If I list
/proc/<pid>/fd I see a number of entries for sockets. These entries have timestamps. At first I thought they were when the socket was created. But it doesn't always appear to be the case.
What does this timestamp mean?
It looks like the entries in
/proc/x/fd are instantiated the first time you access them (via a
lstat(2) or any system call that has them involved), and that's where the time comes from.