| ss -h | Show summary of options |
| ss -V | Output version information |
| ss -H | Suppress header line |
| ss -Q | Suppress sending and receiving queue columns |
| ss -O | Print each socket's data on a single line |
| ss -n | Do not try to resolve service names |
| ss -r | Try to resolve numeric address/ports |
| ss -a | Display both listening and non-listening (for TCP this means established connections) sock |
| ss -l | Display only listening sockets (these are omitted by default) |
| ss -B | Display only TCP bound but inactive (not listening, connecting, etc.) sockets (these are o |
| ss -o | Show timer information |
| ss -e | Show detailed socket information |
| ss -m | Show socket memory usage |
| ss -p | Show processes using sockets |
| ss -T | Show threads using sockets |
| ss -i | Show internal TCP information |
| ss --tos | Show ToS and priority information |
| ss --cgroup | Show cgroup information |
| ss --tipcinfo | Show internal tipc socket information |
| ss -K | Attempts to forcibly close sockets |
| ss -s | Print summary statistics |
| ss -E | Continually display sockets as they are destroyed |
| ss -Z | As the -p option but also shows process security context |
| ss -z | As the -Z option but also shows the socket context |
| ss -N NSNAME | Switch to the specified network namespace name |
| ss -b | Show socket classic BPF filters (only administrators are allowed to get this information) |
| ss -4 | Display only IP version 4 sockets (alias for -f inet) |
| ss -6 | Display only IP version 6 sockets (alias for -f inet6) |
| ss -0 | Display PACKET sockets (alias for -f link) |
| ss -t | Display TCP sockets |
| ss -u | Display UDP sockets |
| ss -d | Display DCCP sockets |
| ss -w | Display RAW sockets |
| ss -x | Display Unix domain sockets (alias for -f unix) |
| ss -S | Display SCTP sockets |
| ss --vsock | Display vsock sockets (alias for -f vsock) |
| ss -M | Display MPTCP sockets |
| ss --inet-sockopt | Display inet socket options |
| ss -f FAMILY | Display sockets of type FAMILY |
| ss -A QUERY | List of socket tables to dump, separated by commas |
| ss -D FILE | Do not display anything, just dump raw information about TCP sockets to FILE after applyin |
| ss -F FILE | Read filter information from FILE |
| ss --bpf-maps | Pretty-print all the BPF socket-local data entries for each socket |
| ss --bpf-map-id=MAP_ID | Pretty-print the BPF socket-local data entries for the requested map ID |