Linux怎么使用ss命令查看系统的socket状态 Linux怎么使用ss命令查看系统的socket状态，Lin...

Linux\u600e\u4e48\u4f7f\u7528ss\u547d\u4ee4\u67e5\u770b\u7cfb\u7edf\u7684socket\u72b6\u6001

\u3000ss\u662fSocket Statistics\u7684\u7f29\u5199\u3002\u987e\u540d\u601d\u4e49\uff0css\u547d\u4ee4\u53ef\u4ee5\u7528\u6765\u83b7\u53d6socket\u7edf\u8ba1\u4fe1\u606f\uff0c\u5b83\u53ef\u4ee5\u663e\u793a\u548cnetstat\u7c7b\u4f3c\u7684\u5185\u5bb9\u3002\u4f46ss\u7684\u4f18\u52bf\u5728\u4e8e\u5b83\u80fd\u591f\u663e\u793a\u66f4\u591a\u66f4\u8be6\u7ec6\u7684\u6709\u5173TCP\u548c\u8fde\u63a5\u72b6\u6001\u7684\u4fe1\u606f\uff0c\u800c\u4e14\u6bd4netstat\u66f4\u5feb\u901f\u66f4\u9ad8\u6548\u3002\u5f53\u670d\u52a1\u5668\u7684socket\u8fde\u63a5\u6570\u91cf\u53d8\u5f97\u975e\u5e38\u5927\u65f6\uff0c\u65e0\u8bba\u662f\u4f7f\u7528netstat\u547d\u4ee4\u8fd8\u662f\u76f4\u63a5cat /proc/net/tcp\uff0c\u6267\u884c\u901f\u5ea6\u90fd\u4f1a\u5f88\u6162\u3002\u53ef\u80fd\u4f60\u4e0d\u4f1a\u6709\u5207\u8eab\u7684\u611f\u53d7\uff0c\u4f46\u8bf7\u76f8\u4fe1\u6211\uff0c\u5f53\u670d\u52a1\u5668\u7ef4\u6301\u7684\u8fde\u63a5\u8fbe\u5230\u4e0a\u4e07\u4e2a\u7684\u65f6\u5019\uff0c\u4f7f\u7528netstat\u7b49\u4e8e\u6d6a\u8d39 \u751f\u547d\uff0c\u800c\u7528ss\u624d\u662f\u8282\u7701\u65f6\u95f4\u3002\u5929\u4e0b\u6b66\u529f\u552f\u5feb\u4e0d\u7834\u3002ss\u5feb\u7684\u79d8\u8bc0\u5728\u4e8e\uff0c\u5b83\u5229\u7528\u5230\u4e86TCP\u534f\u8bae\u6808\u4e2dtcp_diag\u3002tcp_diag\u662f\u4e00\u4e2a\u7528\u4e8e\u5206\u6790\u7edf\u8ba1\u7684\u6a21\u5757\uff0c\u53ef\u4ee5\u83b7\u5f97Linux \u5185\u6838\u4e2d\u7b2c\u4e00\u624b\u7684\u4fe1\u606f\uff0c\u8fd9\u5c31\u786e\u4fdd\u4e86ss\u7684\u5feb\u6377\u9ad8\u6548\u3002\u5f53\u7136\uff0c\u5982\u679c\u4f60\u7684\u7cfb\u7edf\u4e2d\u6ca1\u6709tcp_diag\uff0css\u4e5f\u53ef\u4ee5\u6b63\u5e38\u8fd0\u884c\uff0c\u53ea\u662f\u6548\u7387\u4f1a\u53d8\u5f97\u7a0d\u6162\u3002\uff08\u4f46\u4ecd\u7136\u6bd4 netstat\u8981\u5feb\u3002\uff09

\u547d\u4ee4\u683c\u5f0f\uff1a
\u3000\u3000ss \uff3b\u53c2\u6570\uff3d
\u3000\u3000ss \uff3b\u53c2\u6570\uff3d \uff3b\u8fc7\u6ee4\uff3d
\u3000
2.\u547d\u4ee4\u529f\u80fd\uff1a
\u3000\u3000ss\uff08Socket Statistics\u7684\u7f29\u5199\uff09\u547d\u4ee4\u53ef\u4ee5\u7528\u6765\u83b7\u53d6 socket\u7edf\u8ba1\u4fe1\u606f\uff0c\u6b64\u547d\u4ee4\u8f93\u51fa\u7684\u7ed3\u679c\u7c7b\u4f3c\u4e8e netstat\u8f93\u51fa\u7684\u5185\u5bb9\uff0c\u4f46\u5b83\u80fd\u663e\u793a\u66f4\u591a\u66f4\u8be6\u7ec6\u7684 TCP\u8fde\u63a5\u72b6\u6001\u7684\u4fe1\u606f\uff0c\u4e14\u6bd4 netstat \u66f4\u5feb\u901f\u9ad8\u6548\u3002\u5b83\u4f7f\u7528\u4e86 TCP\u534f\u8bae\u6808\u4e2d tcp_diag\uff08\u662f\u4e00\u4e2a\u7528\u4e8e\u5206\u6790\u7edf\u8ba1\u7684\u6a21\u5757\uff09\uff0c\u80fd\u76f4\u63a5\u4ece\u83b7\u5f97\u7b2c\u4e00\u624b\u5185\u6838\u4fe1\u606f\uff0c\u8fd9\u5c31\u4f7f\u5f97 ss\u547d\u4ee4\u5feb\u6377\u9ad8\u6548\u3002\u5728\u6ca1\u6709 tcp_diag\uff0css\u4e5f\u53ef\u4ee5\u6b63\u5e38\u8fd0\u884c\u3002
\u3000
\u30003.\u547d\u4ee4\u53c2\u6570\uff1a
\u3000\u3000-h\uff0c --help \u5e2e\u52a9\u4fe1\u606f
\u3000\u3000-V\uff0c --version \u7a0b\u5e8f\u7248\u672c\u4fe1\u606f
\u3000\u3000-n\uff0c --numeric \u4e0d\u89e3\u6790\u670d\u52a1\u540d\u79f0
\u3000\u3000-r\uff0c --resolve \u89e3\u6790\u4e3b\u673a\u540d
\u3000\u3000-a\uff0c --all \u663e\u793a\u6240\u6709\u5957\u63a5\u5b57\uff08sockets\uff09
\u3000\u3000-l\uff0c --listening \u663e\u793a\u76d1\u542c\u72b6\u6001\u7684\u5957\u63a5\u5b57\uff08sockets\uff09
\u3000\u3000-o\uff0c --options \u663e\u793a\u8ba1\u65f6\u5668\u4fe1\u606f
\u3000\u3000-e\uff0c --extended \u663e\u793a\u8be6\u7ec6\u7684\u5957\u63a5\u5b57\uff08sockets\uff09\u4fe1\u606f
\u3000\u3000-m\uff0c --memory \u663e\u793a\u5957\u63a5\u5b57\uff08socket\uff09\u7684\u5185\u5b58\u4f7f\u7528\u60c5\u51b5
\u3000\u3000-p\uff0c --processes \u663e\u793a\u4f7f\u7528\u5957\u63a5\u5b57\uff08socket\uff09\u7684\u8fdb\u7a0b
\u3000\u3000-i\uff0c --info \u663e\u793a TCP\u5185\u90e8\u4fe1\u606f
\u3000\u3000-s\uff0c --summary \u663e\u793a\u5957\u63a5\u5b57\uff08socket\uff09\u4f7f\u7528\u6982\u51b5
\u3000\u3000-4\uff0c --ipv4 \u4ec5\u663e\u793aIPv4\u7684\u5957\u63a5\u5b57\uff08sockets\uff09
\u3000\u3000-6\uff0c --ipv6 \u4ec5\u663e\u793aIPv6\u7684\u5957\u63a5\u5b57\uff08sockets\uff09
\u3000\u3000-0\uff0c --packet \u663e\u793a PACKET \u5957\u63a5\u5b57\uff08socket\uff09
\u3000\u3000-t\uff0c --tcp \u4ec5\u663e\u793a TCP\u5957\u63a5\u5b57\uff08sockets\uff09
\u3000\u3000-u\uff0c --udp \u4ec5\u663e\u793a UCP\u5957\u63a5\u5b57\uff08sockets\uff09
\u3000\u3000-d\uff0c --dccp \u4ec5\u663e\u793a DCCP\u5957\u63a5\u5b57\uff08sockets\uff09
\u3000\u3000-w\uff0c --raw \u4ec5\u663e\u793a RAW\u5957\u63a5\u5b57\uff08sockets\uff09
\u3000\u3000-x\uff0c --unix \u4ec5\u663e\u793a Unix\u5957\u63a5\u5b57\uff08sockets\uff09
\u3000\u3000-f\uff0c --family=FAMILY \u663e\u793a FAMILY\u7c7b\u578b\u7684\u5957\u63a5\u5b57\uff08sockets\uff09\uff0cFAMILY\u53ef\u9009\uff0c\u652f\u6301 unix\uff0c inet\uff0c inet6\uff0c link\uff0c netlink
\u3000\u3000-A\uff0c --query=QUERY\uff0c --socket=QUERY
\u3000\u3000QUERY \uff1a= {all|inet|tcp|udp|raw|unix|packet|netlink}\uff3b\uff0cQUERY\uff3d
\u3000\u3000-D\uff0c --diag=FILE \u5c06\u539f\u59cbTCP\u5957\u63a5\u5b57\uff08sockets\uff09\u4fe1\u606f\u8f6c\u50a8\u5230\u6587\u4ef6
\u3000\u3000-F\uff0c --filter=FILE \u4ece\u6587\u4ef6\u4e2d\u90fd\u53bb\u8fc7\u6ee4\u5668\u4fe1\u606f
\u3000\u3000FILTER \uff1a= \uff3b state TCP-STATE \uff3d \uff3b EXPRESSION \uff3d
\u3000\u30004.\u4f7f\u7528\u5b9e\u4f8b\uff1a
\u3000\u3000\u5b9e\u4f8b1\uff1a\u663e\u793aTCP\u8fde\u63a5
\u3000\u3000\u547d\u4ee4\uff1ass -t -a
\u3000\u3000\u8f93\u51fa\uff1a
\u3000\u3000\u4ee3\u7801\u5982\u4e0b\uff1a
\u3000\u3000\uff3broot@localhost ~\uff3d# ss -t -a
\u3000\u3000State Recv-Q Send-Q Local Address:Port Peer Address:Port
\u3000\u3000LISTEN 0 0 127.0.0.1:smux *\uff1a*
\u3000\u3000LISTEN 0 0 *\uff1a3690 *\uff1a*
\u3000\u3000LISTEN 0 0 *\uff1assh *\uff1a*
\u3000\u3000ESTAB 0 0 192.168.120.204:ssh 10.2.0.68:49368
\u3000\u3000\uff3broot@localhost ~\uff3d#
\u3000\u3000\u5b9e\u4f8b2\uff1a\u663e\u793a Sockets \u6458\u8981
\u3000\u3000\u547d\u4ee4\uff1ass -s
\u3000\u3000\u8f93\u51fa\uff1a
\u3000\u3000\u4ee3\u7801\u5982\u4e0b\uff1a
\u3000\u3000\uff3broot@localhost ~\uff3d# ss -s
\u3000\u3000Total\uff1a 34 \uff08kernel 48\uff09
\u3000\u3000TCP\uff1a 4 \uff08estab 1\uff0c closed 0\uff0c orphaned 0\uff0c synrecv 0\uff0c timewait 0/0\uff09\uff0c ports 3\u300a/p\u300b \u300ap\u300bTransport Total IP IPv6
\u3000\u3000* 48 - -
\u3000\u3000RAW 0 0 0
\u3000\u3000UDP 5 5 0
\u3000\u3000TCP 4 4 0
\u3000\u3000INET 9 9 0
\u3000\u3000FRAG 0 0 0
\u3000\u3000\uff3broot@localhost ~\uff3d#
\u3000\u3000\u8bf4\u660e\uff1a\u5217\u51fa\u5f53\u524d\u7684established\uff0c closed\uff0c orphaned and waiting TCP sockets
\u3000\u3000\u5b9e\u4f8b3\uff1a\u5217\u51fa\u6240\u6709\u6253\u5f00\u7684\u7f51\u7edc\u8fde\u63a5\u7aef\u53e3
\u3000\u3000\u547d\u4ee4\uff1ass -l
\u3000\u3000\u8f93\u51fa\uff1a
\u3000\u3000\u4ee3\u7801\u5982\u4e0b\uff1a
\u3000\u3000\uff3broot@localhost ~\uff3d# ss -l
\u3000\u3000Recv-Q Send-Q Local Address:Port Peer Address:Port
\u3000\u30000 0 127.0.0.1:smux *\uff1a*
\u3000\u30000 0 *\uff1a3690 *\uff1a*
\u3000\u30000 0 *\uff1assh *\uff1a*
\u3000\u3000\uff3broot@localhost ~\uff3d#
\u3000\u3000\u5b9e\u4f8b4\uff1a\u67e5\u770b\u8fdb\u7a0b\u4f7f\u7528\u7684socket
\u3000\u3000\u547d\u4ee4\uff1ass -pl
\u3000\u3000\u8f93\u51fa\uff1a
\u3000\u3000\u4ee3\u7801\u5982\u4e0b\uff1a
\u3000\u3000\uff3broot@localhost ~\uff3d# ss -pl
\u3000\u3000Recv-Q Send-Q Local Address:Port Peer Address:Port
\u3000\u30000 0 127.0.0.1:smux *\uff1a* users\uff1a\uff08\uff08\u201csnmpd\u201d\uff0c2716\uff0c8\uff09\uff09
\u3000\u30000 0 *\uff1a3690 *\uff1a* users\uff1a\uff08\uff08\u201csvnserve\u201d\uff0c3590\uff0c3\uff09\uff09
\u3000\u30000 0 *\uff1assh *\uff1a* users\uff1a\uff08\uff08\u201csshd\u201d\uff0c2735\uff0c3\uff09\uff09
\u3000\u3000\uff3broot@localhost ~\uff3d#
\u3000\u3000\u5b9e\u4f8b5\uff1a\u627e\u51fa\u6253\u5f00\u5957\u63a5\u5b57/\u7aef\u53e3\u5e94\u7528\u7a0b\u5e8f
\u3000\u3000\u547d\u4ee4\uff1ass -lp | grep 3306
\u3000\u3000\u8f93\u51fa\uff1a
\u3000\u3000\u4ee3\u7801\u5982\u4e0b\uff1a
\u3000\u3000\uff3broot@localhost ~\uff3d# ss -lp|grep 1935
\u3000\u30000 0 *\uff1a1935 *\uff1a* users\uff1a\uff08\uff08\u201cfmsedge\u201d\uff0c2913\uff0c18\uff09\uff09
\u3000\u30000 0 127.0.0.1:19350 *\uff1a* users\uff1a\uff08\uff08\u201cfmsedge\u201d\uff0c2913\uff0c17\uff09\uff09
\u3000\u3000\uff3broot@localhost ~\uff3d# ss -lp|grep 3306
\u3000\u30000 0 *\uff1a3306 *\uff1a* users\uff1a\uff08\uff08\u201cmysqld\u201d\uff0c2871\uff0c10\uff09\uff09
\u3000\u3000\uff3broot@localhost ~\uff3d#
\u3000\u3000\u5b9e\u4f8b6\uff1a\u663e\u793a\u6240\u6709UDP Sockets
\u3000\u3000\u547d\u4ee4\uff1ass -u -a
\u3000\u3000\u8f93\u51fa\uff1a
\u3000\u3000\u4ee3\u7801\u5982\u4e0b\uff1a
\u3000\u3000\uff3broot@localhost ~\uff3d# ss -u -a
\u3000\u3000State Recv-Q Send-Q Local Address:Port Peer Address:Port
\u3000\u3000UNCONN 0 0 127.0.0.1:syslog *\uff1a*
\u3000\u3000UNCONN 0 0 *\uff1asnmp *\uff1a*
\u3000\u3000ESTAB 0 0 192.168.120.203:39641 10.58.119.119:domain
\u3000\u3000\uff3broot@localhost ~\uff3d#
\u3000\u3000\u5b9e\u4f8b7\uff1a\u663e\u793a\u6240\u6709\u72b6\u6001\u4e3aestablished\u7684SMTP\u8fde\u63a5
\u3000\u3000\u547d\u4ee4\uff1ass -o state established \u2018\uff08 dport = \uff1asmtp or sport = \uff1asmtp \uff09\u2019
\u3000\u3000\u8f93\u51fa\uff1a
\u3000\u3000\u4ee3\u7801\u5982\u4e0b\uff1a
\u3000\u3000\uff3broot@localhost ~\uff3d# ss -o state established \u2018\uff08 dport = \uff1asmtp or sport = \uff1asmtp \uff09\u2019
\u3000\u3000Recv-Q Send-Q Local Address:Port Peer Address:Port
\u3000\u3000\uff3broot@localhost ~\uff3d#
\u3000\u3000\u5b9e\u4f8b8\uff1a\u663e\u793a\u6240\u6709\u72b6\u6001\u4e3aEstablished\u7684HTTP\u8fde\u63a5
\u3000\u3000\u547d\u4ee4\uff1ass -o state established \u2018\uff08 dport = \uff1ahttp or sport = \uff1ahttp \uff09\u2019
\u3000\u3000\u8f93\u51fa\uff1a
\u3000\u3000\u4ee3\u7801\u5982\u4e0b\uff1a
\u3000\u3000\uff3broot@localhost ~\uff3d# ss -o state established \u2018\uff08 dport = \uff1ahttp or sport = \uff1ahttp \uff09\u2019
\u3000\u3000Recv-Q Send-Q Local Address:Port Peer Address:Port
\u3000\u30000 0 75.126.153.214:2164 192.168.10.42:http
\u3000\u3000\uff3broot@localhost ~\uff3d#
\u3000\u3000\u5b9e\u4f8b9\uff1a\u5217\u4e3e\u51fa\u5904\u4e8e FIN-WAIT-1\u72b6\u6001\u7684\u6e90\u7aef\u53e3\u4e3a 80\u6216\u8005 443\uff0c\u76ee\u6807\u7f51\u7edc\u4e3a 193.233.7/24\u6240\u6709 tcp\u5957\u63a5\u5b57
\u3000\u3000\u547d\u4ee4\uff1ass -o state fin-wait-1 \u2018\uff08 sport = \uff1ahttp or sport = \uff1ahttps \uff09\u2019 dst 193.233.7/24
\u3000\u3000\u5b9e\u4f8b10\uff1a\u7528TCP \u72b6\u6001\u8fc7\u6ee4Sockets\uff1a
\u3000\u3000\u547d\u4ee4\uff1a
\u3000\u3000\u4ee3\u7801\u5982\u4e0b\uff1a
\u3000\u3000ss -4 state FILTER-NAME-HERE
\u3000\u3000ss -6 state FILTER-NAME-HERE
\u3000\u3000\u8f93\u51fa\uff1a
\u3000\u3000\u4ee3\u7801\u5982\u4e0b\uff1a
\u3000\u3000\uff3broot@localhost ~\uff3d#ss -4 state closing
\u3000\u3000Recv-Q Send-Q Local Address:Port Peer Address:Port
\u3000\u30001 11094 75.126.153.214:http 192.168.10.42:4669
\u3000\u3000\u8bf4\u660e\uff1a
\u3000\u3000FILTER-NAME-HERE \u53ef\u4ee5\u4ee3\u8868\u4ee5\u4e0b\u4efb\u4f55\u4e00\u4e2a\uff1a
\u3000\u3000\u4ee3\u7801\u5982\u4e0b\uff1a
\u3000\u3000established
\u3000\u3000syn-sent
\u3000\u3000syn-recv
\u3000\u3000fin-wait-1
\u3000\u3000fin-wait-2
\u3000\u3000time-wait
\u3000\u3000closed
\u3000\u3000close-wait
\u3000\u3000last-ack
\u3000\u3000listen
\u3000\u3000closing
\u3000\u3000all \uff1a \u6240\u6709\u4ee5\u4e0a\u72b6\u6001
\u3000\u3000connected \uff1a \u9664\u4e86listen and closed\u7684\u6240\u6709\u72b6\u6001
\u3000\u3000synchronized \uff1a\u6240\u6709\u5df2\u8fde\u63a5\u7684\u72b6\u6001\u9664\u4e86syn-sent
\u3000\u3000bucket \uff1a \u663e\u793a\u72b6\u6001\u4e3amaintained as minisockets\uff0c\u5982\uff1atime-wait\u548csyn-recv.
\u3000\u3000big \uff1a \u548cbucket\u76f8\u53cd\u3002
\u3000\u3000\u5b9e\u4f8b11\uff1a\u5339\u914d\u8fdc\u7a0b\u5730\u5740\u548c\u7aef\u53e3\u53f7
\u3000\u3000\u547d\u4ee4\uff1a
\u3000\u3000\u4ee3\u7801\u5982\u4e0b\uff1a
\u3000\u3000ss dst ADDRESS_PATTERN
\u3000\u3000ss dst 192.168.1.5
\u3000\u3000ss dst 192.168.119.113:http
\u3000\u3000ss dst 192.168.119.113:smtp
\u3000\u3000ss dst 192.168.119.113:443
\u3000\u3000\u8f93\u51fa\uff1a
\u3000\u3000\u4ee3\u7801\u5982\u4e0b\uff1a
\u3000\u3000\uff3broot@localhost ~\uff3d# ss dst 192.168.119.113
\u3000\u3000State Recv-Q Send-Q Local Address:Port Peer Address:Port
\u3000\u3000ESTAB 0 0 192.168.119.103:16014 192.168.119.113:20229
\u3000\u3000ESTAB 0 0 192.168.119.103:16014 192.168.119.113:61056
\u3000\u3000ESTAB 0 0 192.168.119.103:16014 192.168.119.113:61623
\u3000\u3000ESTAB 0 0 192.168.119.103:16014 192.168.119.113:60924
\u3000\u3000ESTAB 0 0 192.168.119.103:16050 192.168.119.113:43701
\u3000\u3000ESTAB 0 0 192.168.119.103:16073 192.168.119.113:32930
\u3000\u3000ESTAB 0 0 192.168.119.103:16073 192.168.119.113:49318
\u3000\u3000ESTAB 0 0 192.168.119.103:16014 192.168.119.113:3844
\u3000\u3000\uff3broot@localhost ~\uff3d# ss dst 192.168.119.113:http
\u3000\u3000State Recv-Q Send-Q Local Address:Port Peer Address:Port
\u3000\u3000\uff3broot@localhost ~\uff3d# ss dst 192.168.119.113:3844
\u3000\u3000State Recv-Q Send-Q Local Address:Port Peer Address:Port
\u3000\u3000ESTAB 0 0 192.168.119.103:16014 192.168.119.113:3844
\u3000\u3000\uff3broot@localhost ~\uff3d#
\u3000\u3000\u5b9e\u4f8b12\uff1a\u5339\u914d\u672c\u5730\u5730\u5740\u548c\u7aef\u53e3\u53f7
\u3000\u3000\u547d\u4ee4\uff1a
\u3000\u3000\u4ee3\u7801\u5982\u4e0b\uff1a
\u3000\u3000ss src ADDRESS_PATTERN
\u3000\u3000ss src 192.168.119.103
\u3000\u3000ss src 192.168.119.103:http
\u3000\u3000ss src 192.168.119.103:80
\u3000\u3000ss src 192.168.119.103:smtp
\u3000\u3000ss src 192.168.119.103:25
\u3000\u3000\u8f93\u51fa\uff1a
\u3000\u3000\u4ee3\u7801\u5982\u4e0b\uff1a
\u3000\u3000\uff3broot@localhost ~\uff3d# ss src 192.168.119.103:16021
\u3000\u3000State Recv-Q Send-Q Local Address:Port Peer Address:Port
\u3000\u3000ESTAB 0 0 192.168.119.103:16021 192.168.119.201:63054
\u3000\u3000ESTAB 0 0 192.168.119.103:16021 192.168.119.201:62894
\u3000\u3000ESTAB 0 0 192.168.119.103:16021 192.168.119.201:63055
\u3000\u3000ESTAB 0 0 192.168.119.103:16021 192.168.119.201:2274
\u3000\u3000ESTAB 0 0 192.168.119.103:16021 192.168.119.201:44784
\u3000\u3000ESTAB 0 0 192.168.119.103:16021 192.168.119.201:7233
\u3000\u3000ESTAB 0 0 192.168.119.103:16021 192.168.119.103:58660
\u3000\u3000ESTAB 0 0 192.168.119.103:16021 192.168.119.201:44822
\u3000\u3000ESTAB 0 0 192.168.119.103:16021 10.2.1.206:56737
\u3000\u3000ESTAB 0 0 192.168.119.103:16021 10.2.1.206:57487
\u3000\u3000ESTAB 0 0 192.168.119.103:16021 10.2.1.206:56736
\u3000\u3000ESTAB 0 0 192.168.119.103:16021 10.2.1.206:64652
\u3000\u3000ESTAB 0 0 192.168.119.103:16021 10.2.1.206:56586
\u3000\u3000ESTAB 0 0 192.168.119.103:16021 10.2.1.206:64653
\u3000\u3000ESTAB 0 0 192.168.119.103:16021 10.2.1.206:56587
\u3000\u3000\uff3broot@localhost ~\uff3d#
\u3000\u3000\u5b9e\u4f8b13\uff1a\u5c06\u672c\u5730\u6216\u8005\u8fdc\u7a0b\u7aef\u53e3\u548c\u4e00\u4e2a\u6570\u6bd4\u8f83
\u3000\u3000\u547d\u4ee4\uff1a
\u3000\u3000\u4ee3\u7801\u5982\u4e0b\uff1a
\u3000\u3000ss dport OP PORT
\u3000\u3000ss sport OP PORT
\u3000\u3000\u8f93\u51fa\uff1a
\u3000\u3000\u4ee3\u7801\u5982\u4e0b\uff1a
\u3000\u3000\uff3broot@localhost ~\uff3d# ss sport = \uff1ahttp
\u3000\u3000\uff3broot@localhost ~\uff3d# ss dport = \uff1ahttp
\u3000\u3000\uff3broot@localhost ~\uff3d# ss dport \\u300b \uff1a1024
\u3000\u3000\uff3broot@localhost ~\uff3d# ss sport \\u300b \uff1a1024
\u3000\u3000\uff3broot@localhost ~\uff3d# ss sport \\u300a \uff1a32000
\u3000\u3000\uff3broot@localhost ~\uff3d# ss sport eq \uff1a22
\u3000\u3000\uff3broot@localhost ~\uff3d# ss dport \uff01= \uff1a22
\u3000\u3000\uff3broot@localhost ~\uff3d# ss state connected sport = \uff1ahttp
\u3000\u3000\uff3broot@localhost ~\uff3d# ss \\uff08 sport = \uff1ahttp or sport = \uff1ahttps \\uff09
\u3000\u3000\uff3broot@localhost ~\uff3d# ss -o state fin-wait-1 \\uff08 sport = \uff1ahttp or sport = \uff1ahttps \\uff09 dst 192.168.1/24
\u3000\u3000\u8bf4\u660e\uff1a
\u3000\u3000ss dport OP PORT \u8fdc\u7a0b\u7aef\u53e3\u548c\u4e00\u4e2a\u6570\u6bd4\u8f83\uff1bss sport OP PORT \u672c\u5730\u7aef\u53e3\u548c\u4e00\u4e2a\u6570\u6bd4\u8f83\u3002
\u3000\u3000OP \u53ef\u4ee5\u4ee3\u8868\u4ee5\u4e0b\u4efb\u610f\u4e00\u4e2a\uff1a
\u3000\u3000\u300a= or le \uff1a \u5c0f\u4e8e\u6216\u7b49\u4e8e\u7aef\u53e3\u53f7
\u3000\u3000\u300b= or ge \uff1a \u5927\u4e8e\u6216\u7b49\u4e8e\u7aef\u53e3\u53f7
\u3000\u3000== or eq \uff1a \u7b49\u4e8e\u7aef\u53e3\u53f7
\u3000\u3000\uff01= or ne \uff1a \u4e0d\u7b49\u4e8e\u7aef\u53e3\u53f7
\u3000\u3000\u300a or gt \uff1a \u5c0f\u4e8e\u7aef\u53e3\u53f7
\u3000\u3000\u300b or lt \uff1a \u5927\u4e8e\u7aef\u53e3\u53f7
\u3000\u3000\u5b9e\u4f8b14\uff1ass \u548c netstat \u6548\u7387\u5bf9\u6bd4
\u3000\u3000\u547d\u4ee4\uff1a
\u3000\u3000\u4ee3\u7801\u5982\u4e0b\uff1a
\u3000\u3000time netstat -at
\u3000\u3000time ss
\u3000\u3000\u8f93\u51fa\uff1a
\u3000\u3000\u4ee3\u7801\u5982\u4e0b\uff1a
\u3000\u3000\uff3broot@localhost ~\uff3d# time ss
\u3000\u3000real 0m0.739s
\u3000\u3000user 0m0.019s
\u3000\u3000sys 0m0.013s
\u3000\u3000\uff3broot@localhost ~\uff3d#
\u3000\u3000\uff3broot@localhost ~\uff3d# time netstat -at
\u3000\u3000real 2m45.907s
\u3000\u3000user 0m0.063s
\u3000\u3000sys 0m0.067s
\u3000\u3000\uff3broot@localhost ~\uff3d#
\u3000\u3000\u8bf4\u660e\uff1a
\u3000\u3000\u7528time \u547d\u4ee4\u5206\u522b\u83b7\u53d6\u901a\u8fc7netstat\u548css\u547d\u4ee4\u83b7\u53d6\u7a0b\u5e8f\u548c\u6982\u8981\u5360\u7528\u8d44\u6e90\u6240\u4f7f\u7528\u7684\u65f6\u95f4\u3002\u5728\u670d\u52a1\u5668\u8fde\u63a5\u6570\u6bd4\u8f83\u591a\u7684\u65f6\u5019\uff0cnetstat\u7684\u6548\u7387\u5b8c\u5168\u6ca1\u6cd5\u548css\u6bd4\u3002

\u55ef \u4f60\u9700\u8981\u5173\u95ed\u6389\u5f53\u524d\u7684socket\uff0c\u91cd\u65b0\u5efa\u7acb\u4e00\u4e2asocket\uff0c\u56e0\u4e3a\u8fd9\u4e2aTCP\u662f\u9762\u5411\u8fde\u63a5\u7684\uff0c\u8fd9\u4e2a\u8fde\u63a5\u5df2\u7ecf\u5173\u95ed\uff0c\u4f60\u53ea\u80fd\u591f\u518d\u91cd\u65b0\u521b\u5efa\u4e00\u4e2a\u4e86\u3002

Linux系统中，ss命令可用于查看系统的socket的状态。
1、命令格式：
ss ［参数］
ss ［参数］ ［过滤］
2、命令功能：
ss（Socket Statistics的缩写）命令可以用来获取 socket统计信息，此命令输出的结果类似于
netstat输出的内容，但它能显示更多更详细的 TCP连接状态的信息，且比 netstat 更快速高效。它使用了 TCP协议栈中
tcp_diag（是一个用于分析统计的模块），能直接从获得第一手内核信息，这就使得 ss命令快捷高效。在没有
tcp_diag，ss也可以正常运行。
3、命令参数：
-h， --help 帮助信息
-V， --version 程序版本信息
-n， --numeric 不解析服务名称
-r， --resolve 解析主机名
-a， --all 显示所有套接字（sockets）
-l， --listening 显示监听状态的套接字（sockets）
-o， --options 显示计时器信息
-e， --extended 显示详细的套接字（sockets）信息
-m， --memory 显示套接字（socket）的内存使用情况
-p， --processes 显示使用套接字（socket）的进程
-i， --info 显示 TCP内部信息
-s， --summary 显示套接字（socket）使用概况
-4， --ipv4 仅显示IPv4的套接字（sockets）
-6， --ipv6 仅显示IPv6的套接字（sockets）
-0， --packet 显示 PACKET 套接字（socket）
-t， --tcp 仅显示 TCP套接字（sockets）
-u， --udp 仅显示 UCP套接字（sockets）
-d， --dccp 仅显示 DCCP套接字（sockets）
-w， --raw 仅显示 RAW套接字（sockets）
-x， --unix 仅显示 Unix套接字（sockets）
-f， --family=FAMILY 显示 FAMILY类型的套接字（sockets），FAMILY可选，支持 unix， inet， inet6， link， netlink
-A， --query=QUERY， --socket=QUERY
QUERY ：= {all|inet|tcp|udp|raw|unix|packet|netlink}［，QUERY］
-D， --diag=FILE 将原始TCP套接字（sockets）信息转储到文件
-F， --filter=FILE 从文件中都去过滤器信息
FILTER ：= ［ state TCP-STATE ］ ［ EXPRESSION ］
4、使用实例：

linux鏌ョ湅绔彛鍗犵敤鎯呭喌
绛旓細2銆佸湪寮瑰嚭鐨勪笅鎷夐夐」閲岋紝鐐瑰嚮鎵撳紑缁堢銆3銆佸湪缁堢绐楀彛涓緭鍏sof -i+绔彛鍙凤紝鍥炶溅鍚庡嵆鍙鏌ョ湅绔彛鐨勫崰鐢ㄦ儏鍐点傚湪Linux绯荤粺涓湁鏃跺欎細鍙戠敓绔彛鍐茬獊锛岃繖灏遍渶瑕佹垜浠啛缁冪殑鏌ョ湅鍚勪釜绔彛鐨勫崰鐢ㄦ儏鍐碉紝鏈鍚庡鏋滄兂鍏虫帀鏌愪釜绔彛鐨勫崰鐢ㄥ彲浠浣跨敤kill鍛戒护鐩存帴娓呴櫎鍗犵敤绔彛鐨刾id銆linux绯荤粺涓巜indows绯荤粺鐨勫尯鍒 鍖哄埆1锛氬紑鏀...

linux鐨勭綉缁鍛戒护澶у叏linux鐨勭綉缁滃懡浠
绛旓細Linux涓浣跨敤ss鍛戒护妫鏌ョ綉缁滆繛鎺ョ殑鏂规硶? 閭ｄ釜18845鏄繙绔満鍣ㄤ笂鐨勭鍙,鍙堜笉鏄綘鏈満涓婄殑绔彛,鍙互鐢╯s-p鐪嬬湅鏄摢涓▼搴忚繘琛岀殑杩炴帴,鐒跺悗鍏抽棴杩欎釜绋嬪簭銆 linux鏈変粈涔堝懡浠よ兘澶鏌ョ湅鏈満鍣ㄧ殑缃戠粶娴侀噺? ?nethogs:鎸夎繘绋嬫煡鐪嬫祦閲忓崰鐢?iptraf:鎸夎繛鎺/绔彛鏌ョ湅娴侀噺?ifstat:鎸夎澶囨煡鐪嬫祦閲?ethtool:璇婃柇宸ュ叿?tcpdump:鎶撳寘宸ュ叿甯岃禌...

Linux閲岄潰鏌ョ湅鏈満鎵鏈塋isten鐘舵佺鍙ｇ姸鎬鍛戒护鏄粈涔?
绛旓細鎮ㄥソ寰堥珮鍏村洖绛旀偍鐨勯棶棰橈細浣跨敤ss -lntup 鍛戒护鍗冲彲 浣跨敤netstat -lntup鍛戒护 寰堥珮鍏村洖绛斾綘鐨勯棶棰 by oldboylidao996

linux甯哥敤鐨勭郴缁熷伐鍏?
绛旓細浣跨敤濡備笅鍛戒护杩涜杈撳嚭锛歴lurm-i slurm鐣岄潰涓彲浠ユ墽琛屽涓嬮夐」锛氣梿I锛氭樉绀簂x/tx鐘舵 鈼哻锛氬垏鎹㈠埌缁忓吀鐣岄潰 鈼唕锛氭墜鍔ㄥ埛鏂扮晫闈 鈼唓锛氶鍑哄伐鍏 5.findmnt Findmnt鏄竴涓Linux鍐呯疆鐨鍛戒护琛宸ュ叿锛屽畠涓昏鐢ㄤ簬鏌ユ壘鎸傝浇鐨勬枃浠剁郴缁熺姸鎬併侳indmnt鍙互鏌ョ湅鍒板綋鍓嶇郴缁熶腑宸叉寕杞界殑璁惧锛屽湪蹇呰鏃惰繕鍙繘琛宮ount鎴杣nmount鎿嶄綔...

涓鏂囪鎳濡備綍鏌ョ湅缃戠粶鐨勬ц兘鎸囨爣
绛旓細ifconfig鍜宨p鍛戒护鍙樉绀虹殑鏄綉鍙ｇ殑閰嶇疆浠ュ強鏀跺彂鏁版嵁鍖呯殑缁熻淇℃伅,鑰岀湅涓嶅埌鍗忚鏍堥噷鐨勪俊鎭,閭ｆ帴涓嬫潵灏辨潵鐪嬬湅濡備綍鏌ョ湅鍗忚鏍堥噷鐨勪俊鎭俿ocket淇℃伅濡備綍鏌ョ湅?鎴戜滑鍙互浣跨敤netstat鎴栬卻s,杩欎袱涓懡浠ゆ煡鐪媠ocket銆佺綉缁滃崗璁爤銆佺綉鍙ｄ互鍙婅矾鐢辫〃鐨勪俊鎭傝櫧鐒秐etstat涓ss鍛戒护鏌ョ湅鐨勪俊鎭兘宸笉澶,浣嗘槸濡傛灉鍦ㄧ敓浜х幆澧冧腑瑕佹煡鐪嬭繖绫讳俊鎭...

Linux鍏充簬缃戝崱鐨勫嚑涓鍛戒护
绛旓細DNS鏈嶅姟鍣ㄥ湴鍧锛氬熀浜庝富鏈哄悕鐨勯氫俊锛Linux鍙互鏈変笁涓狣NS鍦板潃 褰撶涓涓湴鍧鏈韩鎸備簡锛屾墠浼氭煡鎵惧叾澶囩敤鍦板潃锛涜嫢绗竴涓湴鍧鏃犳硶瑙ｆ瀽鍒欏仠姝 2.缃戠粶灞炴ч厤缃柟寮 (1)闈欐佹寚瀹 1)鍛戒护鏂瑰紡 ifcfg绯诲垪鍛戒护锛歩fconfig锛氶厤缃甀P锛孨ETMASK route锛氶厤缃矾鐢辩浉鍏充俊鎭 netstat锛氱姸鎬佸強缁熻鏁版嵁鏌ョ湅 iiproute2绯诲垪鍛戒护锛歩p ...

linux绯荤粺濡備綍鏌ョ湅绔彛鍗犵敤
绛旓細Linux netstat鍛戒护鐢ㄤ簬鏄剧ず缃戠粶鐘舵併傚埄鐢╪etstat鎸囦护鍙浣犲緱鐭ユ暣涓狶inux绯荤粺鐨勭綉缁滄儏鍐点傝娉 netstat [-acCeFghilMnNoprstuvVwx][-A<缃戠粶绫诲瀷>][--ip]鍙傛暟 -a鎴--all锛氭樉绀烘墍鏈夎繛绾夸腑鐨凷ocker銆-A<缃戠粶绫诲瀷>鎴--<缃戠粶绫诲瀷>锛氬垪鍑鸿缃戠粶绫诲瀷杩炵嚎涓殑鐩稿叧鍦板潃銆-c鎴--continuous锛氭寔缁垪鍑虹綉缁滅姸鎬...

鍙互閫氳繃浠ヤ笅鏂规硶鏌ョ湅寮鍚簡鐨勭鍙
绛旓細Linux鐨勭鍙鏌ョ湅宸ュ叿1. netstat鍛戒护 鍦↙inux涓紝netstat -tuln 鏄煡鐪嬬鍙ｇ殑棣栭夊懡浠ゃ傚畠浼氭竻鏅板湴鍒楀嚭鎵鏈夊綋鍓嶇洃鍚殑缃戠粶杩炴帴锛屽寘鎷湰鍦板拰杩滅▼鍦板潃锛屼互鍙奣CP鍜孶DP鐘舵侊紝璁╀綘涓鐩簡鐒躲2. ss鍛戒护 灏界netstat鏄粡鍏搁夋嫨锛宻s (ss -tuln) 鍛戒护鍦↙inux绯荤粺涓悓鏍峰彈娆㈣繋锛屽畠鎻愪緵浜嗘洿绠娲併侀珮鏁堢殑绔彛鏌ョ湅浣撻獙...

Linux鎬庢牱鏌ョ湅缃戠粶閰嶇疆
绛旓細Linux鏌ョ湅缃戠粶閰嶇疆鐨勬柟娉曟槸锛1銆侀鍏堟墦寮鐢佃剳涓婄殑铏氭嫙鏈鸿蒋浠讹紝鐒跺悗鍦ㄧ粓绔鍒囨崲鑷硈tudent鐢ㄦ埛锛屽苟鍛戒护涓衡渟shstudent@server0鈥濄2銆佸鏋滄兂瑕鏌ヨ鎵鏈夋帴鍙ｇ殑IP鍦板潃鍜屽瓙缃戞帺鐮侊紝鍒欒緭鍏ュ懡浠も淚Paddr鈥濄3銆佸鏋滄兂瑕鐢IP鍛戒护鏄剧ずeth0鎺ュ彛鐨勭粺璁′俊鎭紝鍒欒緭鍏ュ懡浠も淚P-slinkshoweth0鈥濄4銆佸鏋滄兂瑕佺敤IProute...

linux鍛戒护宸ュ叿鍖卨inux鍛戒护宸ュ叿
绛旓細Linux鐢ㄦ埛甯哥敤鐨10涓伐鍏,鍏朵腑鍖呮嫭缃戠粶鐩戞帶銆佺郴缁熷璁℃垨鍏跺畠鏈夌敤鍛戒护,杩10涓狶inux宸ュ叿鍙互甯姪澶у鎻愰珮宸ヤ綔鍜浣跨敤鏁堢巼,闈炲父瀹炵敤銆傚垎鍒涓: 1.w 瀵,浣犳病鐪嬮敊,灏辨槸w鍛戒护銆備娇鐢ㄨ鍛戒护鎴戜滑鍙互鏌ョ湅鍒板綋鍓嶇櫥褰曠郴缁熺殑鐢ㄦ埛鏄皝,浠ュ強鎵ц浜嗗摢浜涘懡浠ゃ 2.nmon Nmon鏄竴涓彲浠ョ洃鎺у綋鍓嶇郴缁熸ц兘鐨勫皬宸ュ叿,浣跨敤涔嬪墠闇瑕佸厛鐢ㄥ涓...

扩展阅读：linux基础考试题库 ... linux中sh命令怎么用 ... linux中ls命令的用法 ... linux命令find用法详解 ... ss 命令详解 ... linux常用的108个命令 ... linux mv命令怎么用 ... linux中ls命令查不出来 ... linux chmod用法详解 ...