Ss -ltn # listening tcp without host resolution Ss -u # get udp connections not in listen mode Ss -t # get tcp connections not in listen mode (server programs) Statistics provided by ss are superficial but it is considered the better alternative to netstat Examples ss | less # get all connections The options used with the ss commands are very similar to netstat making it an easy replacement. The ss command gets its information directly from kernel space. However this approach falls weak when there are lots of connections to display.

The netstat command reads various /proc files to gather information. netstat → ss, ip route (for netstat -r), ip -s link (for netstat -i), ip maddr (for netstat -g).ifconfig → ip a ( ip addr), ip link, ip -s ( ip -stats).The functionality provided by several of these utilities has been reproduced and improved in the new iproute2 suite, primarily by using its new ip command.Įxamples for deprecated commands and their replacements: NETSTAT is considered deprecated at nowadays and others programs included in the net-tools like arp, ifconfig, iptunnel, nameif, netstat, and route.

Linux wireshark alternative