If I list /proc/<pid>/fd I see a number of entries for sockets. These entries have timestamps. At first I thought they were when the socket was created. But it doesn't always appear to be the case.

What does this timestamp mean?

1 Answer 1


It looks like the entries in /proc/x/fd are instantiated the first time you access them (via a lstat(2) or any system call that has them involved), and that's where the time comes from.

  • Do you know where I can see the kernel source for this?
    – Dave
    Nov 20, 2012 at 16:02
  • Somewhere in fs/proc/, probably fs/proc/base.c Nov 20, 2012 at 18:06

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .