What a half‑open TCP connection in “ss” really means (and how to close it)