Both this graph and Gregg's diagram misrepresent what ss(1) can do, it is essentially a replacement for netstat.