Command
n listen
List listening ports with process names
Short forms:
l · lis · listening · slUsage — n listen
═══════════════════════════════════════════════════════════════════════════════
Netscrew ("n") — listen (l, lis, listening) — List listening sockets with process names
═══════════════════════════════════════════════════════════════════════════════
USAGE:
n l . all listening sockets on this machine
n l . tcp | . udp filter by protocol
n l . <port|range> . 53 · . 8000 9000
Target: . = this machine · <host> = remote
Deeper: n l -h = the concept/theory behind this command
The concept behind it — n listen -h
═══════════════════════════════════════════════════════════════════════════════
NETSCREW GUIDE: Listening Sockets & Port Auditing ("n l")
═══════════════════════════════════════════════════════════════════════════════
OVERVIEW:
n l" audits all TCP and UDP sockets currently waiting for inbound connections
(LISTEN for TCP, UNCONN for UDP).
BIND ADDRESS MEANINGS:
• 0.0.0.0 / [::] : Listening on ALL network interfaces (accessible from LAN & WAN).
• 127.0.0.1 / ::1 : Bound exclusively to loopback (local machine only, secure).
• 192.168.x.x : Bound only to a specific LAN network adapter.
USAGE EXAMPLES:
• n l . List all listening sockets with PID, Process, and Container
• n l . tcp Filter by TCP protocol only
• n l . udp Filter by UDP protocol only
• n l . 80 Check if port 80 is listening
• n l . 0 1024 Audit privileged system ports (ports 0 through 1024)
• n l . 8000 9000 Audit high dev ports (ports 8000 through 9000)