The following is an example of connections. As inbound TCP connections are 
 established their details are printed out. This includes the UID, PID and
 CMD of the server process that is listening on that port,
 
    # connections
      UID   PID CMD          TYPE  PORT IP_SOURCE
        0   242 inetd         tcp    79 192.168.1.1
        0   359 sshd          tcp    22 192.168.1.1
      100  1532 Xorg          tcp  6000 192.168.1.1
    ^C
 
 
 In another window snoop was running for comparison,
 
    # snoop 'tcp[13:1] = 0x02'
    Using device /dev/rtls0 (promiscuous mode)
            mars -> jupiter      FINGER C port=56760
            mars -> jupiter      TCP D=22 S=56761 Syn Seq=3264782212 Len=0 ...
            mars -> jupiter      XWIN C port=56763
 
 snoop can already tell me that these connections are happening - but does not
 print out details of the server that accepted the connection.