netstat and ss (connection listing) in Linux CLI - Cheat Sheet & Quick Revision

Recall & Review

beginner

What does the netstat command do in Linux?

The netstat command shows network connections, routing tables, interface statistics, masquerade connections, and multicast memberships.

intermediate

What is the main difference between netstat and ss commands?

ss is a newer, faster tool that shows socket statistics and network connections, while netstat is older and slower but still widely used.

beginner

How do you list all listening TCP ports using ss?

Use ss -lt to list all listening TCP ports.

beginner

What option with netstat shows all connections including listening and non-listening?

The option -a with netstat shows all connections, both listening and non-listening.

intermediate

Why might you prefer ss over netstat on modern Linux systems?

ss is faster, uses less CPU, and provides more detailed socket information, making it better for quick and detailed network diagnostics.

Which command shows all listening UDP connections using ss?

A netstat -lt

B ss -lt

C netstat -au

D ss -lu

ss -lu lists all listening UDP connections.

What does the -n option do in netstat or ss?

A Shows only established connections

B Shows network statistics summary

C Shows numeric addresses and ports instead of resolving names

D Shows only listening sockets

The -n option prevents name resolution and shows numeric IP addresses and port numbers.

Which command lists all TCP connections including listening and established using netstat?

A ss -au

B netstat -at

C ss -at

D netstat -au

netstat -at lists all TCP connections.

What is the purpose of the -p option in ss or netstat?

A Show the process using the socket

B Show protocol statistics

C Show only passive sockets

D Show port numbers only

The -p option shows the process ID and name using the socket.

Which command is generally faster and recommended for modern Linux systems?

A ss

B netstat

C ifconfig

D ping

ss is faster and more efficient than netstat for socket and connection listing.

Explain how to use ss to find all listening TCP ports and the processes using them.

Think about options to show listening sockets and process details.

Describe the differences and advantages of using ss over netstat for connection listing.

Consider performance and information richness.