Netstat
NetstatModule aims to retrieve infos like the netstat command does It must be run as root to retrieve PID/process information.
Details
Without these data, it is rather hard to build reliable links between open ports and programs.
This module is then able to create flows between applications according to the tuple (src, srcport, dst, dstport).
On windows, the privileges are not checked (because we need to parse the SID or another thing maybe). So the module is always run.