socket-state-triage
A dependency-free utility for reviewing Linux socket state, wildcard listeners and broad privileged-port bindings.
- Parser
- C implementation with explicit wildcard-address handling.
- Review
- Broad listeners and privileged ports, checked with make test.
Makes host-level exposure questions concrete and testable.
Focus
The tool reviews Linux socket output and highlights cases worth examining, including wildcard binds such as *:PORT and privileged ports exposed on broad listener addresses.
Why the representation matters
An address format should not disappear from the summary merely because it differs from an ordinary IPv4 string. Wildcard bindings are counted and included in the broad-bind checks.
Evidence and boundaries
The repository contains source, examples and make test. It is a review helper, not a firewall or proof of exposure from every network. Host configuration and routing still determine reachability.