I realize this is a bit of an odd question. If I have a struct sock * (type=SOCK_STREAM family=AF_INET) is there any way (state == TCP_ESTABLISHED) to determine if the socket was the result of an accept or a connect? I realize that I could squirrel away this info into an unused portion of the structure (via changing sys_accept and sys_connect), but I was hoping there may be an artifact of the existing information that I could use to infer the distinction? I've traced thru the respective system calls and don't see anything, but maybe I missed something. Any help would be appreciated. Thanks Tony -- Kernelnewbies: Help each other learn about the Linux kernel. Archive: http://mail.nl.linux.org/kernelnewbies/ FAQ: http://kernelnewbies.org/faq/