Date: Mon, 13 Mar 2017 16:24:57 +0100 From: Harry Schmalzbauer <freebsd@omnilan.de> To: Anton Yuzhaninov <citrin+bsd@citrin.ru> Cc: freebsd-questions@freebsd.org Subject: Re: procstat(1) [-f], proto=stream without addresses Message-ID: <58C6B9C9.9070805@omnilan.de> In-Reply-To: <611e5fe5-0a25-2058-96b2-51b1fe3ad7f9@citrin.ru> References: <58BDBAF7.5000907@omnilan.de> <611e5fe5-0a25-2058-96b2-51b1fe3ad7f9@citrin.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
Bezüglich Anton Yuzhaninov's Nachricht vom 07.03.2017 04:00 (localtime): > On 03/06/17 14:39, Harry Schmalzbauer wrote: >> One thing I noticed is that procstst(1) doesn't show any addresses for >> my evil process. >> Excerpt: >> >> USER COMMAND PID FD PROTO LOCAL ADDRESS FOREIGN ADDRESS >> squid negotiate_ 597 1 stream -> ?? >> squid negotiate_ 596 0 stream -> ?? >> squid negotiate_ 596 1 stream -> ?? > > 1. It looks like output from sockstat(1), not procstat(1) > > 2. stream is Unix domain stream socket > > String "??" probably mean, that this file descriptor is not connected > (was closed by remote side, but not by this process). Thank you for your answer! The excerpt was from 'procstat -f' which lists file descriptors. I wasn't aware of an "unconnected" FD state... Sounds reasonable. Thanks, -harry
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?58C6B9C9.9070805>