From owner-freebsd-security Wed Oct 3 14: 8: 9 2001 Delivered-To: freebsd-security@freebsd.org Received: from sln.esc.edu (sln.esc.edu [138.116.200.3]) by hub.freebsd.org (Postfix) with ESMTP id 1C58337B407 for ; Wed, 3 Oct 2001 14:08:04 -0700 (PDT) To: freebsd-security@freebsd.org Subject: odd sockstat output X-Mailer: Lotus Notes Release 5.0.2c February 2, 2000 Message-ID: From: Bill.Melvin@esc.edu Date: Wed, 3 Oct 2001 17:04:40 -0400 X-MIMETrack: MIME-CD by Trend MailScan on mail.esc.edu/SUNY(Release 5.0.4 |June 8, 2000) at 10/03/2001 05:04:41 PM, MIME-CD complete at 10/03/2001 05:04:41 PM, Serialize by Router on sln.esc.edu/SUNY(Release 5.0.2c |February 2, 2000) at 10/03/2001 05:07:02 PM MIME-Version: 1.0 Content-type: text/plain; charset=us-ascii Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Why would sockstat show me something like this: USER COMMAND PID FD PROTO LOCAL ADDRESS FOREIGN ADDRESS root sshd 4580 5 tcp4 192.168.120.1:22 192.168.120.2:38 root sshd 155 4 tcp4 *:22 *:* root syslogd 129 5 udp4 *:514 *:* root syslogd 129 18 ? ? ? Line with the ?s. Same PID but different FD. I did another sockstat right away but it was gone. /b To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message