix domain socket connect to multiple peers simultaneously?
Since this is the socket that syslog's /dev/log is symlinked to, I expect there is at least one listening socket from systemd-journald, and possibly some additional connected ones, with different "port" numbers. /run/systemd/journal/stdout does just…
QnA
- 515
- 6
- 16
2
votes
2 answers
What is 0.0.0.0%virbr0?
I get the following line from ss -lun:
udp UNCONN 0 0 0.0.0.0%virbr0:67 0.0.0.0:* users:(("dnsmasq",pid=950,fd=3))
I wonder what 0.0.0.0%virbr0 means here. No trace of it in…
user422875