Questions tagged [ss]

ss is used to dump socket statistics. It allows showing information similar to netstat. It can display more TCP and state informations than other tools.

Filter by
Sorted by
Tagged with
5
votes
4answers
136 views

How to continuously monitor PIDs connecting to local sockets?

Some local processes are connecting and disconnecting to 127.0.0.1 on port 1234. I would like to log all connection to this port (or to server process). I've tried ss -tpn | grep 1234 It shows ...
0
votes
0answers
30 views

Show ports in hexadecimal for netstat or ss command

I am trying to format the output of netstat or ss command in bash terminal. I need to convert the port numbers to hexadecimal. Currently they are shown in decimal by default. Is there any option in ...
0
votes
0answers
29 views

why linux “ss” commond “wmem_alloc” and “wmem_queued” not increase while “Send-Q” increased

I use ss command to see how socket send buffer increased when it can't receive response from the other side. Here is my test: Create a server,but won't read data from TCP Create a client, it will ...
0
votes
1answer
34 views

How to prevent ss ouput with empty lines?

Moving from netstat to iproute2 ss I noticed that the output from ss tends to spill over into empty "new lines" when connecting via SSH from a cygwin terminal. e.g.: user@host:~ $ ss -4t State ...
0
votes
0answers
44 views

Get listening ports of Bluetooth

I’m trying to get all sockets connected or listening on a system. However, I saw that, for example, Bluetooth is not appearing. I tried to use the commands ss and netstat but without success. Netstat ...
5
votes
3answers
251 views

How to check whether a socket is listening or not?

I want to observe a socket status periodically, so I need to check the socket status by command. Currently I list all listening sockets by ss and filter them by grep. ss -l | grep -q /run/php/php7....
4
votes
2answers
873 views

Detailed output of ss command

I would want to know the meaning of some items in the ss command output. Eg: # sudo ss -iepn '( dport = :3443 )' Netid State Recv-Q Send-Q Local Address:Port ...
2
votes
0answers
34 views

ss is slow when process option (-p) used

When checking for process listening on port using ss command, it's slow when compared with (obsolete) netstat command. $ time ss -nlp | grep -E ':8081|:8007|:8010' LISTEN 0 100 ...
1
vote
1answer
92 views

What does the reordering field of ss --info mean?

ss --info returns information about tcp connections. It produces a line simliar to the following (some fields removed for formatting) tcp ESTAB 0 0 192.168.1.177:60236 54.70.141.88:...
0
votes
0answers
29 views

I want to know how we can reduce the value of total in ss -s command

i have tried everything to overcome with this problem, i have tried the reboot and restart of multiple application but still the value is very High. we have applied the monitoring check on sar -n SOCK ...
0
votes
1answer
74 views

Conflicting “ss” commands on OpenSuse? [duplicate]

I have OpenSuse 15.1 "Magic Leap" installed. I noticed that there seems to be two conflicting commands named ss. When I run which ss, I get this: /usr/sbin/ss And when I try to inspect, notice ...
-5
votes
1answer
86 views

What are the differences between `-f` and `-A` of `ss`?

What are the differences between -f and -A of ss? Which of -f and -A is related to -t, -u, -4, -6, -w, -x? Does -A inet,packet imply -A tcp,udp,raw? I know a few socket concepts, but can't figure ...
0
votes
2answers
119 views

How can I find the mapping on `$DISPLAY` after `ssh -X`?

On machine B, I remote access machine C $ ssh -X t@C $ echo $DISPLAY localhost:10.0 How can I find/verify the mapping of $DISPLAY on C to $DISPLAY on B? Can it be done by the following command ...
2
votes
1answer
422 views

What do `<expire_time>` and `<retrans>` mean in the output of `ss -o`?

ss -o shows TCP timer in the following format: timer:(<timer_name>,<expire_time>,<retrans>) What do <expire_time> and <retrans> mean? I found <expire_time> ...
-1
votes
2answers
3k views

What is “inet prefix”?

$ ss 'state = established' Error: an inet prefix is expected rather than "state". Cannot parse dst/src address. What is "inet prefix"? What is a valid "inet prefix"?
-2
votes
1answer
210 views

What is timer information shown by `ss -o`?

man ss says -o shows timer information. What is timer information? I can't tell it from ss -o and ss without -o. Thanks.
0
votes
1answer
192 views

Networking: port listening but nc fails

I have set up a docker-compose stack on a server. One of its services is jaeger collector and is configured as follows: collector: image: jaegertracing/jaeger-collector:1.8 environment: ...
0
votes
1answer
175 views

Why does atop open a raw socket?

I install atop on Debian 9. It runs as a monitoring daemon. Why is it listening on a raw socket? Raw sockets are used to generate arbitrary IPv4 packets or capture all packets read all packets for ...
0
votes
1answer
1k views

ss shows a raw socket. What does it mean that it is listening on “*:ipproto-255”?

What does ss mean by *:ipproto-255, in the local address/port column? $ sudo ss -ap | grep -vE "^(nl |u_)" Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port p_raw UNCONN 0 ...
0
votes
1answer
149 views

what does the wildcard expression mean in command ss?

ss -lnt State Recv-Q Send-Q Local Address:Port Peer Address:Port LISTEN 0 128 127.0.0.53%lo:53 0.0.0.0:* LISTEN 0 128 0....
0
votes
0answers
502 views

ss command: file descriptor information when using the -p option

In ss command, when using the -p option, this presumably provides info about the process (owner, pid an fd) root@Cassiopeia:~# ss -tap | tail -1 ESTAB 0 0 [2a0i:527:9981:8511:f64e:...
2
votes
1answer
725 views

ss command: difference between raw and unix sockets

The ss command (from the iproute2 set of tools which comes as a newer alternative to netstat) has in its --help the following options -0, --packet display PACKET sockets -t, --tcp ...
5
votes
1answer
540 views

How can I sniff unix dgram socket without having file path?

From that article, I realized that: a UNIX domain socket is bound to a file path. So, I need to sniff DGRAM Unix socket through the socat as mentioned here. But when I try to retrieve the path for ...
2
votes
1answer
519 views

What is the difference between lsof vs lsof -i

One of my processes running on Debian server started throwing a socket: too many open files error. I then started debugging the error. I came through the following scenario. When I ran lsof | grep ...
22
votes
2answers
7k views

ss - linux socket statistics utility output format

When using ss with -p option, user/pid/fd column jumps underneath the particular line. For instance this is it what I'm actually seeing: # ss -nulp4 State Recv-Q Send-Q ...