Summarise the host's sockets, then list only the listeners

Answer

ss -s ss -l

`-s` prints counts by transport and state and no per-socket lines at all. `-l` restricts the listing to listening sockets — the passive ones. A bare `ss` shows the opposite: non-listening sockets only.

ss(8), iproute2