From 58abb16ca18c37eb4178df4215b9abeb356fa090 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=B6rg=20Thalheim?= <joerg@higgsboson.tk>
Date: Wed, 24 Dec 2014 21:42:16 +0100
Subject: [PATCH] ss

---
 cheat/cheatsheets/ss | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 cheat/cheatsheets/ss

diff --git a/cheat/cheatsheets/ss b/cheat/cheatsheets/ss
new file mode 100644
index 0000000..8925108
--- /dev/null
+++ b/cheat/cheatsheets/ss
@@ -0,0 +1,18 @@
+ss
+Utility to investigate sockets
+
+Args
+-4/-6 list ipv4/ipv6 sockets
+-n numeric addresses instead of hostnames
+-l list listing sockets
+-u/-t/-x list udp/tcp/unix sockets
+-p Show process(es) that using socket
+
+# show all listing tcp sockets including the corresponding process
+ss -tlp
+
+# show all sockets connecting to 192.168.2.1 on port 80
+ss -t dst 192.168.2.1:80
+
+# show all ssh related connection
+ss -t state established '( dport = :ssh or sport = :ssh )'