Thread Tools Search this Thread
Top Forums UNIX for Dummies Questions & Answers Syn_sent
# 1  

Dear Guys ,

I have linux - redhat 6.1 and it is on the internet , works as email server forworder .

when i execute netstat -a command i got a strange output that i want to ask about it and how can i control it or drop it plz :

the output looks like :

tcp 0 1 SYN_SENT
tcp 0 1 SYN_SENT
tcp 0 1 SYN_SENT
tcp 0 1 SYN_SENT
tcp 0 1 SYN_SENT
tcp 0 1 SYN_SENT
tcp 0 1 SYN_SENT
tcp 0 1 SYN_SENT
tcp 0 1 SYN_SENT
tcp 0 1 SYN_SENT

what is SYN_SENT !! and how can i drop many such hits ??

Thanks Alot
# 2  
taking a shot here, am also new to TCP/IP so still learning...
TCP/IP is connection oriented, to establish a connection between 2 hosts, your PC sends a SYN (synchronize) bit to the other computer. Your PC then waits to receive an ACK bit, or acknowledgement bit from the opposite end. Finally, your PC sends another bit to tell the other computer which sequence number to begin with. When all of this hand shaking is complete, data begins to flow.

From O'Reilly, TCP Network Administration
"TCP views the data it sends as a continuous stream of bytes, not as independent packets. Therefore, TCP takes care to maintain the sequence in whihc bytes are sent and received. The Sequence Number and Acknowledgement Numbers in teh TCP segment header keep track of the bytes"
# 3  
Your computer is attempting to open a TCP connection with another computer, looks like something related to the name server (perhaps a zone transfer from a zone that is not responding to your request?).

One way to resolve this is to use lsof to see which processes are attempting to open the connection. When you find out which processes on your end are attempting to open the connection, you can then determine the appropriate next step.
# 4  
As TCP is connection oriented, SYN_SENT is a part of TCP three way handshake which TCP does before Establishing a connection.

# 5  
Thanks Guys ,

Yes i agree with you that is it is TCP packet , and my server try to talk with other domains .

but why this huge no. of connections ot hits .. i have more than 500 line from that output .

Also while i was chekcing i discovered some files in /tmp directory with the follwoing contents , would you plz tell me what does it do !! :




thanks again
# 6  
Please download and install lsof. With this program you will be able to understand and manage your network connections much better.

Search the forums for previous posts on using lsof.

Previous Thread | Next Thread
Thread Tools Search this Thread
Search this Thread:
Advanced Search

Test Your Knowledge in Computers #101
Difficulty: Easy
Linux is fundamentally a UNIX clone written from scratch by Linus Torvalds with the help of many coders across the globe.
True or False?

1 More Discussions You Might Find Interesting

1. Solaris

SYN_SENT does not receive reset from closed ports

Dear all, I have a Solaris 10 system with a bunch of zones on it. My issue is the following: - I have application A and B running in the same zone: i.e. they communicate via loopback interface. Application A tries to connect to application B, usually listening on port X. If application B... (6 Replies)
Discussion started by: pierolinux
6 Replies

Featured Tech Videos