Networking & Firewall (Ss/Netstat/Iptables/Nftables/Curl)

Stop hunting for zombie socket connections that wont die

🧩 The Challenge

Dealing with connections that stay in FIN_WAIT or CLOSE_WAIT forever is a nightmare when you are trying to restart a service and the port remains stubbornly locked. I have spent way too many nights rebooting machines just to clear up ghost sockets that were technically already dead.

💡 The Fix

Use the ss utility with the proper filtering flags to track down these specific states instead of just grepping through a massive output of active connections. It lets you surgically identify the offending PID so you can kill it properly.

ss -tulpn state fin-wait-1

⚙️ Why It Works

Setting the state filter directly inside the ss query saves you from the messy pipes of legacy tools and shows you the exact process that is refusing to close its handle. It is much cleaner than looking at a screen full of noise.

🚀 Pro-Tip: Pipe it into awk if you need to script a bulk kill for those annoying legacy daemons that keep leaking file descriptors.

Linux Tips & Tricks | © ngelinux.com | 9/2/2026