When working with network applications or troubleshooting connectivity issues, checking open ports becomes crucial. Linux provides several powerful tools to examine port status and system limits.

The most common method uses the ss command (replacing older netstat):

# List all listening TCP ports
ss -tulnp

# Breakdown:
# -t : TCP ports
# -u : UDP ports
# -l : listening ports only
# -n : show numeric values
# -p : show process information

For a quick count of open ports:

ss -tuln | grep -v '^State' | wc -l

Using netstat (legacy systems):

netstat -tulnp

Using lsof:

lsof -i -P -n | grep LISTEN

Linux has both ephemeral and privileged port ranges:

# View current port range configuration
cat /proc/sys/net/ipv4/ip_local_port_range
# Typical output: 32768    60999

To check maximum allowable ports:

sysctl net.ipv4.ip_local_port_range

When troubleshooting connection issues, you might need to check port usage statistics:

# Show current TCP connection states
ss -s

# Sample output:
# Total: 189
# TCP:   10 (estab 2, closed 0, orphaned 0, timewait 0)

For high-traffic servers, you might need to adjust the ephemeral port range:

# Temporary change (until reboot)
sudo sysctl -w net.ipv4.ip_local_port_range="1024 65000"

# Permanent change (add to /etc/sysctl.conf)
echo "net.ipv4.ip_local_port_range = 1024 65000" | sudo tee -a /etc/sysctl.conf
sudo sysctl -p

For continuous monitoring, consider these approaches:

# Watch port connections in real-time
watch -n 5 'ss -s'

# Count established connections per port
ss -tn | awk '{print $4}' | awk -F: '{print $NF}' | sort | uniq -c | sort -rn

Remember that open ports shown in these commands might still be blocked by firewall rules. Always check:

sudo iptables -L -n -v
sudo ufw status  # If using UFW

---

When dealing with network applications or servers, it's crucial to monitor your open ports and understand your system's port limitations. Linux provides several powerful tools for this purpose.

The most common method is using the ss command (replacing the older netstat):

ss -tuln

This shows all listening (-l) TCP (-t) and UDP (-u) ports in numeric format (-n). To count them:

ss -tuln | grep -v '^State' | wc -l

For more detailed information, consider these alternatives:

# Using netstat (if installed)
netstat -tuln

# Using lsof
lsof -i -P -n | grep LISTEN

# Using nmap for external scanning
nmap -sT -O localhost

Linux has both ephemeral and permanent port ranges:

# Check ephemeral port range
cat /proc/sys/net/ipv4/ip_local_port_range

# Check maximum number of open files (which includes ports)
ulimit -n

# Check system-wide file handle limit
cat /proc/sys/fs/file-max

To increase limits temporarily:

# Increase ephemeral port range
sudo sysctl -w net.ipv4.ip_local_port_range="1024 65535"

# Increase user open file limit
ulimit -n 65536

For permanent changes, edit /etc/sysctl.conf and /etc/security/limits.conf.

Signs you're running out of ports:

• Frequent "Address already in use" errors
• Applications failing to bind to ports
• High number of connections in TIME_WAIT state

Check TIME_WAIT connections:

ss -tan | grep TIME-WAIT | wc -l

Consider these strategies:

• Enable port reuse: sudo sysctl -w net.ipv4.tcp_tw_reuse=1
• Reduce TIME_WAIT timeout: sudo sysctl -w net.ipv4.tcp_fin_timeout=30
• Implement connection pooling in applications