ahh sorry that actually reads confusing..im running osqueryd with query "select * from process_open_sockets;" checking my results i occasionally see a real pid, but for the most part they are reporting as pid =-1...when troubleshooting i ran the same query with osqueryi as root and all the pids are showing up correctly