The UNIX and Linux Forums  
Hello and Welcome from United States to the UNIX and Linux Forums! Thank You for Visiting and Joining Our Global Community.

Go Back   The UNIX and Linux Forums > Special Forums > IP Networking
.
google unix.com



IP Networking Learn TCP/IP, Internet Protocol, Routing, Routers, Network protocols in this UNIX and Linux forum.

More UNIX and Linux Forum Topics You Might Find Helpful
Thread Thread Starter Forum Replies Last Post
Unable to access 3500 FC array. Where is the problem?.. Sapfeer SUN Solaris 7 04-01-2009 07:03 AM
Solaris 10 on Enterprise 3500 vatch23 SUN Solaris 16 09-16-2008 04:45 AM
Booting problem on Sun 3500 ishila SUN Solaris 3 10-28-2005 09:00 AM
Solaris 8 crash on Enterprise 3500 NAV4869 UNIX for Advanced & Expert Users 1 04-25-2002 11:17 AM

Closed Thread
English Japanese Spanish French German Portuguese Italian Dutch Swedish Russian Norwegian Hungarian Hebrew Danish
 
LinkBack Thread Tools Search this Thread Rate Thread Display Modes
  #1 (permalink)  
Old 04-23-2009
lilech lilech is offline
Registered User
  
 

Join Date: Apr 2009
Posts: 2
Exclamation More then 3500 sockets in FIN_WAIT1

Hello,

My config:
SLES 10 sp1
Apache / drupal / mysql

I have a saturation of TCP ports on this hosts. Hosting about 60 websites. The event tonight was ~200 hits minutes.
With "netstat-n" I see ~5500 connections. Including approximately 3800 in FIN_WAIT1.
As a first step I would like to know how I could close the ports. With cron every min for example even if it is not very recommendable. Then what caused this escalation.

Thanks for your help
  #2 (permalink)  
Old 04-24-2009
fpmurphy's Avatar
fpmurphy fpmurphy is offline Forum Staff  
Moderator
  
 

Join Date: Dec 2003
Location: Florida
Posts: 1,861
This generally is an application issue (look at SO_LINGER for example). The client is not receiving the CLOSE_WAIT confirmation from the server and thus leaving the socket open or visa versa. May also (rarely) be caused by settings in network routers and switches which limit packet size. Do a Web search - lots of information on this issue out there on the Internet.

You should be able to use sysctl to manage this issue until you figure out which application is causing the problem.
  #3 (permalink)  
Old 04-24-2009
lilech lilech is offline
Registered User
  
 

Join Date: Apr 2009
Posts: 2
Smile

Very nice for your answers fpmurphy.
Thanks for sysctl.
I spend all my day on this. Finally you are right.
The problem came from a couple of firewall. A switch occurs the night before between them. And they are different in their config. The admin say it's impossible. But in fact it is.

Sorry for my poor english
Best regards
  #4 (permalink)  
Old 04-24-2009
Neo's Avatar
Neo Neo is online now Forum Staff  
Administrator
  
 

Join Date: Sep 2000
Location: Asia Pacific
Posts: 6,522
Since you are running Apache, it is better to adjust your TCP parameters in your apache.conf files. You don't need to adjust your kernal TCP parameters using sysctl() when your application is Apache.
Sponsored Links
Closed Thread

Bookmarks

Tags
drupal, fin_wait1, suse linux

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -4. The time now is 03:59 PM.


Powered by: vBulletin, Copyright ©2000 - 2006, Jelsoft Enterprises Limited. Language translation by Google.
vBCredits v1.4 Copyright ©2007 - 2008, PixelFX Studios
The UNIX and Linux Forums Content Copyright ©1993-2009. All Rights Reserved.Ad Management by RedTyger

Content Relevant URLs by vBSEO 3.2.0