Posts

Showing posts with the label tcpdump

ss vrs netstat

Image
Unveiling Their Powers ss vrs netstat The "ss" and "netstat" commands are both used for displaying information about network sockets on Linux. However, there are some differences between the two commands. Output Format: The output format of "ss" is more concise and easier to parse compared to "netstat". "ss" provides a streamlined view of socket-related information, making it more suitable for scripting and automation tasks. On the other hand, "netstat" provides more detailed and comprehensive information about network connections and routing tables. Active vs. Listening Sockets: By default, "netstat" displays both active and listening sockets, whereas "ss" primarily focuses on active connections. However, "ss" can also display listening sockets with the -l option. Performance: "ss" is known to perform faster than "netstat", especially when dealing with a large number of socke