Artem Viklenko
2016-Dec-15 15:27 UTC
sonewconn: pcb [...]: Listen queue overflow to human-readable form
2016-12-15 14:28, Eugene Grosbein ???????:> On 15.12.2016 19:23, Eugene M. Zheganin wrote: > >> but at the time of investigation the socket is already closed and lsof >> cannot show me the owner. I wonder if the kernel can itself decode >> this >> output and write it in the human-readable form ? > > Until that's not implemented, you can monitor "netstat -Lan" output and > continuously save it for later analisys and/or draw graphs. >netstat -LanA -f inet ?> > _______________________________________________ > freebsd-net at freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe at freebsd.org"-- Regards!
Gary Palmer
2016-Dec-15 16:05 UTC
sonewconn: pcb [...]: Listen queue overflow to human-readable form
On Thu, Dec 15, 2016 at 05:27:02PM +0200, Artem Viklenko wrote:> 2016-12-15 14:28, Eugene Grosbein ??????????????: > > On 15.12.2016 19:23, Eugene M. Zheganin wrote: > > > >> but at the time of investigation the socket is already closed and lsof > >> cannot show me the owner. I wonder if the kernel can itself decode > >> this > >> output and write it in the human-readable form ? > > > > Until that's not implemented, you can monitor "netstat -Lan" output and > > continuously save it for later analisys and/or draw graphs. > > > > netstat -LanA -f inet ?That's only IPv4 sockets (or sockets that are listening on both families at the same time). If you are dual stack with IPv6, you'd probably also need to capture netstat -LanA -f inet6 Regards, Gary