Difference between revisions of "Network Connection Monitoring in Linux"

Revision as of 13:32, 7 August 2021

ss             list out all connections.
ss -t          tcp only.  
ss -u          udp only.
ss -x          unix only.
ss -a -A udp   report both "CONNECTED" and "LISTENING" sockets udp
ss -nt         tcp with hostnames not resolved.
ss -ltn        listening sockets only, tcp with hostnames not resolved.
ss -pnt        tcp with hostnames not resolved, associated process id's using connection. <- very useful
ss -s          summary statistics

netstat -natp  show active Internet connections
netstat -tupn

tcpdump -X -i eth0

View established connections and associated programs

sudo netstat -atupen | grep ESTABLISHED
netstat -nputw

continuously updated

netstat -nputwc

View established connections and associated programs type TCP only

sudo lsof -nP -iTCP -sTCP:ESTABLISHED