time_wait root process.

[TheJanitor]

hi, it's not really a problem, but a couple of quick questions regarding the time_wait status.

all the processes you see here apart from port 5555 (ssh) are running in a chroot jail; they all belong to the mldonkey suite. port 5558 is the web GUI remote management and as you can see, the process is running under the limited account 'mldonkeyjail'.
when i connect to this process through http, ( through my browser, ) these sockets seem to initially spawn under the root account and go immediately into a time_wait status. shouldn't they show as the 'mldonkeyjail' account? is this normal? is it vulnerable? i guess they are not processes themselves, running a ps shows mlnet ( mldonkey ) running with uid 1001, but why would the sockets show as being opened by the root account?

thanks for your time.

Proto Recv-Q Send-Q Local Address           Foreign Address         State       User       Inode      
tcp        0      0 *:5555                  *:*                     LISTEN      root       3974       
tcp        0      0 *:5558                  *:*                     LISTEN      mldonkeyjail 10098      
tcp        0      0 *:4986                  *:*                     LISTEN      mldonkeyjail 10089      
tcp        0      0 *:4000                  *:*                     LISTEN      mldonkeyjail 10099      
tcp        0      0 *:4001                  *:*                     LISTEN      mldonkeyjail 10100      
tcp        0      0 *:6881                  *:*                     LISTEN      mldonkeyjail 10096      
tcp        0      0 *:6882                  *:*                     LISTEN      mldonkeyjail 10097      
tcp        0      0 *:27045                 *:*                     LISTEN      mldonkeyjail 10086      
tcp        0      0 192.168.2.40:5558       192.168.2.2:38510       TIME_WAIT   root       0          
tcp        0      0 192.168.2.40:5558       192.168.2.2:38516       TIME_WAIT   root       0          
tcp        0      0 192.168.2.40:5558       192.168.2.2:38508       TIME_WAIT   root       0          
tcp        0      0 192.168.2.40:5558       192.168.2.2:38518       TIME_WAIT   root       0          
tcp        0      0 192.168.2.40:51933      superdonkey.peerat:7111 ESTABLISHED mldonkeyjail 10130      
tcp        0      0 192.168.2.40:5558       192.168.2.2:38515       TIME_WAIT   root       0          
tcp        0      0 192.168.2.40:5558       192.168.2.2:38511       TIME_WAIT   root       0          
tcp        0      0 192.168.2.40:5558       192.168.2.2:38507       TIME_WAIT   root       0          
tcp        0      0 192.168.2.40:5558       192.168.2.2:38506       TIME_WAIT   root       0          
tcp        0      0 192.168.2.40:5558       192.168.2.2:38514       TIME_WAIT   root       0          
tcp        0      0 192.168.2.40:5558       192.168.2.2:38513       TIME_WAIT   root       0          
tcp        0      0 192.168.2.40:5555       192.168.2.2:60418       ESTABLISHED root       4032       
tcp        0      0 192.168.2.40:5555       192.168.2.2:60421       ESTABLISHED root       4212       
tcp        0      0 192.168.2.40:36882      95.211.73.66:4113       ESTABLISHED mldonkeyjail 10153      
tcp        0      0 192.168.2.40:5558       192.168.2.2:38512       TIME_WAIT   root       0          
tcp        0      0 192.168.2.40:5558       192.168.2.2:38517       TIME_WAIT   root       0          
tcp        0      0 192.168.2.40:5555       192.168.2.2:37662       ESTABLISHED root       7093       
tcp        0      0 192.168.2.40:55885      .:4321                  ESTABLISHED mldonkeyjail 10129      
tcp        0      0 192.168.2.40:46281      95.211.125.155:4558     ESTABLISHED mldonkeyjail 10131      
tcp        0      0 192.168.2.40:5558       192.168.2.2:38509       TIME_WAIT   root       0          
tcp6       0      0 [::]:5555               [::]:*                  LISTEN      root       3976

[TheJanitor]

bump

thanks.