Eugene M. Zheganin
2016-Dec-15 12:23 UTC
sonewconn: pcb [...]: Listen queue overflow to human-readable form
Hi. Sometimes on one of my servers I got dmesg full of sonewconn: pcb 0xfffff80373aec000: Listen queue overflow: 49 already in queue awaiting acceptance (6 occurrences) sonewconn: pcb 0xfffff80373aec000: Listen queue overflow: 49 already in queue awaiting acceptance (2 occurrences) sonewconn: pcb 0xfffff80373aec000: Listen queue overflow: 49 already in queue awaiting acceptance (1 occurrences) sonewconn: pcb 0xfffff80373aec000: Listen queue overflow: 49 already in queue awaiting acceptance (15 occurrences) sonewconn: pcb 0xfffff80373aec000: Listen queue overflow: 49 already in queue awaiting acceptance (12 occurrences) sonewconn: pcb 0xfffff80373aec000: Listen queue overflow: 49 already in queue awaiting acceptance (10 occurrences) sonewconn: pcb 0xfffff80373aec000: Listen queue overflow: 49 already in queue awaiting acceptance (16 occurrences) sonewconn: pcb 0xfffff80373aec000: Listen queue overflow: 49 already in queue awaiting acceptance (16 occurrences) sonewconn: pcb 0xfffff80373aec000: Listen queue overflow: 49 already in queue awaiting acceptance (22 occurrences) sonewconn: pcb 0xfffff80373aec000: Listen queue overflow: 49 already in queue awaiting acceptance (6 occurrences) sonewconn: pcb 0xfffff80373aec000: Listen queue overflow: 49 already in queue awaiting acceptance (6 occurrences) sonewconn: pcb 0xfffff80373aec000: Listen queue overflow: 49 already in queue awaiting acceptance (1 occurrences) sonewconn: pcb 0xfffff80373aec000: Listen queue overflow: 49 already in queue awaiting acceptance (9 occurrences) sonewconn: pcb 0xfffff80373aec000: Listen queue overflow: 49 already in queue awaiting acceptance (5 occurrences) sonewconn: pcb 0xfffff80373aec000: Listen queue overflow: 49 already in queue awaiting acceptance (18 occurrences) sonewconn: pcb 0xfffff80373aec000: Listen queue overflow: 49 already in queue awaiting acceptance (4 occurrences) but at the time of investigation the socket is already closed and lsof cannot show me the owner. I wonder if the kernel can itself decode this output and write it in the human-readable form ? Thanks. Eugene.
Eugene Grosbein
2016-Dec-15 12:28 UTC
sonewconn: pcb [...]: Listen queue overflow to human-readable form
On 15.12.2016 19:23, Eugene M. Zheganin wrote:> but at the time of investigation the socket is already closed and lsof > cannot show me the owner. I wonder if the kernel can itself decode this > output and write it in the human-readable form ?Until that's not implemented, you can monitor "netstat -Lan" output and continuously save it for later analisys and/or draw graphs.
hiren panchasara
2016-Dec-15 17:51 UTC
sonewconn: pcb [...]: Listen queue overflow to human-readable form
On 12/15/16 at 05:23P, Eugene M. Zheganin wrote:> Hi. > > Sometimes on one of my servers I got dmesg full of > > sonewconn: pcb 0xfffff80373aec000: Listen queue overflow: 49 already in > queue awaiting acceptance (6 occurrences)[skip]> > but at the time of investigation the socket is already closed and lsof > cannot show me the owner. I wonder if the kernel can itself decode this > output and write it in the human-readable form ?I have this not-quite-correct patch that may help you. (If you follow the discussion there, you'd know why its not complete.) https://lists.freebsd.org/pipermail/freebsd-net/2014-March/038074.html Cheers, Hiren -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 603 bytes Desc: not available URL: <http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20161215/e5685a36/attachment.sig>