Networking & Firewall (Ss/Netstat/Iptables/Nftables/Curl)

Stop letting your kernel drop packets without telling you why

🧩 The Challenge

You’ve checked the firewall, the application, and the cables, yet traffic is vanishing into the void. It is infuriating to watch a connection timeout when your rule set looks perfectly fine.

💡 The Fix

Use the netstat statistics output to see if the kernel is actually counting dropped packets at the protocol level. It saves you from hunting for ghost problems that don’t exist in your config.

netstat -s | grep -i drop

⚙️ Why It Works

This command digs into the kernel’s internal network stack counters rather than just showing you the current socket state. If that number keeps climbing while you’re trying to curl your endpoint, you know exactly where the bottleneck is.

🚀 Pro-Tip: Pipe it into watch to see those counters jump in real-time while you run your tests.

Linux Tips & Tricks | © ngelinux.com | 8/17/2026