30 tcp connections Established for a while and after a few minutes are close


Login or Register to Reply

 
Thread Tools Search this Thread
# 1  
Old 1 Week Ago
30 tcp connections Established for a while and after a few minutes are close

Good morning, I need your help please

After Restarting Aps or connection, these are connections


Code:
tcp        0      0  10.80.1.26.57597       10.81.248.79.53008      ESTABLISHED
tcp        0     47  10.80.1.26.57607       10.81.248.79.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57575       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57598       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57584       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57582       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57585       10.81.248.82.53008      ESTABLISHED
tcp        0     47  10.80.1.26.57588       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57590       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57591       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57619       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57580       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57582       10.81.248.82.53008      ESTABLISHED
tcp        3      0  10.80.1.26.57586       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57624       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57578       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57576       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57614       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57581       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57621       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57595       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57610       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57583       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57587       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57592       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57594       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57602       10.81.248.82.53008      ESTABLISHED
tcp        3      0  10.80.1.26.57593       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57617       10.81.248.82.53008      ESTABLISHED
tcp        0      0  10.80.1.26.57605       10.81.248.82.53008      ESTABLISHED


Code:
provisio:/export/home/provisio>netstat -an|grep -c 10.81.248.82
30

After 5 minutes now there are no more connections:

Code:
provisio:/export/home/provisio>netstat -an|grep -c 10.81.248.79
0

I dont know where to start do diagnose the root cause; Ive trying to google in the web and one theory i found is that the client side has not data to sent so the server close the conection thereafter.

I would appreciate your help in advanced

--- Post updated at 05:25 AM ---

Sorry, I correct the last Threat grepping 10.81.248.82

Code:
netstat -an|grep -c 10.81.248.82
0

# 3  
Old 1 Week Ago
OK, 10.80.1.26 is like a connection server with other platforms,this is the server i am connected to, wchich i use to restart the 30 connections to server 10.81.248.79 (Content provider) which by means those 30 connections read some data)

so client use those 30 connections 10.81.248.79 53008

by menas of these 30 connections any process connect to a Database table, then convert some records into frameworks which are after sent to the content provider

What ive got so far is this:
1 We escalata client (client prider) and the see no problem but the problem is my site because for some reason close the connetion: closed by client. Drop session, for instance

Code:
[2019-02-07 11:13:36]   msisdn: 573017928299  amount:       2000  dateTime: 2019-02-01 18:36:27 

[2019-02-07 11:13:36]   msisdn: 573176599559  amount:       3000  dateTime: 2019-02-01 06:59:59 

[2019-02-07 11:13:36]   msisdn: 573132365842  amount:      11000  dateTime: 2019-02-01 12:24:30 

[2019-02-07 11:13:36] Connection on socket: 24 closed by client. Drop session.

[2019-02-07 11:13:36] Connection on socket: 20 closed by client. Drop session.

[2019-02-07 11:13:36] Connection on socket: 23 closed by client. Drop session.

2 they and me tested connectivity by telnet:

Code:
telnet 10.81.248.79 53003
Trying 10.81.248.79...
Connected to 10.81.248.79.
Escape character is '^]'.

3 They boldly say the problem is in my side, the suggest check up firewalls issue, network so on.
4 I dont have the experience and knowlede about networking issue if it is the real problem

I appreciate your help in advanced to give me some lshed light what i should don next





What is 10.80.1.26 ?
What is 10.81.248.79 ?
What is port 53008 ?
What service is this?
What happens when you try connecting to the server?
# 4  
Old 1 Week Ago
Quote:
Originally Posted by alexcol
OK, 10.80.1.26 is like a connection server with other platforms,this is the server i am connected to, wchich i use to restart the 30 connections to server 10.81.248.79 (Content provider) which by means those 30 connections read some data)
I see only two connections to 10.81.248.79, the others go to 10.81.248.82. What is this last system?

And, while you are at it: PLEASE describe the systems (all of them) in a bit more detail: OS? application? role? So far we have:

10.80.1.26: access/jump server, OS? application(s)?
10.81.248.79: content provider (to be honest, no idea what that is), OS? application?
10.81.248.82: ??

Quote:
Originally Posted by alexcol
so client use those 30 connections 10.81.248.79 53008
by menas of these 30 connections any process connect to a Database table, then convert some records into frameworks which are after sent to the content provider
So there is a DB server (which one?) and that sends data to this "content provider", yes?

Quote:
Originally Posted by alexcol
1 We escalata client (client prider) and the see no problem but the problem is my site because for some reason close the connetion: closed by client. Drop session,
Sorry, but i have no idea what you are talking about. Please explain again.

Quote:
Originally Posted by alexcol
for instance

Code:
[2019-02-07 11:13:36]   msisdn: 573017928299  amount:       2000  dateTime: 2019-02-01 18:36:27 

[2019-02-07 11:13:36]   msisdn: 573176599559  amount:       3000  dateTime: 2019-02-01 06:59:59 

[2019-02-07 11:13:36]   msisdn: 573132365842  amount:      11000  dateTime: 2019-02-01 12:24:30 

[2019-02-07 11:13:36] Connection on socket: 24 closed by client. Drop session.

[2019-02-07 11:13:36] Connection on socket: 20 closed by client. Drop session.

[2019-02-07 11:13:36] Connection on socket: 23 closed by client. Drop session.

2 they and me tested connectivity by telnet:

Code:
telnet 10.81.248.79 53003
Trying 10.81.248.79...
Connected to 10.81.248.79.
Escape character is '^]'.

OK, so which server did drop the connections? Or, respectively, which server did you contact when your client did drop the connection? And which command did you execute to get this error message?

Quote:
Originally Posted by alexcol
4 I dont have the experience and knowlede about networking issue if it is the real problem
OK, (very short) introduction to the relevant things:

Every host (more precisely ever interface of a host) has one IP address. IP addresses are address information of the layer 3 of the OSI network model. This is the layer the IP protocol works on. But IP is just a means to transport data. It is basically used to create connections between hosts. These connections are done by two protocols, UDP and TCP. Most (perhaps more than 90%) are done with TCP but both these protocols operate at layer 4. Now picture an IP address like a house with many apartments. The owner of each apartment can be at home or not. These apartments are the "ports" and behind each port may wait a background process (a so-called "daemon") for incoming connections to serve. For instance, the telnet daemon usually waits at port 23 and if you connect to a system (and its telnet daemon is running) you would connect to this port 23 and the telnet daemon would answer. See it like this: you go into the house and ring the bell at door 23. If somebody is home (the telnetd) he will react to the bell. Ports have numbers 0-65535. 1-1024 are so-called "well-known ports" because some standard means of connecting to a system are located there: you already heard telnet uses port 23, ftp uses port 21, ssh uses 22, http uses 80 and so on. Above 1024 things are less fixed, and beyond 32768 the ports have no special meaning at all but are allocated on an ad-hoc basis.

A combination "IP address plus port" is called a "socket". If you have a connection (i.e. an established telnet connection) the client on your side (the telnet client program) allocates some free port and uses your IP with this port (the local "socket") to contact the remote IP at port 23. The telnetd daemon picks that up, establishes the connection (to some other port in order to free 23 for incoming connection requests again) so you have a socket connection yourIP+local-port <-> remoteIP+remote-port.

TCP works "connection oriented", that means that such connections are like telephone calls: once the connection is established you have a bidrectional channel over which you can exchange data. This exists until it is - by a standardised procedure - torn down.

I hope this helps.

bakunin
This User Gave Thanks to bakunin For This Post:
Neo (2 Days Ago)
# 5  
Old 2 Days Ago
Thanks you very much for your support and explanation, it is useful for me to grow. Unfortunately i dont have enough documentation at hand for every party (ip adresses,ports, services and so on) to provide and to keep the resolution . AS soon as i get this i will let you know. THanks once again for your support
This User Gave Thanks to alexcol For This Post:
Neo (2 Days Ago)
Login or Register to Reply

|
Thread Tools Search this Thread
Search this Thread:
Advanced Search

More UNIX and Linux Forum Topics You Might Find Helpful
Grep a log file for the last 5 minutes of contents every 5 minutes charli1 Shell Programming and Scripting 15 1 Week Ago 12:44 PM
How to convert days hours minutes seconds to minutes? ramu.badugula UNIX for Beginners Questions & Answers 2 11-12-2018 09:44 PM
Need to know reason for connections closed in netstat -p tcp Vishal_dba IP Networking 6 04-30-2014 11:42 AM
when parent process close, how to close the child? omega666 Programming 3 04-06-2011 05:38 PM
many tcp connection in close-wait abcdef Solaris 2 02-22-2011 06:05 PM
How to test max number of tcp connections gstoychev IP Networking 2 02-21-2011 05:39 AM
TCP trashing data on application close metrix Programming 3 09-22-2010 07:15 PM
Established connections causing lag? adelsin Solaris 4 05-24-2010 11:15 AM
How to kill the TCP ESTABLISHED connection in netstat GIC1986 Solaris 4 11-20-2009 07:07 AM
How to kill all active tcp connections from an IP? an00p Red Hat 3 09-07-2009 08:21 PM
close existing tcp connection in C raidzero Programming 6 01-21-2009 02:41 PM
A bi directional script that will monitor the TCP/IP connections between two physical samura Shell Programming and Scripting 3 01-16-2009 10:41 AM
close tcp port raidzero UNIX for Dummies Questions & Answers 1 09-24-2008 03:16 PM
Unix Scripts & Counting TCP Connections daveohr IP Networking 5 01-15-2007 10:25 PM
C Prog to close a socket in established state teledelux Programming 1 10-03-2001 12:42 PM