``` osquery> SELECT * FROM process_open_sockets...
# general
s
Copy code
osquery> SELECT * FROM process_open_sockets;
+-----+----+-----------+--------+----------+--------------------------+----------------+------------+-------------+---------------------------------+
| pid | fd | socket    | family | protocol | local_address            | remote_address | local_port | remote_port | path                            |
+-----+----+-----------+--------+----------+--------------------------+----------------+------------+-------------+---------------------------------+
| -1  | -1 | 808058584 | 2      | 6        | 0.0.0.0                  | 0.0.0.0        | 22         | 0           |                                 |