From owner-freebsd-net@freebsd.org  Thu Nov  5 16:54:07 2015
Return-Path: <owner-freebsd-net@freebsd.org>
Delivered-To: freebsd-net@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 89B1AA26B45
 for <freebsd-net@mailman.ysv.freebsd.org>;
 Thu,  5 Nov 2015 16:54:07 +0000 (UTC)
 (envelope-from eugen@grosbein.net)
Received: from hz.grosbein.net (hz.grosbein.net [78.47.246.247])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (Client CN "hz.grosbein.net", Issuer "hz.grosbein.net" (not verified))
 by mx1.freebsd.org (Postfix) with ESMTPS id 1FC7F1A29;
 Thu,  5 Nov 2015 16:54:06 +0000 (UTC)
 (envelope-from eugen@grosbein.net)
Received: from eg.sd.rdtc.ru (root@eg.sd.rdtc.ru [62.231.161.221])
 by hz.grosbein.net (8.14.9/8.14.9) with ESMTP id tA5GrxvI072623
 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT);
 Thu, 5 Nov 2015 17:54:00 +0100 (CET)
 (envelope-from eugen@grosbein.net)
X-Envelope-From: eugen@grosbein.net
X-Envelope-To: woodsb02@gmail.com
Received: from eg.sd.rdtc.ru (eugen@localhost [127.0.0.1])
 by eg.sd.rdtc.ru (8.15.2/8.15.2) with ESMTP id tA5Grr4c081085;
 Thu, 5 Nov 2015 23:53:53 +0700 (KRAT)
 (envelope-from eugen@grosbein.net)
Subject: Re: who uses this port?
To: Ben Woods <woodsb02@gmail.com>, Andriy Gapon <avg@freebsd.org>
References: <563A5F39.7010906@FreeBSD.org>
 <CAOc73CD82vkCHzT1S+e1VV1b1RN14K3WeqYuF1PA=fStc6iU3g@mail.gmail.com>
Cc: "freebsd-net@freebsd.org" <freebsd-net@freebsd.org>
From: Eugene Grosbein <eugen@grosbein.net>
Message-ID: <563B89A1.7090109@grosbein.net>
Date: Thu, 5 Nov 2015 23:53:53 +0700
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:38.0) Gecko/20100101
 Thunderbird/38.2.0
MIME-Version: 1.0
In-Reply-To: <CAOc73CD82vkCHzT1S+e1VV1b1RN14K3WeqYuF1PA=fStc6iU3g@mail.gmail.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Spam-Status: No, score=0.3 required=5.0 tests=BAYES_00,LOCAL_FROM,
 T_DATE_IN_FUTURE_96_Q autolearn=no version=3.3.2
X-Spam-Report: * 0.0 T_DATE_IN_FUTURE_96_Q Date: is 4 days to 4 months after
 Received: *      date
 * -2.3 BAYES_00 BODY: Bayes spam probability is 0 to 1%
 *      [score: 0.0000] *  2.6 LOCAL_FROM From my domains
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on hz.grosbein.net
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net/>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Nov 2015 16:54:07 -0000

On 05.11.2015 14:20, Ben Woods wrote:
> On Wednesday, 4 November 2015, Andriy Gapon <avg@freebsd.org> wrote:
> 
>> $ sockstat -l | fgrep 631
>> ?        ?          ?     ?  tcp4   127.0.0.1:631         *:*
>>
>> $ nc -l 127.0.0.1 631
>> nc: Address already in use
>>
> 
> 
> I'm more curious as to why sockstat gives you question marks instead of the
> proper process details. Any ideas?

That's for sockets opened by kernel level such as NFS/RPC.