What is the most reliable evidence of a service's current network exposure on a running Linux host?
A note written before the service started
The programming language used by the service
The service's process name
The service's live socket binding