that's what's actually talking, as opposed to what might be?

Ah yes, good point. You also probably want to check out

process_open_sockets