Hi,

My system ( Solaris 2.6, Entrerprise 250 ) shows lot of connections in TIME_WAIT status against service

localhost.8007 and
localhost.45221

What are these services and where can I get the cross references.
I have checked up in /etc/services and there is no such entry.

Infact the no of TIME_WAIT connections on this services are increasing ( currently ~200)

Will this affect system performace ? OR if such service entries shows up in netstat -a . how can I get the cross reference ?

Thanks in Advance

JS

Ports may get stuck in a time_wait due to the 2MSL timeout value, which is a part of the TCP specification. After a connection has been closed by both the client and the server, the port becomes unavailable for a certain amount of time, so that a new program does not inadvertantly get packets that were intended for the old program. On Solaris machines, the 2MSL value may be modified by adjust the /dev/tcp tcp_close_wait_interval ndd variable.


Since the ones you mention show localhost, it is a connection from your system to itself. I would believe if it is growing, there is something spawning and dying and respawning. Any new programs or application on your server or changes to applications?

Use the lsof command line utility to see what processes are bound to which sockets.

netstat -a shows all listening sockets, even listening sockets that have no active connections, BTW.

Search the forums with keywords lsof to find out more and where to download. LSOF has been discussed quite a few times.

Hi,

I don't have the lsof utility. Of course I could find out some sites which offer the package. Unfortunately my proxy doesn't allow full access permission.
Meanwhile I checked up the /var/adm/messages .One error seems to be disturbing

<date> <MYHOSTNAME> sendmail[269]:unable to qualify my own domain name ( <MYHOSTNAME> ) -- using short name

<date> <MYHOSTNAME> sendmail[15513]: My unqualified host name ( <MYHOSTNAME> ) unknown; sleeping for retry.

the <MYHOSTNAME> is similar to the #hsotname output.

Infact recently the hostname was changed. And that was done using uname -S.

Could this informaiton can throw some light to the problem ??

Gack! That wasn't wise. The official Sun word is that you're supposed to use sys-unconfig which has a man page. The hostname is recorded in many places such as:
/etc/hostname.hme0 (or whatever you have for a network card)
/etc/nodename
and about 10 other files. I have used the sys-unconfig method ever since I got burnt doing it by hand.

And you should just ignore the TIME_WAITS. Each one goes away in a few minutes. They do not hurt performance.

Thanks Perd,

I hope that's what creating problems with my system. But during the process of changing the nodename I have taken care of /etc/hostname.hme0 , my default network. but the /etc/net/*/hosts were not attended.

I'm waiting for my next clearance to down the system and perform these activities. ( sys-unconfig ) ..

Once again Thanks all..