i prefer not using the 'n' but rather just -a. names can reveal more faster thad just ips. if a trojan did get installed one of the first apps to get replaced with a bogus one is netstat so its not a perfect indicator and is better at letting you know something is not a trojan.