Which file on a Linux system maps service names such as ssh, smtp and http to their port numbers and transport protocols?
LPIC-1 Exam 102-500, objective 109. Networking fundamentals easy
Machine-checked — no person has signed for it. This question was read against the source cited below by an automated pass, which found no contradiction. That is a weaker claim than it sounds: the same kind of process wrote the question, so it can confirm its own mistake.
Treat it as a good draft rather than as settled fact, and read the source below before you rely on it. It is not used in mock exams here — only questions a person has signed for are.
How these questions are written — where each question comes from, what the verification ledger records, and what happens when one is found wrong.
The options
Not correct /etc/protocols
Wrong. /etc/protocols maps IP protocol names to protocol numbers (icmp 1, tcp 6, udp 17). It has nothing to do with port numbers.
Not correct /etc/nsswitch.conf
Wrong. nsswitch.conf decides which databases are consulted for lookups (including the `services` database) and in what order, but it stores no name-to-port mappings itself.
Correct /etc/services
Correct. /etc/services holds lines such as `ssh 22/tcp` and `domain 53/udp`, which let tools print or accept service names instead of numbers.
Not correct /etc/hosts
Wrong. /etc/hosts is the static mapping of IP addresses to hostnames and aliases, consulted before or after DNS depending on nsswitch.conf.
Why
/etc/services is why `ss -t` prints `ssh` instead of `22` and why `nc host smtp` works. Suppress the lookup with the numeric flag most tools offer (`ss -n`, `netstat -n`). You can query the database portably with `getent services ssh`.
Where this comes from
- Cited
- LPI exam objective 109.1
- What it says
- Know the purpose of /etc/services.
Practise this
Reading one question is not practice. The trainer will draw a short set from objective 109 and space the ones you get wrong.
More questions on this objective
- A subnet is defined as 192.168.10.0/26. How many addresses in it can actually be assigned to hosts? machine-checked
- A host is configured with the address 172.20.35.77/20. What is the network address of its subnet? machine-checked
- In IPv6, which address is the loopback address, equivalent in role to 127.0.0.1 in IPv4? machine-checked
- Which is the correct fully compressed form of the IPv6 address 2001:0db8:0000:0000:0000:ff00:0042:8329? machine-checked
- Which pairing of a service with its default port number is correct? machine-checked
- DNS normally uses UDP port 53. In which situation does a DNS client or server fall back to TCP on port 53? machine-checked