Overview
psys monitors network processes and connections in real-time using Linux’sss command-line utility. Data is automatically refreshed every 5 seconds to provide live updates.
Data Collection
psys uses twoss commands to gather network information:
Listening Ports (ss -tlnp)
The
-tlnp flags stand for: tcp, listening sockets, numeric addresses (no DNS lookup), process information.Established Connections (ss -tnp)
The
-tnp flags capture: tcp, numeric addresses, process information for established connections.Parsing ss Output
psys uses regular expressions to parse the ss command output:Listener Regex
- Local address and port
- Process name
- PID (process ID)
Established Connection Regex
- Local address and port
- Remote (peer) address and port
- Process name
- PID
Data Structure
The collected data is structured into two main types:Listener Type
Connection Type
Process Information Retrieval
psys reads additional process information from the/proc filesystem:
Process Name
Command Line
Process Icon Detection
psys automatically detects the type of process and assigns appropriate icons:Supported Icon Types
Node.js
node, mainthread processes
Next.js
next processes
Redis
redis processes or port 6379
MongoDB
mongo processes or port 27017
PostgreSQL
postgres, psql processes or port 5432
MySQL
mysql, mariadb processes or port 3306
Apache
apache, httpd processes or port 80
SSH
ssh, sshd processes or port 22
Generic
All other processes
Known Service Detection
When the process name is unknown ("?"), psys falls back to port-based service detection: