Everything on Linux is a file. lsof lists open files and the processes that own them. ss replaces netstat with faster, more detailed socket introspection.