Session Engine bind to 179/tcp need root parent process opens the sockets and doing the binds pass the file descriptors to the SE recvmsg(2) parent tracks which fds the SE has open don't bind() again to the same ip/port SE runs as _bgpd:_bgpd and chrooted to /var/empty