ss
Modern socket/connection statistics (netstat successor).
KaliParrotLinuxpassive
pkg: iproute2
ss reports sockets — listening ports, established connections and owning processes — faster than legacy netstat.
Syntax
ss [-tulpn]
Example
ss -tulpn
Lists TCP/UDP listening sockets with port and owning process (needs root for PIDs).
Options & flags
What each switch does. Toggle them in the builder below to assemble a command.
Command builder
Tick options (and fill any values) to build a ready-to-copy command.
ss
Usage examples
ss -tulpn
List listening TCP/UDP ports + owning process.
ss -tn state established
Show established TCP connections.
Advantages
- Fast and detailed
- Maps ports to processes
- Rich filtering
Disadvantages
- Flag combos to memorise
- PIDs need root
- Linux-specific
Tags
#network#sockets
Official docs: ss (iproute2) ↗
Related commands
Frequently asked questions
What is ss used for?
ss reports sockets — listening ports, established connections and owning processes — faster than legacy netstat.
What is an example ss command?
A common example is: ss -tulpn — Lists TCP/UDP listening sockets with port and owning process (needs root for PIDs).
Is ss part of Kali Linux?
Yes. ss ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install iproute2.
What category of security tool is ss?
ss is a Core Linux tool with a passive-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.