From owner-freebsd-net@FreeBSD.ORG Tue May 11 20:24:11 2010 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 67A101065675 for ; Tue, 11 May 2010 20:24:11 +0000 (UTC) (envelope-from julianelischer@gmail.com) Received: from mail-ew0-f224.google.com (mail-ew0-f224.google.com [209.85.219.224]) by mx1.freebsd.org (Postfix) with ESMTP id E5AE68FC24 for ; Tue, 11 May 2010 20:24:10 +0000 (UTC) Received: by ewy24 with SMTP id 24so1504615ewy.13 for ; Tue, 11 May 2010 13:24:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:sender:message-id:date:from :user-agent:mime-version:to:cc:subject:references:in-reply-to :content-type:content-transfer-encoding; bh=eTd13AXoy2e1s645UrcGSbgElcluFF8vKl9V/ahIMyY=; b=CYdvSbvde97nOH10PmaX9qFl4ejWDyP10BIl7tz83xN5lM3KeklKhYNpWYishhIYmE zCPEyVopiKfTVA+tHj5Ba05WGGQpz4Sdv6tpdN5Dqr2949dWbS0vAb+aKkzOiqQLeX7q sNPFRIIqmqMNH7ano93TTGNZxBJ/7W1t/ibgM= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=sender:message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; b=ZiFrEX6qeC9NmNqSTVeftslaVoAD9GlG9dcDsg3jaBsa4fXO4a7lMaUEyBJG0FMF4C WN73xdsKgAvwyS6jkeluurtWehGKrCBnD4lmiuT+cYe+7/QXdw4L/8gSZP7zW/V7qRrr DQBFFjYtiUU5W5lJaCize1XK7WUNi4MfgCdo0= Received: by 10.213.43.210 with SMTP id x18mr2717015ebe.64.1273609449555; Tue, 11 May 2010 13:24:09 -0700 (PDT) Received: from julian-mac.elischer.org (h-67-100-89-137.snfccasy.static.covad.net [67.100.89.137]) by mx.google.com with ESMTPS id 14sm3367465ewy.6.2010.05.11.13.24.05 (version=TLSv1/SSLv3 cipher=RC4-MD5); Tue, 11 May 2010 13:24:07 -0700 (PDT) Sender: Julian Elischer Message-ID: <4BE9BCE2.7070303@elischer.org> Date: Tue, 11 May 2010 13:24:02 -0700 From: Julian Elischer User-Agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.4; en-US; rv:1.9.1.9) Gecko/20100317 Thunderbird/3.0.4 MIME-Version: 1.0 To: Wes Peters References: <201005111814.o4BIEPfN071211@lava.sentex.ca> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-net@freebsd.org, Mike Tancsa Subject: Re: sockstat / netstat output 8.x vs 7.x X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 May 2010 20:24:11 -0000 On 5/11/10 12:20 PM, Wes Peters wrote: > The output header is instructive: > > USER COMMAND PID FD PROTO LOCAL ADDRESS FOREIGN ADDRESS > www httpd 18423 3 tcp4 6 *:80 *:* > www httpd 18423 4 tcp4 *:* *:* > www httpd 25184 3 tcp4 6 *:80 *:* > www httpd 25184 4 tcp4 *:* *:* > > Same as 7, it's the foreign address. This is normally only useful for > connected sockets. > > On Tue, May 11, 2010 at 11:14 AM, Mike Tancsa wrote: >> [trying on freebsd-net since no response on stable] >> >> I noticed that apache on RELENG_8 and RELENG_7 shows up with output I cant >> seem to understand from sockstat -l and netstat -naW >> >> On RELENG_7, sockstat -l makes sense to me >> .... >> www httpd 83005 4 tcp4 *:443 *:* >> www httpd 82217 3 tcp4 *:80 *:* >> www httpd 82217 4 tcp4 *:443 *:* >> www httpd 38942 3 tcp4 *:80 *:* >> www httpd 38942 4 tcp4 *:443 *:* >> root httpd 1169 3 tcp4 *:80 *:* >> root httpd 1169 4 tcp4 *:443 *:* >> >> >> various processes listening on all bound IP addresses on ports 80 and 443. >> >> On RELENG_8 however, it shows up with an extra entry (at the end) >> >> www httpd 29005 4 tcp4 *:* *:* >> www httpd 29004 3 tcp4 6 *:80 *:* >> www httpd 29004 4 tcp4 *:* *:* >> www httpd 29003 3 tcp4 6 *:80 *:* >> www httpd 29003 4 tcp4 *:* *:* >> www httpd 66731 3 tcp4 6 *:80 *:* >> www httpd 66731 4 tcp4 *:* *:* >> root httpd 72197 3 tcp4 6 *:80 *:* >> root httpd 72197 4 tcp4 *:* *:* >> >> >> *:80 makes sense to me... process is listening on all IPs for port 80. What >> does *:* mean then ? I believe it has created a socket but not used it for anything it may be the 6 socket... otherwise I don't see what a "tcp4 6" is meant to be. >> >> Netstat gives a slightly different version of it >> >> Active Internet connections (including servers) >> Proto Recv-Q Send-Q Local Address Foreign Address (state) >> tcp4 0 0 *.1984 *.* LISTEN >> tcp4 0 0 *.* *.* CLOSED >> tcp46 0 0 *.80 *.* LISTEN >> >> state closed ? >> >> ---Mike >> >> >> >> -------------------------------------------------------------------- >> Mike Tancsa, tel +1 519 651 3400 >> Sentex Communications, mike@sentex.net >> Providing Internet since 1994 www.sentex.net >> Cambridge, Ontario Canada www.sentex.net/mike >> >> _______________________________________________ >> freebsd-net@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-net >> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" >> > > >