socket Token

The socket token contains information describing an Internet socket. The fields are:

• A token ID

• A socket type field (TCP/UDP/UNIX)

• The local port address

• The local Internet address

• The remote port address

• The remote Internet address

The socket type is taken from the designated socket and the port and Internet addresses are taken from the socket's inpcb control structure. The following figure shows the token format.

Figure B-29 socket Token Format

A socket token is displayed by praudit as follows:

socket,0x0000,0x0000,0.0.0.0,0x0000,0.0.0.0

socket,0x0002,0x8008,patchwork