Networking & Firewall (Ss/Netstat/Iptables/Nftables/Curl)

Stop your socket stats from lying to you in high traffic

🧩 The Challenge

Dealing with a service that hits connection limits is a nightmare when the default output of your tools hides half the active state. I’ve spent way too many nights squinting at truncated output while trying to find why a load balancer is dropping packets.

💡 The Fix

Use the socket statistics tool with specific flags to force it to show memory usage and actual connection states instead of just dumping a wall of text. It cuts through the noise so you can see if your buffers are overflowing.

ss -ntemoa | grep -v 'ESTAB'

⚙️ Why It Works

Adding the -o flag displays timer information like retransmits, which is the smoking gun you need when things aren’t actually established. Filtering out established connections lets you focus on the ones that are stuck in weird states like SYN-RECV or FIN-WAIT.

🚀 Pro-Tip: Pipe it into column -t if you want to actually read the output without your eyes crossing.

Linux Tips & Tricks | © ngelinux.com | 8/14/2026