I've been seeing outgoing TCP connections on a SPARC Solaris 10 box, that look like these in the output of netstat:
xxxx.46396 ipXXXXXX.speed.planet.nl.telnet 8192 0 49664 0 TIME_WAIT
They come and go and sometimes last for hours.
I am looking for owners of active, established TCP connections - not for listening TCP sockets.
Is there any way to tell :
1) which process owns (or owned) this connection ?
2) when was the connection created ?
Things I already tried that do not work:
a) lsof
b) 'pfiles' and utilities based on it
Can Solaris ipfilter be use to track this down ?
Thanks.