LOADING N0PERM…
Modern Linux CLI utility for investigating socket telemetry, open ports, established connections, and TCP state machine diagnostics, replacing netstat.
A standard NETWORKING utility used across offensive reconnaissance, packet forensics, and defensive system administration.
Direct visibility into network interfaces, protocol frames, access controls, or filesystem structures without graphical overhead.
During live system triage, initial reconnaissance, forensic capture inspection, or baseline configuration auditing.
# Part of iproute2 package (standard on modern Linux)
sudo apt install iproute2Audit active network connections:
- List all listening TCP sockets with process info: ss -tulpn
- Filter established connections: ss -t -a state established
- Filter connections to specific port: ss -tan '( sport = :443 or dport = :443 )'
- Display socket memory usage: ss -tm