You might be able to parse /proc/net/tcp yourself faster, especially for just counting by state.