The kernel of your OS will need to know about a connection, in order for it to occur in the first place, and it is configured to "spit" these information out. So unless some associated core or interface parts of your OS (i.e. the netstat utility binary) are already compromised (modified / replaced) by someone to hide what he wants to be hidden, the reported information should be accurate.
