use ss instead of netstat

ss (from iproute tools) uses netlink and therefore is faster on higly
loaded servers with tcp connections