OS Manuals

/usr/bin/ss

IP Routing Utilities

From iproute2 7.3.0-r0 (os), captured 2026-11-05 by running ss --help (exit 0). permalink

Usage: ss [ OPTIONS ]
       ss [ OPTIONS ] [ FILTER ]
   -h, --help          this message
   -V, --version       output version information
   -n, --numeric       don't resolve service names
   -r, --resolve       resolve host names
   -a, --all           display all sockets
   -l, --listening     display listening sockets
   -B, --bound-inactive display TCP bound but inactive sockets
   -o, --options       show timer information
   -e, --extended      show detailed socket information
   -m, --memory        show socket memory usage
   -p, --processes     show process using socket
   -T, --threads       show thread using socket
   -i, --info          show internal TCP information
       --tipcinfo      show internal tipc socket information
   -s, --summary       show socket usage summary
       --tos           show tos and priority information
       --cgroup        show cgroup information
   -b, --bpf           show bpf filter socket information
       --bpf-maps      show all BPF socket-local storage maps
       --bpf-map-id=MAP-ID    show a BPF socket-local storage map
   -E, --events        continually display sockets as they are destroyed
   -Z, --context       display task SELinux security contexts
   -z, --contexts      display task and socket SELinux security contexts
   -N, --net           switch to the specified network namespace name

   -4, --ipv4          display only IP version 4 sockets
   -6, --ipv6          display only IP version 6 sockets
   -0, --packet        display PACKET sockets
   -t, --tcp           display only TCP sockets
   -M, --mptcp         display only MPTCP sockets
   -S, --sctp          display only SCTP sockets
   -u, --udp           display only UDP sockets
   -w, --raw           display only RAW sockets
   -x, --unix          display only Unix domain sockets
       --tipc          display only TIPC sockets
       --vsock         display only vsock sockets
       --xdp           display only XDP sockets
   -f, --family=FAMILY display sockets of type FAMILY
       FAMILY := {inet|inet6|link|unix|netlink|vsock|tipc|xdp|help}

   -K, --kill          forcibly close sockets, display what was closed
   -H, --no-header     Suppress header line
   -Q, --no-queues     Suppress sending and receiving queue columns
   -O, --oneline       socket's data printed on a single line
       --inet-sockopt  show various inet socket options

   -A, --query=QUERY, --socket=QUERY
       QUERY := {all|inet|tcp|mptcp|udp|raw|unix|unix_dgram|unix_stream|unix_seqpacket|packet|packet_raw|packet_dgram|netlink|sctp|vsock_stream|vsock_dgram|tipc|xdp}[,QUERY]

   -D, --diag=FILE     Dump raw information about TCP sockets to FILE
   -F, --filter=FILE   read filter information from FILE
       FILTER := [ state STATE-FILTER ] [ EXPRESSION ]
       STATE-FILTER := {all|connected|synchronized|bucket|big|TCP-STATES}
         TCP-STATES := {established|syn-sent|syn-recv|fin-wait-{1,2}|time-wait|closed|close-wait|last-ack|listening|closing}
          connected := {established|syn-sent|syn-recv|fin-wait-{1,2}|time-wait|close-wait|last-ack|closing}
       synchronized := {established|syn-recv|fin-wait-{1,2}|time-wait|close-wait|last-ack|closing}
             bucket := {syn-recv|time-wait}
                big := {established|syn-sent|fin-wait-{1,2}|closed|close-wait|last-ack|listening|closing}
Options (45)
OptionDescriptionSource
-h, --helpShow summary of options.help + man
-V, --versionOutput version information.help + man
-n, --numericDo not try to resolve service names.help + man
-r, --resolveTry to resolve numeric address/ports.help + man
-a, --allDisplay both listening and non-listening (for TCP this means established connections) sockets.help + man
-l, --listeningDisplay only listening sockets (these are omitted by default).help + man
-o, --optionsShow timer information.help + man
-e, --extendedShow detailed socket information.help + man
-m, --memoryShow socket memory usage.help + man
-p, --processesShow processes using sockets.help + man
-T, --threadsShow threads using sockets.help + man
-i, --infoShow internal TCP information.help + man
--tipcinfoShow internal tipc socket information.help + man
-s, --summaryshow socket usage summaryhelp + man
--tosShow ToS and priority information.help + man
--cgroupShow cgroup information.help + man
-b, --bpfShow socket classic BPF filters (only administrators are allowed to get this information).help + man
--bpf-mapsPretty-print all the BPF socket-local data entries for each socket.help + man
--bpf-map-id MAP-IDPretty-print the BPF socket-local data entries for the requested map ID.help + man
-E, --eventscontinually display sockets as they are destroyedhelp + man
-Z, --contextAs the -p option but also shows process security context.help + man
-z, --contextsAs the -Z option but also shows the socket context.help + man
-N, --net NSNAMESwitch to the specified network namespace name.help + man
-4, --ipv4Display only IP version 4 sockets (alias for -f inet).help + man
-6, --ipv6Display only IP version 6 sockets (alias for -f inet6).help + man
-0, --packetDisplay PACKET sockets (alias for -f link).help + man
-t, --tcpdisplay only TCP socketshelp + man
-M, --mptcpdisplay only MPTCP socketshelp + man
-S, --sctpdisplay only SCTP socketshelp + man
-u, --udpdisplay only UDP socketshelp + man
-w, --rawdisplay only RAW socketshelp + man
-x, --unixDisplay Unix domain sockets (alias for -f unix).help + man
--tipcDisplay tipc sockets (alias for -f tipc).help + man
--vsockDisplay vsock sockets (alias for -f vsock).help + man
--xdpDisplay XDP sockets (alias for -f xdp).help + man
-K, --killforcibly close sockets, display what was closedhelp + man
-H, --no-headerSuppress header line.help + man
-Q, --no-queuesSuppress sending and receiving queue columns.help + man
-O, --onelinePrint each socket's data on a single line.help + man
--inet-sockoptshow various inet socket optionshelp + man
-A, --query, --socket QUERYQUERY := {all|inet|tcp|mptcp|udp|raw|unix|unix_dgram|unix_stream|unix_seqpacket|packet|packet_raw|packet_dgram|netlink|sctp|vsock_stream|vsock_dgram|tipc|xdp}[,QUERY]help + man
-D, --diag FILEDo not display anything, just dump raw information about TCP sockets to FILE after applying filters.help + man
-F, --filter FILEread filter information from FILE FILTER := [ state STATE-FILTER ] [ EXPRESSION ] STATE-FILTER := {all|connected|synchronized|bucket|big|TCP-STATES} TCP-STATES :=…help + man
-B, --bound-inactiveDisplay only TCP bound but inactive (not listening, connecting, etc.) sockets (these are omitted by default). (in the manual page but not in --help)man
-f, --family FAMILYDisplay sockets of type FAMILY. (in the manual page but not in --help)man

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.