run:
lsof|grep delete
can find some process open fd, but system said that it has been deleted:
mingetty 2031 root txt REG 8,2 15256 49021039 /sbin/mingetty (deleted)
I look in the /proc filesystem:
ls -l /proc/[pid]
lrwxrwxrwx 1 root root 0 9月 17 16:12 exe -> /sbin/mingetty (deleted)
but actually, the executable(/sbin/mingetty) is normal at /sbin/mingetty path.
and some sockets show this situation:
ls -l /proc/[pid]/fd
82 -> socket:[23716953]
but, using the commands: netstat -ae|grep [socket id]
can find it.
why does the OS display this information??