Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Linux administrators need different tools for different questions: what is running, what is slowing the system, which service owns a port, and what changed during startup. These nine tool groups cover common day-to-day checks, but they are not a universal ranking. Package names, command availability, and defaults vary by distribution; minimal installations may omit utilities that are common on full systems.

Use the command-line tools below for local inspection and focused troubleshooting. For a fleet, they complement rather than replace centralized metrics and alerting.

1. Inspect processes with ps and top

Start with the distinction between a snapshot and a live view. The Debian Reference Manual describes ps as a static view of process activity and top as an interactive, changing display; Red Hat makes the same distinction for RHEL 9. Use ps to capture what is running at a moment, and top to watch processes as CPU or memory use changes.

  • ps: useful for a one-time process listing or a command output you can inspect or save.
  • top: useful when you need to observe changing resource use interactively.

Debian notes that the procps package provides basic process utilities including ps, top, kill, and watch. See the Debian Reference Manual, section 9.4, and Red Hat Enterprise Linux 9: Monitoring and managing system status and performance.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Elebase USB to USB C Adapter for iPhone 18 Pro Max,USBC Car Charger Adapter
  • Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
  • Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
  • Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
  • Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
  • 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.

2. Find resource pressure with vmstat, sar, and iostat

These utilities cover related but distinct views. vmstat reports current system activity across processes, memory, paging, block I/O, interrupts, and CPU. sar is for activity that has been collected over time, which helps answer whether a symptom is isolated or part of a recurring pattern. iostat focuses on loading across I/O devices.

  • Use vmstat when you need a broad view of current system state.
  • Use sar when you need recorded activity rather than only a live snapshot; its usefulness depends on activity collection being configured and available.
  • Use iostat when the question is specifically about device I/O load.

Red Hat documents these utilities in its RHEL 9 performance guide. Debian lists sar, iostat, and mpstat as part of sysstat in the Debian Reference Manual. Availability and collection defaults depend on the system.

3. Diagnose logs and boot time with journalctl and systemd-analyze

Logs and startup timing answer different questions. On systems using systemd, journalctl -b displays journal entries from the current boot, which is a practical starting point when a failure appeared after a restart. systemd-analyze provides timing and dependency views, including blame and critical-chain analysis, to help identify services associated with startup duration.

Rank #2
Anker USB-C Hub, 5-in-1 USB Hub for Laptops, 4K HDMI Multiport Adapter
  • 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
  • 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
  • Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
  • 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
  • What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.

Debian’s monitoring portal documents these commands and their uses in its monitoring guide. These systemd commands are relevant only where systemd and its journal are in use.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

4. Check sockets with ss and inspect traffic with tcpdump

ss prints socket statistics and helps inspect socket metadata, such as which network endpoints are present. Red Hat documents it as a socket tool that can be used instead of netstat. When the question is about what is actually passing over an interface, tcpdump captures packet-level communications. A socket listing and a packet capture are not interchangeable: one describes connections and socket state, while the other observes traffic.

Debian’s monitoring portal also lists iftop for observing network flows, a higher-level view than packet contents. Use packet capture deliberately, especially on shared or production networks. See the Red Hat RHEL 9 guide for ss and the Debian monitoring guide for tcpdump and iftop.

Rank #3
Sale
Anker USB C Hub, 7in1 Multi-Port USB Adapter, 4K@60Hz USBC to HDMI Splitter
  • Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
  • Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
  • Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
  • Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
  • What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.

5. See storage layout and usage with df, du, and lsblk

Storage troubleshooting usually needs two kinds of visibility: which filesystems or devices exist, and where space is being consumed. df and du are commonly used for filesystem capacity and directory usage, while lsblk presents block devices and their relationships. Check the manuals installed for your distribution before relying on exact options or output fields; those details are not uniform across all Linux systems.

These tools help distinguish a full filesystem from a device-layout issue, but they do not by themselves establish why a workload is slow. For device I/O activity, use iostat as described above.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

6. Identify processes holding files or sockets with lsof and fuser

When a file cannot be changed or a port appears occupied, finding the process that holds the resource narrows the investigation. Debian’s Reference Manual describes lsof as a way to list files opened by a process and documents fuser for identifying processes using a file or socket. These are ownership checks; they do not replace inspecting the process or understanding why it has the resource open.

Rank #4
Sale
UGREEN USB to USB C Adapter Combo 4-Pack, 10Gbps USB C Converter Space Gray
  • Dual Converters, Infinite Potential:Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
  • Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
  • Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
  • Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
  • Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft

Consult the Debian Reference Manual for these utilities. Installation and exact usage can vary by distribution.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

7. Trace a failing program with strace

When a process-level overview is not enough, strace traces system calls and signals. It can help investigate what a program asks the operating system to do when it fails, hangs, or behaves unexpectedly. Unlike routine overview tools such as ps and top, tracing is a focused diagnostic step: use it on the process and time window relevant to the problem.

The Debian Reference Manual describes strace in its monitoring and process-control section. Tracing can produce substantial output, so narrow the target and duration rather than treating it as a continuous monitoring method.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Best Value
Anker USB C Hub, 5-in-1 USBC to HDMI Splitter with 4K Display
  • 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
  • Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
  • Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
  • HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
  • What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.

8. Use your distribution’s package manager

Installing, updating, and removing software is a core administration task, but there is no single package-manager command that applies across Linux distributions. Use the package manager and official guidance for the distribution you administer; do not copy installation commands from a different distribution without checking their applicability. Debian’s system-administration portal treats package management as a core topic, but package-manager choice and command syntax are distribution-specific. See the Debian system-administration portal.

9. Synchronize files with rsync and plan for recovery

rsync synchronizes files and can be used as part of a backup workflow. Debian’s security tools page notes that it can preserve permissions, ownership, timestamps, and symbolic links. That makes it useful for copying files while retaining important metadata, but a synchronization utility alone is not a complete backup strategy. A reliable plan also needs independent copies and recovery checks so that a mistaken deletion or unusable copy does not defeat the purpose of the backup.

See Debian’s security tools and backup documentation for its description of rsync.

How to choose the right tool for the question

Question Start with Why
What processes are running right now? ps It provides a process snapshot.
Which process is changing CPU or memory use? top It provides an interactive, changing view.
Is system activity currently abnormal, or has it been recurring? vmstat for current state; sar for collected activity They serve live aggregate and historical questions, respectively.
Is device I/O load the concern? iostat It focuses on I/O-device loading.
What is in the current boot’s logs, or what delayed startup? journalctl -b or systemd-analyze One reads current-boot journal entries; the other analyzes startup timing and dependencies on systemd systems.
Which sockets exist, or what packets are crossing an interface? ss for sockets; tcpdump for packet capture They expose different layers of network activity.
Which process has a file or socket open? lsof or fuser They help identify resource users.
What operating-system calls is a program making? strace It provides focused system-call and signal tracing.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.