I'm trying to better understand a behavior I see - I took control of a server that had TFTP running and am trying to turn it off. I've already ran:
systemctl stop tftp
systemctl stop xinetd
However, when stopping the tftp service it says
Warning: Stopping tftp.service, but it can still be activated by: tftp.socket
ss -lnpu afterwards gives me
UNCONN 0 0 :::69 :::* users:(("systemd",pid=1,fd=60))
I checked and the port is indeed still listening, but the PID is listed as systemd? I don't understand the behavior - how is TFTP being run directly by systemd?
Edit: I figured out there was another "service" called tftp.socket running that kept the socket open after I killed the tftp.service. What I still don't understand is why this shows up as being part of the systmed pid.