how to deduce connect/accept history from struct sock?

[Joey Dewille]

Say a module is inserted that intercepts all socket operations and
it happened in the middle of several established connections.
Save me some time please and answer what fields in struct sock
or elsewhere can be examined to determine reliably if the current
established
connections had been accepted (i.e. accept call) or initiated (i.e.
connect)
from the local machine.
--Joey 

-- 
http://www.fastmail.fm - A fast, anti-spam email service.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/