← All commands
Topic hub Networking
Windows Linux Networking Expanded guide

Windows netstat equivalent in Linux

Displays active network connections, listening ports, and socket statistics.

Windows netstat
→
Linux equivalents
Debian/Ubuntu same command
ss -tuln
Fedora same command
ss -tuln
Arch same command
ss -tuln

Overview

What this command does

On Windows, "netstat" is used to show network connections. On Linux, the closest practical mapping shown here is "ss -tuln". Displays active network connections, listening ports, and socket statistics. This reference is grouped under Networking.

Migration tip: While <code>netstat</code> still works on Linux, <strong><code>ss</code></strong> is the modern replacement — it's faster and shows more information.

Windows → Linux context

What changes when you use this on Linux?

Equivalent task, different tool

Windows netstat maps to ss -tuln for this task. Treat this as a workflow mapping rather than a character-for-character syntax translation.

Portable across the compared distros

The Debian/Ubuntu, Fedora and Arch rows use the same command in this mapping. Package availability or defaults can still vary, so check the installed tool version when an option behaves differently.

Practical tasks

Common use cases

Show network connections

Displays active network connections, listening ports, and socket statistics.

ss -t

Show TCP connections

ss -u

Show UDP connections

ss -l

Show listening sockets only

Ready to run

Copyable Linux commands

Review paths, device names, package names and permissions before running any command.

ss -tuln
ss -tulnp
ss -tp

Walkthrough

Examples with explanations

# Windows: netstat -an
ss -tuln                    # show all listening TCP/UDP ports
ss -tulnp                   # include the process name

# Windows: netstat -b  (show processes)
ss -tp                      # TCP connections with process info

Reference

Common options and variations

Command or optionUse
ss -tShow TCP connections
ss -uShow UDP connections
ss -lShow listening sockets only
ss -nShow numbers (no DNS lookups)
ss -pShow which process owns each socket
ss -tulnThe most common combination

Distro differences

Debian/Ubuntu vs Fedora vs Arch

Debian/Ubuntu, Fedora and Arch all use "ss -tuln" for this mapping. The command syntax shown here is portable across the three rows, although installed versions and system defaults can still vary.

DistributionPackage manager / baseEquivalent commandDifference to notice
Debian/Ubuntu same command ss -tuln Same command on this distribution.
Fedora same command ss -tuln Same command on this distribution.
Arch same command ss -tuln Same command on this distribution.

Keep learning

Related Networking commands