Only show Internet sockets if either the local or foreign port number is on the specified list. The ports argument is a comma-separated list of port numbers and ranges specified as first and last port separated by a dash.
-u
Show AF_LOCAL (Ux) sockets.
If neither -4 -, -6 or -u is specified, sockstat will list sockets in all three domains.
If neither -c or -l is specified, sockstat will list both listening and connected sockets.
The information listed for each socket is:
USER
The user who owns the socket.
COMMAND
The command which holds the socket.
PID
The process ID of the command which holds the socket.
FD
The file descriptor number of the socket.
PROTO
The transport protocol associated with the socket for Internet sockets, or the type of socket (stream or datagram) for Unix sockets.
LOCAL ADDRESS
For Internet sockets, this is the address the local end of the socket is bound to (see getsockname(2)). For bound Unix sockets, it is the sockets filename. For other Unix sockets, it is a right arrow followed by the endpoints filename, or "??" if the endpoint could not be determined.
FOREIGN ADDRESS
(Internet sockets only) The address the foreign end of the socket is bound to (see getpeername(2)).
Note that TCP sockets in the AF_INET or AF_INET6 domains that are not in one of the LISTEN, SYN_SENT, or ESTABLISHED states may not be shown by sockstat; use netstat(1) to examine them instead.