Skip to content
Clairos Learn

Networking · Lesson 13 of 26 · 8 minutes

Listener baseline

Capture and inspect listener baseline output.

Mastery 0/3Run itExplain itApply it
learner@clairosSimulated Linux lab
learner@clairos:~ $
↑ history · Tab complete · Ctrl+C cancel · Esc, Tab to leaveExit 0

Understand the pattern

Junior operators build confidence by gathering evidence before changing systems.

ss
Inspect simulated listening sockets and connection information.

A listening socket is not proof of correct application responses or external reachability.

tee
Copy a stream both to a file and standard output; -a appends.

tee can overwrite a file even though the output is also visible on screen.

cat
Read one or more files to standard output without editing their contents.

Reading a source file should precede changing it; avoid printing real secrets.

wc
Count input. -l counts newline characters, -w counts whitespace-delimited words, and -c counts bytes.

Text without a final newline may have fewer counted lines than visible rows.

Worked example and expected result
$ ss -tulpn | tee lab/listeners.txt
Netid State  Local Address:Port  Process
udp   UNCONN 0.0.0.0:68          lab-dhcp
tcp   LISTEN 0.0.0.0:22          sshd
tcp   LISTEN 0.0.0.0:80          nginx
tcp   LISTEN 0.0.0.0:443         nginx

Exit status: 0. The command completed successfully in the training fixture.

$ cat lab/listeners.txt
Netid State  Local Address:Port  Process
udp   UNCONN 0.0.0.0:68          lab-dhcp
tcp   LISTEN 0.0.0.0:22          sshd
tcp   LISTEN 0.0.0.0:80          nginx
tcp   LISTEN 0.0.0.0:443         nginx

Exit status: 0. The command completed successfully in the training fixture.

$ wc -l lab/listeners.txt
5 lab/listeners.txt

Exit status: 0. The command completed successfully in the training fixture.

Try a variation

Repeat this workflow in the sandbox with a different scratch filename. Keep the system fixtures unchanged and compare the observed output with your expectation before moving on.

Explain it

In “Listener baseline”, which interpretation is safe?

Apply it elsewhere

Before adapting the cat workflow from “Listener baseline” to another server, what should you do?

Keep the momentum.

Complete the lab, then explain and apply the pattern.

Next: SSH key contextTry an incident drill

Anonymous lesson and mastery progress lasts for this session. Sign in to keep synced lesson XP between sessions; mastery stays device-local. No speed bonus, lost lives, or hint penalties.

Keep learning

  1. 01Interface baselineRecord a basic network baseline.Practice
  2. 02SSH key contextConnect key fingerprints to SSH client config.Practice
  3. 03Networking checkpointTie addresses, listeners, firewall, and SSH config together.Practice