ping(8) is a setuid application so that it can create the SOCK_RAW/IPPRORO_RAW sockets. As such, the socket is very likely to belong to root rather than the user who originall invoked ping.
I would not be surprised if -m owner --uid-owner foo did not match, and --uid-owner root always does. Also, if the kernel generates an ICMP reply in response to a received echo, there will not be any owner available. tag INVALID. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
