From owner-freebsd-net@FreeBSD.ORG Tue May 11 18:14:27 2010 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 3223C106564A for ; Tue, 11 May 2010 18:14:27 +0000 (UTC) (envelope-from mike@sentex.net) Received: from lava.sentex.ca (pyroxene.sentex.ca [199.212.134.18]) by mx1.freebsd.org (Postfix) with ESMTP id EBDA18FC14 for ; Tue, 11 May 2010 18:14:26 +0000 (UTC) Received: from mdt-xp.sentex.net (simeon.sentex.ca [192.168.43.27]) by lava.sentex.ca (8.14.3/8.14.3) with ESMTP id o4BIEPfN071211 for ; Tue, 11 May 2010 14:14:25 -0400 (EDT) (envelope-from mike@sentex.net) Message-Id: <201005111814.o4BIEPfN071211@lava.sentex.ca> X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9 Date: Tue, 11 May 2010 14:14:19 -0400 To: freebsd-net@freebsd.org From: Mike Tancsa Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Subject: sockstat / netstat output 8.x vs 7.x X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 May 2010 18:14:27 -0000 [trying on freebsd-net since no response on stable] I noticed that apache on RELENG_8 and RELENG_7 shows up with output I cant seem to understand from sockstat -l and netstat -naW On RELENG_7, sockstat -l makes sense to me .... www httpd 83005 4 tcp4 *:443 *:* www httpd 82217 3 tcp4 *:80 *:* www httpd 82217 4 tcp4 *:443 *:* www httpd 38942 3 tcp4 *:80 *:* www httpd 38942 4 tcp4 *:443 *:* root httpd 1169 3 tcp4 *:80 *:* root httpd 1169 4 tcp4 *:443 *:* various processes listening on all bound IP addresses on ports 80 and 443. On RELENG_8 however, it shows up with an extra entry (at the end) www httpd 29005 4 tcp4 *:* *:* www httpd 29004 3 tcp4 6 *:80 *:* www httpd 29004 4 tcp4 *:* *:* www httpd 29003 3 tcp4 6 *:80 *:* www httpd 29003 4 tcp4 *:* *:* www httpd 66731 3 tcp4 6 *:80 *:* www httpd 66731 4 tcp4 *:* *:* root httpd 72197 3 tcp4 6 *:80 *:* root httpd 72197 4 tcp4 *:* *:* *:80 makes sense to me... process is listening on all IPs for port 80. What does *:* mean then ? Netstat gives a slightly different version of it Active Internet connections (including servers) Proto Recv-Q Send-Q Local Address Foreign Address (state) tcp4 0 0 *.1984 *.* LISTEN tcp4 0 0 *.* *.* CLOSED tcp46 0 0 *.80 *.* LISTEN state closed ? ---Mike -------------------------------------------------------------------- Mike Tancsa, tel +1 519 651 3400 Sentex Communications, mike@sentex.net Providing Internet since 1994 www.sentex.net Cambridge, Ontario Canada www.sentex.net/mike