| -h, --help |
help message
|
| -V, --version |
output version information
|
| -n, --numeric |
don't resolve service names
|
| -r, --resolve |
resolve host names
|
| -a, --all |
display all sockets
|
| -l, --listening |
display listening sockets
|
| -o, --options |
show timer information
|
| -e, --extended |
show detailed socket information
|
| -m, --memory |
show socket memory usage
|
| -p, --processes |
show process using socket
|
| -i, --info |
show internal TCP information
|
| -s, --summary |
show socket usage summary
|
| -b, --bpf |
show bpf filter socket information
|
| -Z, --context |
display task SELinux security contexts
|
| -z, --contexts |
display task and socket SELinux security contexts
|
| -4, --ipv4 |
display only IP version 4 sockets
|
| -6, --ipv6 |
display only IP version 6 sockets
|
| -t, --tcp |
display only TCP sockets
|
| -u, --udp |
display only UDP sockets
|
| -d, --dccp |
display only DCCP sockets
|
| -w, --raw |
display only RAW sockets
|
| -x, --unix |
display only Unix domain sockets
|
| -f, --family=FAMILY |
display sockets of type FAMILY
FAMILY := {inet|inet6|link|unix|netlink|vsock|tipc|xdp|help}
|
| -K, --kill |
forcibly close sockets, display what was closed
|
| -D, --diag=FILE |
Dump raw information about TCP sockets to FILE
|
| -F, --filter=FILE |
read filter information from FILE
FILTER := [ state TCP-STATE ] [ EXPRESSION ]
FILTER := [ state STATE-FILTER ] [ EXPRESSION ]
STATE-FILTER := {all|connected|synchronized|bucket|big|TCP-STATES}
TCP-STATES := {established|syn-sent|syn-recv|fin-wait-{1,2}|time-wait|closed|close-wait|last-ack|listening|closing}
connected := {established|syn-sent|syn-recv|fin-wait-{1,2}|time-wait|close-wait|last-ack|closing}
synchronized := {established|syn-recv|fin-wait-{1,2}|time-wait|close-wait|last-ack|closing}
bucket := {syn-recv|time-wait}
big := {established|syn-sent|fin-wait-{1,2}|closed|close-wait|last-ack|listening|closing}
|
|