We use portaudit - http://www.freshports.org/security/portaudit/

I'm sure there's something similar for Linux.