比 netstat 好用？Linux 网络状态应用软件 ss 详解

# ss -x src /tmp/.X11-unix/*

ss参见处在FIN-WAIT-1完全的http、https连通

# ss -o state fin-wait-1 '( sport = :http or sport = :https )'

ss常见的state完全：

establishedsyn-sentsyn-recvfin-wait-1fin-wait-2time-waitclosedclose-waitlast-acklistenclosingall : All of the above statesconnected : All the states except for listen and closedsynchronized : All the connected states except for syn-sentbucket : Show states, which are maintained as minisockets, i.e. time-wait and syn-recv.big : Opposite to bucket state.

ss适用IP定址比对

ss src ADDRESS_PATTERNsrc：对此来源ADDRESS_PATTERN：对此定址规则如下：ss src 120.33.31.1 # 参见来之20.33.31.1的连通＃ 参见来至120.33.31.1,80UDP的连通ss src 120.33.31.1:httpss src 120.33.31.1:8

ss适用UDP比对

ss dport OP PORTOP:是操作符PORT：对此UDPdport：对此过滤目标UDP、意味著的有sport

OP操作符如下：

= or ge : 等于之比== or eq : 之比!= or ne : 不之比UDP or gt : 等于UDP

OP实例

ss sport = :http 也可以是 ss sport = :80ss dport = :httpss dport> :1024ss sport> :1024ss sport < :32000ss sport eq :22ss dport != :22ss state connected sport = :httpss ( sport = :http or sport = :https )ss -o state fin-wait-1 ( sport = :http or sport = :https ) dst 192.168.

为什么ss比netstat太快：

netstat是二叉树/proc下面每个PID第一版，ss反之亦然读/proc/net下面的统计学个人信息。所以ss制订的时候耗费资源以及耗费的时间都比netstat少很多

ss号令鼓励

# ss -hUsage: ss [ OPTIONS ] ss [ OPTIONS ] [ FILTER ] -h, ；还有help this message -V, ；还有version output version information -n, ；还有numeric don't resolve service names -r, ；还有resolve resolve host names -a, ；还有all display all sockets -l, ；还有listening display listening sockets -o, ；还有options show timer information -e, ；还有extended show detailed socket information -m, ；还有memory show socket memory usage -p, ；还有processes show process using socket -i, ；还有info show internal TCP information -s, ；还有summary show socket usage summary -4, ；还有ipv4 display only IP version 4 sockets -6, ；还有ipv6 display only IP version 6 sockets -0, ；还有packet display PACKET sockets -t, ；还有tcp display only TCP sockets -u, ；还有udp display only UDP sockets -d, ；还有dccp display only DCCP sockets -w, ；还有raw display only RAW sockets -x, ；还有unix display only Unix domain sockets -f, ；还有family=FAMILY display sockets of type FAMILY -A, ；还有query=QUERY, ；还有socket=QUERY QUERY := {all|inet|tcp|udp|raw|unix|packet|netlink}[,QUERY] -D, ；还有diag=FILE Dump raw information about TCP sockets to FILE -F, ；还有filter=FILE read filter information from FILE FILTER := [ state TCP-STATE ] [ EXPRESSION ]

社论来源：www.ttlsa.com/linux-command/ss-replace-netstat/

。

角膜炎可以用眼药水吗
达霏欣一般啥时候起作用
手术伤口不愈合怎么办
宝宝便秘
营养保健科
血糖正常值是多少
急性支气管炎咳嗽怎么治
得了甲流咳嗽吃什么药