Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've got a MediaTemple DV server. I've been seeing a lot of QOS alerts for "numothersock" which is defined as:

The number of sockets other than TCP ones. Local (UNIX-domain) sockets are used for communications inside the system. UDP sockets are used, for example, for Domain Name Service (DNS) queries. UDP and other sockets may also be used in some very specialized applications (SNMP agents and others).

How can I determine what application/daemon/etc is creating these sockets? The limit is 300 and we're hitting that several times a day recently.

Thanks in advance.

share|improve this question
up vote 4 down vote accepted
netstat -nap
p shows the process id 
share|improve this answer
Please avoid netstat -a it will run dns name resolution, using -np is fine... – Roy Bellingan Nov 16 '15 at 13:52

netstat -a shows'em all. Or you can study its manual page to filter out only those types of connections you're interested in.

share|improve this answer
Thanks guys! Appreciate it! In my case, it was BIND. I don't even need it running. Thanks a ton! – Encoderer Jul 16 '11 at 18:36

netstat -an | grep ESTABLISHED | wc -l

This will count all opened sockets in the system and will output just the total. You can of course also change ESTABLISHED for whatever you need, for example a port or a communication status like CONNECTED or LISTENING.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.