onefang <onefang_devuan@???> writes:
> I've been trying out the tiger security tool for some time. So far I've
> disable one of it's checks coz it was all bogus.
>
> Now I'm looking at it's lin003w listening processes checker. I get
> emails full of lines like this -
>
> NEW: --WARN-- [lin003w] The process `muse4' is listening on socket 4844092 (IPv4 on 4844092 interface) is run by 87260.
>
> Yep, I'm running MusE. I thought the "socket" was a port number, but
> that's way to high to be a port number. I don't have any interfaces with
> numbers like that. The number at the end should be a user, bat again
> isn't that way too high for user ID?

This (4844092) seems to be the socket inode number. You'll find these in
/proc/net/tcp or /proc/net/udp.