What are the differences between `-f` and `-A` of `ss`?












-4















What are the differences between -f and -A of ss?



Which of -f and -A is related to -t, -u, -4, -6, -w, -x?



Does -A inet,packet imply -A tcp,udp,raw?



I know a few socket concepts, but can't figure out the terminology in the manpage.



Thanks.




-f



Display sockets of type FAMILY. Currently the following families are
supported: unix, inet, inet6, link, netlink.



-A Query



List of socket tables to dump, separated by commas. The following
identifiers are understood: all, inet, tcp, udp, raw, unix, packet,
netlink, unix_dgram, unix_stream, unix_seqpacket, packet_raw,
packet_dgram.











share|improve this question

























  • Answerd by quote and clearly by the man page you've read

    – 炸鱼薯条德里克
    59 mins ago
















-4















What are the differences between -f and -A of ss?



Which of -f and -A is related to -t, -u, -4, -6, -w, -x?



Does -A inet,packet imply -A tcp,udp,raw?



I know a few socket concepts, but can't figure out the terminology in the manpage.



Thanks.




-f



Display sockets of type FAMILY. Currently the following families are
supported: unix, inet, inet6, link, netlink.



-A Query



List of socket tables to dump, separated by commas. The following
identifiers are understood: all, inet, tcp, udp, raw, unix, packet,
netlink, unix_dgram, unix_stream, unix_seqpacket, packet_raw,
packet_dgram.











share|improve this question

























  • Answerd by quote and clearly by the man page you've read

    – 炸鱼薯条德里克
    59 mins ago














-4












-4








-4








What are the differences between -f and -A of ss?



Which of -f and -A is related to -t, -u, -4, -6, -w, -x?



Does -A inet,packet imply -A tcp,udp,raw?



I know a few socket concepts, but can't figure out the terminology in the manpage.



Thanks.




-f



Display sockets of type FAMILY. Currently the following families are
supported: unix, inet, inet6, link, netlink.



-A Query



List of socket tables to dump, separated by commas. The following
identifiers are understood: all, inet, tcp, udp, raw, unix, packet,
netlink, unix_dgram, unix_stream, unix_seqpacket, packet_raw,
packet_dgram.











share|improve this question
















What are the differences between -f and -A of ss?



Which of -f and -A is related to -t, -u, -4, -6, -w, -x?



Does -A inet,packet imply -A tcp,udp,raw?



I know a few socket concepts, but can't figure out the terminology in the manpage.



Thanks.




-f



Display sockets of type FAMILY. Currently the following families are
supported: unix, inet, inet6, link, netlink.



-A Query



List of socket tables to dump, separated by commas. The following
identifiers are understood: all, inet, tcp, udp, raw, unix, packet,
netlink, unix_dgram, unix_stream, unix_seqpacket, packet_raw,
packet_dgram.








iproute ss






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited 27 mins ago







Tim

















asked 1 hour ago









TimTim

27.9k78269487




27.9k78269487













  • Answerd by quote and clearly by the man page you've read

    – 炸鱼薯条德里克
    59 mins ago



















  • Answerd by quote and clearly by the man page you've read

    – 炸鱼薯条德里克
    59 mins ago

















Answerd by quote and clearly by the man page you've read

– 炸鱼薯条德里克
59 mins ago





Answerd by quote and clearly by the man page you've read

– 炸鱼薯条德里克
59 mins ago










1 Answer
1






active

oldest

votes


















1














-4, -6, -x - as per man page.



-t, -u, -w all correspond to socket tables.



The table inet implies all of tcp, udp, raw, and presumably also dccp and sctp. I assume all is synthetic at some level, so I assume inet is similar.



When overlapping tables are specified (e.g. -A tcp,inet), ss does not show duplicates.



I do not think that -A packet and -A raw overlap, BUT...



I do not know what the socket tables packet, packet_raw, and packet_dgram are doing! When I request these, I see nothing. But when I request -0 aka -f link, I see sockets which are shown with the "netid"s p_raw and p_dgram. Weird!



The name "socket tables" is talking about the native tables inside the kernel. So it is very efficient to list exactly tcp sockets for example, we just list the entire table. You can see old plain-text /proc interfaces for these tables listed in the old man netstat.



Other filters might print much less compared to the size of the table they need to scan, in this sense they might be less efficient. But, I would not worry about it.





share























    Your Answer








    StackExchange.ready(function() {
    var channelOptions = {
    tags: "".split(" "),
    id: "106"
    };
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function() {
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled) {
    StackExchange.using("snippets", function() {
    createEditor();
    });
    }
    else {
    createEditor();
    }
    });

    function createEditor() {
    StackExchange.prepareEditor({
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: false,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: null,
    bindNavPrevention: true,
    postfix: "",
    imageUploader: {
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    },
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    });


    }
    });














    draft saved

    draft discarded


















    StackExchange.ready(
    function () {
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f508098%2fwhat-are-the-differences-between-f-and-a-of-ss%23new-answer', 'question_page');
    }
    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    1














    -4, -6, -x - as per man page.



    -t, -u, -w all correspond to socket tables.



    The table inet implies all of tcp, udp, raw, and presumably also dccp and sctp. I assume all is synthetic at some level, so I assume inet is similar.



    When overlapping tables are specified (e.g. -A tcp,inet), ss does not show duplicates.



    I do not think that -A packet and -A raw overlap, BUT...



    I do not know what the socket tables packet, packet_raw, and packet_dgram are doing! When I request these, I see nothing. But when I request -0 aka -f link, I see sockets which are shown with the "netid"s p_raw and p_dgram. Weird!



    The name "socket tables" is talking about the native tables inside the kernel. So it is very efficient to list exactly tcp sockets for example, we just list the entire table. You can see old plain-text /proc interfaces for these tables listed in the old man netstat.



    Other filters might print much less compared to the size of the table they need to scan, in this sense they might be less efficient. But, I would not worry about it.





    share




























      1














      -4, -6, -x - as per man page.



      -t, -u, -w all correspond to socket tables.



      The table inet implies all of tcp, udp, raw, and presumably also dccp and sctp. I assume all is synthetic at some level, so I assume inet is similar.



      When overlapping tables are specified (e.g. -A tcp,inet), ss does not show duplicates.



      I do not think that -A packet and -A raw overlap, BUT...



      I do not know what the socket tables packet, packet_raw, and packet_dgram are doing! When I request these, I see nothing. But when I request -0 aka -f link, I see sockets which are shown with the "netid"s p_raw and p_dgram. Weird!



      The name "socket tables" is talking about the native tables inside the kernel. So it is very efficient to list exactly tcp sockets for example, we just list the entire table. You can see old plain-text /proc interfaces for these tables listed in the old man netstat.



      Other filters might print much less compared to the size of the table they need to scan, in this sense they might be less efficient. But, I would not worry about it.





      share


























        1












        1








        1







        -4, -6, -x - as per man page.



        -t, -u, -w all correspond to socket tables.



        The table inet implies all of tcp, udp, raw, and presumably also dccp and sctp. I assume all is synthetic at some level, so I assume inet is similar.



        When overlapping tables are specified (e.g. -A tcp,inet), ss does not show duplicates.



        I do not think that -A packet and -A raw overlap, BUT...



        I do not know what the socket tables packet, packet_raw, and packet_dgram are doing! When I request these, I see nothing. But when I request -0 aka -f link, I see sockets which are shown with the "netid"s p_raw and p_dgram. Weird!



        The name "socket tables" is talking about the native tables inside the kernel. So it is very efficient to list exactly tcp sockets for example, we just list the entire table. You can see old plain-text /proc interfaces for these tables listed in the old man netstat.



        Other filters might print much less compared to the size of the table they need to scan, in this sense they might be less efficient. But, I would not worry about it.





        share













        -4, -6, -x - as per man page.



        -t, -u, -w all correspond to socket tables.



        The table inet implies all of tcp, udp, raw, and presumably also dccp and sctp. I assume all is synthetic at some level, so I assume inet is similar.



        When overlapping tables are specified (e.g. -A tcp,inet), ss does not show duplicates.



        I do not think that -A packet and -A raw overlap, BUT...



        I do not know what the socket tables packet, packet_raw, and packet_dgram are doing! When I request these, I see nothing. But when I request -0 aka -f link, I see sockets which are shown with the "netid"s p_raw and p_dgram. Weird!



        The name "socket tables" is talking about the native tables inside the kernel. So it is very efficient to list exactly tcp sockets for example, we just list the entire table. You can see old plain-text /proc interfaces for these tables listed in the old man netstat.



        Other filters might print much less compared to the size of the table they need to scan, in this sense they might be less efficient. But, I would not worry about it.






        share











        share


        share










        answered 8 mins ago









        sourcejedisourcejedi

        25.4k445110




        25.4k445110






























            draft saved

            draft discarded




















































            Thanks for contributing an answer to Unix & Linux Stack Exchange!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f508098%2fwhat-are-the-differences-between-f-and-a-of-ss%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            Entries order in /etc/network/interfaces

            新発田市

            Grub takes very long (several minutes) to open Menu (in Multi-Boot-System)