Networking & Firewall (Ss/Netstat/Iptables/Nftables/Curl)

Stop ss from hiding your socket secrets when debugging ghost connections

🧩 The Challenge

Dealing with a service that refuses to start because a port is allegedly bound by something else is infuriating, especially when netstat just shows a vague process ID that doesn’t actually exist. I’ve spent way too many nights hunting down phantom processes that turned out to be hanging kernel threads or orphaned child processes.

💡 The Fix

Use the ss command with specific flags to force it to show internal process information and user identifiers that standard tools often gloss over. It cuts through the fog by revealing exactly which owner is holding the descriptor hostage.

ss -tulpn4 | grep :8080

⚙️ Why It Works

Adding these specific flags instructs the kernel to dump the process ID and numeric addresses without trying to resolve every hostname, which keeps the output clean and fast. You’re effectively asking the socket state tool to list every tcp and udp listener while showing the process name alongside the port.

🚀 Pro-Tip: Always tack on the -p flag if you’re not sure which service is hogging the port, otherwise you’re just looking at symptoms instead of the culprit.

Linux Tips & Tricks | © ngelinux.com | 7/28/2026