netstat Rewritten In Python

Welcome to netmatt — a simple netstat -p |grep LISTEN replacement in Python

What Are The Files?

From oldest/worst to newest/best:

• net-listeners-callout.py
  • just reformats netstat output (requires root)
• net-listeners-proc.py
  • reads network state and matching commands from /proc/[pid]/fd/* directly (requires root)
• net-listeners-proc-custom.py
  • matches network state to commands by reading /proc/pid_inode_map created by kernel module in directory pid_inode_map
• net-listeners-proc-unified.py
  • uses /proc/pid_inode_map if exists; otherwise falls back to iterating /proc/[pid]/fd/*
  • it's the unification of net-listeners-proc.py and net-listeners-proc-custom.py
• pid_inode_map
  • Linux kernel module to create proc file /proc/pid_inode_map so non-root users can get a listing of which processes own which IP:Port combinations

What's the deetz?

Full writeup is over at matt.sh/netmatt