solisten - Trace listening socket usage: solisten [-h] [--show-netns] [-p PID] [-n NETNS] All IPv4 and IPv6 listen attempts are traced, even if they ultimately fail or the listening program is not willing to accept().

-h, --help show this help message and exit

--show-netns show network namespace

-p PID, --pid PID trace this PID only

-n NETNS, --netns NETNS trace this Network Namespace only

Stream socket listen: # solisten

Stream socket listen for specified PID only # solisten -p 1234

Stream socket listen for the specified network namespace ID only # solisten --netns 4242

Show network ns ID (useful for containers) # solisten --show-netns

This is from bcc. https://github.com/iovisor/bcc

Also look in the bcc distribution for a companion _examples.txt file containing example usage, output, and commentary for this tool.

Linux Unstable - in development.