ramsey
09/17/2019, 6:45 PMprocess_open_sockets in particular. Even in the case of doing a join where it could conceivably take the list of pids that match from processes and pass that as a constraint to process_open_sockets, it looks like it does a full table scan.