CommandLinux

Netherwatch

Monitor Real-Time Network Connections

Displays a live, auto-refreshing view of all network connections. Essential for monitoring server activity, debugging network issues, or detecting unexpected connections.

watch -n 1 'ss -tunapl'
watch -n 1 'lsof -i -P -n | grep ESTABLISHED'

Usage Notes

  • •-t TCP connections, -u UDP connections
  • •-n numeric addresses (no DNS lookup)
  • •-a all sockets, -p show process info
  • •-l listening sockets only
  • •Run with sudo to see all process names

Warnings

  • Warning:High-traffic servers may generate overwhelming output
  • Warning:Consider filtering by port or state for focused monitoring

Related Scroll Ideas

  • • Monitor bandwidth per connection with iftop
  • • Track connections by country with geoip
  • • Alert on new connections to specific ports
← Back to Developer Scrolls