Re: raw sockets

Andi Kleen (ak@muc.de)
04 Nov 1998 19:14:21 +0100


In article <Pine.LNX.3.96.981104180623.14690A-100000@ondatra.tartu-labor>,
Meelis Roos <mroos@tartu.cyber.ee> writes:
> Is it possible to determine which applications are using raw sockets?
> netstat -a shows that I have 2 raw sockets open, *:1 and *:6. lsof shows
> only established connections. /proc/net/raw has 2 lines but they have
> inode number set to 0.

> Is it intentionally 0 or is it a bug?
0 means it is an internal kernel socket. ICMP and TCP use one to send
packets. User sockets should have an inode number, and they have on my
system.

-Andi

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/