Ports and processes
Compare simulated listener and process views.
Understand the pattern
Open ports are easier to explain when tied to a process.
ss- Inspect simulated listening sockets and connection information.
A listening socket is not proof of correct application responses or external reachability.
ps- Inspect a bounded snapshot of simulated processes.
A process being present does not prove that its service can handle requests.
grep- Select input lines that match a pattern; -i ignores case, -n adds line numbers, and -v inverts selection.
No matches is exit status 1, which is different from a malformed invocation.
Worked example and expected result
$ ss -tulpnNetid State Local Address:Port Process udp UNCONN 0.0.0.0:68 lab-dhcp tcp LISTEN 0.0.0.0:22 sshd tcp LISTEN 0.0.0.0:80 nginx tcp LISTEN 0.0.0.0:443 nginx
Exit status: 0. The command completed successfully in the training fixture.
$ psPID USER COMMAND 1 root systemd --simulated 42 www-data nginx: static process 77 root sshd: listener 108 learner clairos-learn-terminal 126 root cron
Exit status: 0. The command completed successfully in the training fixture.
$ grep listen /etc/nginx/sites-available/learn.conflisten 443 ssl;
Exit status: 0. The command completed successfully in the training fixture.
Explain it
Apply it elsewhere
Keep the momentum.
Complete the lab, then explain and apply the pattern.
Next: Resource baselineTry an incident drillAnonymous lesson and mastery progress lasts for this session. Sign in to keep synced lesson XP between sessions; mastery stays device-local. No speed bonus, lost lives, or hint penalties.