netscrew.dev/commands/listen
Command

n listen

List listening ports with process names

Short forms:l · lis · listening · sl

Usage — n listen

═══════════════════════════════════════════════════════════════════════════════
  Netscrew ("n") — listen (l, lis, listening) — List listening sockets with process names
═══════════════════════════════════════════════════════════════════════════════

USAGE:
  n l .                                all listening sockets on this machine
  n l . tcp | . udp                    filter by protocol
  n l . <port|range>                   . 53 · . 8000 9000

Target: . = this machine · <host> = remote
Deeper: n l -h = the concept/theory behind this command

The concept behind it — n listen -h

═══════════════════════════════════════════════════════════════════════════════
  NETSCREW GUIDE: Listening Sockets & Port Auditing ("n l")
═══════════════════════════════════════════════════════════════════════════════

OVERVIEW:
  n l" audits all TCP and UDP sockets currently waiting for inbound connections
  (LISTEN for TCP, UNCONN for UDP).

BIND ADDRESS MEANINGS:
  • 0.0.0.0 / [::]      : Listening on ALL network interfaces (accessible from LAN & WAN).
  • 127.0.0.1 / ::1     : Bound exclusively to loopback (local machine only, secure).
  • 192.168.x.x         : Bound only to a specific LAN network adapter.

USAGE EXAMPLES:
  • n l .               List all listening sockets with PID, Process, and Container
  • n l . tcp           Filter by TCP protocol only
  • n l . udp           Filter by UDP protocol only
  • n l . 80            Check if port 80 is listening
  • n l . 0 1024        Audit privileged system ports (ports 0 through 1024)
  • n l . 8000 9000     Audit high dev ports (ports 8000 through 9000)