# ps -C metalog -O cmd PID CMD S TTY TIME COMMAND 9309 metalog [MASTER] S ? 00:00:00 metalog [MASTER] 9310 metalog [KERNEL] S ? 00:00:00 metalog [KERNEL] 19881 metalog [MASTER] S ? 00:00:00 metalog [MASTER] 19882 metalog [KERNEL] S ? 00:00:00 metalog [KERNEL] # ls -l /proc/93{09,10}/fd 9309/fd: total 15 lr-x------ 1 root root 64 Jun 14 16:13 0 -> /dev/null l-wx------ 1 root root 64 Jun 14 16:13 1 -> /dev/null l-wx------ 1 root root 64 Jun 14 16:13 10 -> /var/log/sshd/current l-wx------ 1 root root 64 Jun 14 16:13 11 -> /var/log/mail/current l-wx------ 1 root root 64 Jun 14 16:13 12 -> /var/log/fetchmail/current l-wx------ 1 root root 64 Jun 14 16:13 13 -> /var/log/crond/current l-wx------ 1 root root 64 Jun 14 16:13 14 -> /var/log/postfix/current l-wx------ 1 root root 64 Jun 14 16:13 2 -> /dev/null lrwx------ 1 root root 64 Jun 14 16:13 3 -> socket:[9776] lrwx------ 1 root root 64 Jun 14 16:13 4 -> socket:[9778] lrwx------ 1 root root 64 Jun 14 16:13 5 -> socket:[9779] l-wx------ 1 root root 64 Jun 14 16:13 6 -> /var/log/everything/current l-wx------ 1 root root 64 Jun 14 16:13 7 -> /var/log/critical/current l-wx------ 1 root root 64 Jun 14 16:13 8 -> /var/log/kernel/current l-wx------ 1 root root 64 Jun 14 16:13 9 -> /var/log/everything/current 9310/fd: total 6 lr-x------ 1 root root 64 Jun 14 16:13 0 -> /dev/null l-wx------ 1 root root 64 Jun 14 16:13 1 -> /dev/null l-wx------ 1 root root 64 Jun 14 16:13 2 -> /dev/null lrwx------ 1 root root 64 Jun 14 16:13 3 -> socket:[9776] lrwx------ 1 root root 64 Jun 14 16:13 4 -> socket:[9778] lrwx------ 1 root root 64 Jun 14 16:13 5 -> socket:[9779] # netstat -xa | grep '977[689]' unix 31 [ ] DGRAM 9776 /dev/log unix 3 [ ] STREAM CONNECTED 9779 unix 3 [ ] STREAM CONNECTED 9778 # strace -p 9309 Process 9309 attached - interrupt to quit futex(0xb7faeecc, FUTEX_WAIT, 2, NULL # strace -p 9310 Process 9310 attached - interrupt to quit syslog(0x2, 0xbfffdd70, 0x800