Ok here's the situation

We have an application that our users log into over the network to one of our unix boxes (Solaris 8). I had this situation occur the other day where an user claimed that he totally shutdown the app because it froze up and wasn't able to log back in.

I performed a netstat on the port and I could see that he wasn't getting back in because the original connection (frozen app) was still established and I could see time_waits for the new attempts to login (the time_waits are because we're not allowing the user to log back in because technically he's still logged in).

after a while I saw the ESTABLISHED switch to FIN_WAIT_2, I never seen this state before (can someone explain what it means in laymens terms and give an example of a situation it might occur).

Anyway the user wanted an explanation and I have never seen this before, usually when a user closes the app the connection will drop but this time it stayed established. Is it possible that the session level processes were still running on the Windows 2000 server pc he was using?? even though everything on the desktop said the app was closed??

Anyway, I would greatly appreciate any info you could spare on this situation and also is there a website or reference somewhere that could explain real life situations where certain netstat states would occur??

thanks in advance