Skip to content

Instantly share code, notes, and snippets.

@zealfire
Created May 9, 2018 20:20
Show Gist options
  • Save zealfire/c2155e863043b5fa4457dfbcda26ff40 to your computer and use it in GitHub Desktop.
Save zealfire/c2155e863043b5fa4457dfbcda26ff40 to your computer and use it in GitHub Desktop.
WIP

netstat and lsof both crawl /proc//fd to associate processes to ports/sockets, and /proc//fd doesn't get populated for kernel threads AFAIK.

lockd is always a kernel thread - at least on modern (newer than say 2.2) kernels.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment