mirror of
https://github.com/fofolee/uTools-Manuals.git
synced 2025-12-17 08:26:32 +08:00
语法高亮，滚动条美化，设置页面调整
This commit is contained in:
fofolee
@@ -5,10 +5,10 @@
|
||||
<p>当服务器的socket连接数量变得非常大时，无论是使用netstat命令还是直接<code>cat /proc/net/tcp</code>，执行速度都会很慢。可能你不会有切身的感受，但请相信我，当服务器维持的连接达到上万个的时候，使用netstat等于浪费 生命，而用ss才是节省时间。</p>
|
||||
<p>天下武功唯快不破。ss快的秘诀在于，它利用到了TCP协议栈中tcp_diag。tcp_diag是一个用于分析统计的模块，可以获得Linux 内核中第一手的信息，这就确保了ss的快捷高效。当然，如果你的系统中没有tcp_diag，ss也可以正常运行，只是效率会变得稍慢。</p>
|
||||
<h3 id="语法">语法</h3>
|
||||
<pre><code>ss [参数]
|
||||
<pre><code class="language-bash">ss [参数]
|
||||
ss [参数] [过滤]</code></pre>
|
||||
<h3 id="选项">选项</h3>
|
||||
<pre><code>-h, --help 帮助信息
|
||||
<pre><code class="language-bash">-h, --help 帮助信息
|
||||
-V, --version 程序版本信息
|
||||
-n, --numeric 不解析服务名称
|
||||
-r, --resolve 解析主机名
|
||||
@@ -35,7 +35,7 @@ ss [参数] [过滤]</code></pre>
|
||||
-F, --filter=FILE 从文件中都去过滤器信息
|
||||
FILTER := [ state TCP-STATE ] [ EXPRESSION ]</code></pre>
|
||||
<h3 id="实例">实例</h3>
|
||||
<div class="sourceCode" id="cb3"><pre class="sourceCode bash"><code class="sourceCode bash"><a class="sourceLine" id="cb3-1" data-line-number="1"><span class="ex">ss</span> -t -a # 显示TCP连接</a>
|
||||
<div class="sourceCode" id="cb3"><pre><code class="language-bash"><a class="sourceLine" id="cb3-1" data-line-number="1"><span class="ex">ss</span> -t -a # 显示TCP连接</a>
|
||||
<a class="sourceLine" id="cb3-2" data-line-number="2"><span class="ex">ss</span> -s # 显示 Sockets 摘要</a>
|
||||
<a class="sourceLine" id="cb3-3" data-line-number="3"><span class="ex">ss</span> -l # 列出所有打开的网络连接端口</a>
|
||||
<a class="sourceLine" id="cb3-4" data-line-number="4"><span class="ex">ss</span> -pl # 查看进程使用的socket</a>
|
||||
@@ -64,7 +64,7 @@ ss [参数] [过滤]</code></pre>
|
||||
<a class="sourceLine" id="cb3-27" data-line-number="27"><span class="ex">ss</span> src 192.168.119.103:smtp</a>
|
||||
<a class="sourceLine" id="cb3-28" data-line-number="28"><span class="ex">ss</span> src 192.168.119.103:25</a></code></pre></div>
|
||||
<p><strong>将本地或者远程端口和一个数比较</strong></p>
|
||||
<div class="sourceCode" id="cb4"><pre class="sourceCode bash"><code class="sourceCode bash"><a class="sourceLine" id="cb4-1" data-line-number="1"><span class="co"># ss dport OP PORT 远程端口和一个数比较；</span></a>
|
||||
<div class="sourceCode" id="cb4"><pre><code class="language-bash"><a class="sourceLine" id="cb4-1" data-line-number="1"><span class="co"># ss dport OP PORT 远程端口和一个数比较；</span></a>
|
||||
<a class="sourceLine" id="cb4-2" data-line-number="2"><span class="co"># ss sport OP PORT 本地端口和一个数比较</span></a>
|
||||
<a class="sourceLine" id="cb4-3" data-line-number="3"><span class="co"># OP 可以代表以下任意一个:</span></a>
|
||||
<a class="sourceLine" id="cb4-4" data-line-number="4"><span class="co"># <= or le : 小于或等于端口号</span></a>
|
||||
@@ -84,7 +84,7 @@ ss [参数] [过滤]</code></pre>
|
||||
<a class="sourceLine" id="cb4-18" data-line-number="18"><span class="ex">ss</span> <span class="dt">\(</span> sport = :http or sport = :https <span class="dt">\)</span></a>
|
||||
<a class="sourceLine" id="cb4-19" data-line-number="19"><span class="ex">ss</span> -o state fin-wait-1 <span class="dt">\(</span> sport = :http or sport = :https <span class="dt">\)</span> dst 192.168.1/24</a></code></pre></div>
|
||||
<p><strong>用TCP 状态过滤Sockets</strong></p>
|
||||
<div class="sourceCode" id="cb5"><pre class="sourceCode bash"><code class="sourceCode bash"><a class="sourceLine" id="cb5-1" data-line-number="1"><span class="ex">ss</span> -4 state closing</a>
|
||||
<div class="sourceCode" id="cb5"><pre><code class="language-bash"><a class="sourceLine" id="cb5-1" data-line-number="1"><span class="ex">ss</span> -4 state closing</a>
|
||||
<a class="sourceLine" id="cb5-2" data-line-number="2"><span class="co"># ss -4 state FILTER-NAME-HERE</span></a>
|
||||
<a class="sourceLine" id="cb5-3" data-line-number="3"><span class="co"># ss -6 state FILTER-NAME-HERE</span></a>
|
||||
<a class="sourceLine" id="cb5-4" data-line-number="4"><span class="co"># FILTER-NAME-HERE 可以代表以下任何一个：</span></a>
|
||||
@@ -95,7 +95,7 @@ ss [参数] [过滤]</code></pre>
|
||||
<a class="sourceLine" id="cb5-9" data-line-number="9"><span class="co"># bucket : 显示状态为maintained as minisockets,如：time-wait和syn-recv.</span></a>
|
||||
<a class="sourceLine" id="cb5-10" data-line-number="10"><span class="co"># big : 和bucket相反.</span></a></code></pre></div>
|
||||
<p><strong>显示ICP连接</strong></p>
|
||||
<pre><code>[root@localhost ~]# ss -t -a
|
||||
<pre><code class="language-bash">[root@localhost ~]# ss -t -a
|
||||
State Recv-Q Send-Q Local Address:Port Peer Address:Port
|
||||
LISTEN 0 0 *:3306 *:*
|
||||
LISTEN 0 0 *:http *:*
|
||||
@@ -104,7 +104,7 @@ LISTEN 0 0 127.0.0.1:smtp
|
||||
ESTAB 0 0 112.124.15.130:42071 42.156.166.25:http
|
||||
ESTAB 0 0 112.124.15.130:ssh 121.229.196.235:33398</code></pre>
|
||||
<p><strong>显示 Sockets 摘要</strong></p>
|
||||
<pre><code>[root@localhost ~]# ss -s
|
||||
<pre><code class="language-bash">[root@localhost ~]# ss -s
|
||||
Total: 172 (kernel 189)
|
||||
TCP: 10 (estab 2, closed 4, orphaned 0, synrecv 0, timewait 0/0), ports 5
|
||||
|
||||
@@ -117,24 +117,24 @@ INET 11 11 0
|
||||
FRAG 0 0 0</code></pre>
|
||||
<p>列出当前的established, closed, orphaned and waiting TCP sockets</p>
|
||||
<p><strong>列出所有打开的网络连接端口</strong></p>
|
||||
<pre><code>[root@localhost ~]# ss -l
|
||||
<pre><code class="language-bash">[root@localhost ~]# ss -l
|
||||
Recv-Q Send-Q Local Address:Port Peer Address:Port
|
||||
0 0 *:3306 *:*
|
||||
0 0 *:http *:*
|
||||
0 0 *:ssh *:*
|
||||
0 0 127.0.0.1:smtp *:*</code></pre>
|
||||
<p><strong>查看进程使用的socket</strong></p>
|
||||
<pre><code>[root@localhost ~]# ss -pl
|
||||
<pre><code class="language-bash">[root@localhost ~]# ss -pl
|
||||
Recv-Q Send-Q Local Address:Port Peer Address:Port
|
||||
0 0 *:3306 *:* users:(("mysqld",1718,10))
|
||||
0 0 *:http *:* users:(("nginx",13312,5),("nginx",13333,5))
|
||||
0 0 *:ssh *:* users:(("sshd",1379,3))
|
||||
0 0 127.0.0.1:smtp *:* us</code></pre>
|
||||
<p><strong>找出打开套接字/端口应用程序</strong></p>
|
||||
<pre><code>[root@localhost ~]# ss -pl | grep 3306
|
||||
<pre><code class="language-bash">[root@localhost ~]# ss -pl | grep 3306
|
||||
0 0 *:3306 *:* users:(("mysqld",1718,10))</code></pre>
|
||||
<p><strong>显示所有UDP Sockets</strong></p>
|
||||
<pre><code>[root@localhost ~]# ss -u -a
|
||||
<pre><code class="language-bash">[root@localhost ~]# ss -u -a
|
||||
State Recv-Q Send-Q Local Address:Port Peer Address:Port
|
||||
UNCONN 0 0 *:syslog *:*
|
||||
UNCONN 0 0 112.124.15.130:ntp *:*
|
||||
@@ -142,7 +142,7 @@ UNCONN 0 0 10.160.7.81:ntp
|
||||
UNCONN 0 0 127.0.0.1:ntp *:*
|
||||
UNCONN 0 0 *:ntp *:*</code></pre>
|
||||
<h4 id="出所有端口为-22ssh的连接">出所有端口为 22（ssh）的连接</h4>
|
||||
<div class="sourceCode" id="cb12"><pre class="sourceCode bash"><code class="sourceCode bash"><a class="sourceLine" id="cb12-1" data-line-number="1"><span class="ex">ss</span> state all sport = :ssh</a>
|
||||
<div class="sourceCode" id="cb12"><pre><code class="language-bash"><a class="sourceLine" id="cb12-1" data-line-number="1"><span class="ex">ss</span> state all sport = :ssh</a>
|
||||
<a class="sourceLine" id="cb12-2" data-line-number="2"></a>
|
||||
<a class="sourceLine" id="cb12-3" data-line-number="3"><span class="ex">Netid</span> State Recv-Q Send-Q Local Address:Port Peer Address:Port</a>
|
||||
<a class="sourceLine" id="cb12-4" data-line-number="4"><span class="ex">tcp</span> LISTEN 0 128 *:ssh *:*</a>
|
||||
|
||||
Reference in New Issue
Block a user