Networking & Firewall (Ss/Netstat/Iptables/Nftables/Curl)

Stop getting blinded by local connections when debugging network issues

🧩 The Challenge

You are trying to find why a backend service is flapping, but the logs are buried in a mountain of loopback noise from health checks and local metrics exporters. It’s like trying to find a needle in a haystack where the haystack is also trying to kill you.

💡 The Fix

Use the exclude flags in ss to instantly hide everything on the local interface, leaving only the external traffic you actually care about.

ss -tnp 'exclude 127.0.0.1:*' 'exclude [::1]:*'

⚙️ Why It Works

Passing the exclude filter tells the kernel to skip the loopback interface entirely during the socket scan, saving you the headache of scrolling past thousands of local API calls.

🚀 Pro-Tip: Alias this to ssx so you don’t have to type the filter string every time you’re panicked at 3 AM.

Linux Tips & Tricks | © ngelinux.com | 10/12/2026