Networking & Firewall (Ss/Netstat/Iptables/Nftables/Curl)

Stop squinting at massive netstat output for one connection

🧩 The Challenge

You’ve got a server with thousands of established connections and you just need to find the one weirdo socket stuck in TIME_WAIT. Scrolling through a wall of text for ten minutes while your boss is breathing down your neck is pure misery.

💡 The Fix

Use the socket statistics utility to do the heavy lifting for you with built-in filtering. It’s way faster and doesn’t make your terminal crawl like the old-school tools.

ss -t -n state time-wait

⚙️ Why It Works

Passing the state flag tells the kernel to filter the connection list before it even hits your screen. Since you’re asking the kernel to perform the sort, you don’t end up processing a buffer full of junk you don’t care about.

🚀 Pro-Tip: Alias it to “ss-wait” so you can pull it up instantly when the app team screams about connection exhaustion.

Linux Tips & Tricks | © ngelinux.com | 9/15/2026