DE

↑ ↓ select, Enter open, Esc close

List open ports and listening services

harmless rootNetworkalle
root@server
ss -tulpn

Shows all listening TCP and UDP sockets with local address, port and the associated process including PID. The local address column reveals whether a service is only reachable internally (127.0.0.1) or on all interfaces (0.0.0.0, *, [::]). ss is the modern replacement for netstat.

Note: Without root, the process details for services of other users are missing.

Also searched as

  • which process is listening on port
  • list open ports linux
  • netstat -tulpn replacement

Related one-liners

All in Network

Check server ports from outside with nmap

$nmap -Pn -p 21,22,25,80,110,143,443,465,587,993,995,3306,8443,8880 server.example.com
harmlessNetwork

Count TCP connections by state

$ss -Htan | awk '{print $1}' | sort | uniq -c | sort -rn
harmlessNetwork

Count web server connections per IP address

$ss -Htn state established '( sport = :80 or sport = :443 )' | awk '{print $4}' | rev | cut -d: -f2- | rev | sort | uniq -c | sort -rn | head -20
harmlessNetwork

Show outgoing SMTP connections and their processes

#ss -Htnp state established '( dport = :25 )'
harmlessNetwork

Test if a TCP port is reachable without telnet or nc

$timeout 3 bash -c '</dev/tcp/db.example.com/3306' && echo offen || echo "geschlossen oder gefiltert"
harmlessNetwork

Check if Plesk is listening on ports 8443 and 8880

#ss -tlnp | grep -E ':(8443|8880)\b'
harmlessPlesk

Read first, then run.

The commands on myline.de act directly on servers, files and databases. A wrong path or placeholder can delete data irreversibly or make a server unreachable.

  • All commands are provided without warranty and are not tested on every system.
  • Understand what a command does before running it, and check every placeholder.
  • Make a backup first and, if possible, try it on a test system.
  • You run commands at your own risk. Liability for damages is excluded to the extent permitted by law.