Presumably it would show up in a netstat, but only while the packet was being written to the network stack? open(SOCK) // now visible write(SOCK, conten

Presumably it would show up in a netstat, but only while the packet was being written to the network stack? open(SOCK) // now visible write(SOCK, contents) close(SOCK) // no longer visible