Randy, That answers my question inside and out, thank you very much.
The only reason I asked is I got my hands on a free "written off" XTS 3000 to play with at work. We have 5000s with a service contract that I would never use off our system.
I soon discovered that entering a correct network ID enabled me to listen on other systems. I was monitoring a trunked system for a couple days like I asked about. I then became curious if a "generic" ID would allow more access to the talkgroups I was hearing. Before I even bothered with that I decided to plug that "generic" ID in on one of our channels and simply key up a radio too see if we were "vulernable". Long story short, as I was programing the radio a dozen times I got sloppy/impatient and either bumped the cable or closed CPS when it was "locked up". I corrupted the codeplug. In my weak attempts to fix this issue using MTSX Lab, I made things wrose, overwrote everything to the point the radio barley does much except hold papers on the desk. I somehow managed to dump an entirely wrong codeplug in for a UHF 3000, moreso it changed the Flashcode and system package (the only values I can read from the radio). I cant even read it without unpacking without a "No ACK/NAK" error. That's my story, I think its toast.
In terms of scanners there doesn't seem to be much choice between 2 portables. Seems like I have one option the Bearcat BCD396XT. Hard to justify when I had something for free that did a wonderful job even with its limited capability. The area isn't too overloaded with conversations, I got almost everything.