search for: last_ack

I have the need to know how many connection the server has, i run this command but i don't know how to sum all the results and get a final number. any ideas? netstat -an | grep -E 'tcp|udp' | awk '{print $6}' | sort | uniq -c | sort -n ?? 1 CLOSE_WAIT ?? 1 FIN_WAIT_2 ?? 1 LAST_ACK ?? 1 TIME_WAIT ?? 4 SYN_SENT ? 15 ? 37 LISTEN ? 44 ESTABLISHED ---------------------------------- Alejandro Rodriguez Luna Web: http://www.alexluna.org E-mail: el_alexluna at yahoo.com.mx MSN: el_alexluna at yahoo.com.mx GTalk: alexluna at gmail.com Movil: 044-311-112-86-41 --------------...

Hi there, I have some DDOS(?) attack on my router going where my apache HTTP server is flooded with short-timed connections from some host. This results in LOTS of sockets in TIME_WAIT/LAST_ACK/CLOSING states and eventually I'm out of mbufs, which, consequently means I can't even connect to the router from LAN. The kern.ipc.nmbclusters is 2560, (I guess high enough for router with DSL connection). After some time all mbufs are depleted (system says "All mbuf cluster exha...

...1 TIME_WAIT tcp 0 0 localhost:80 72.232.110.42:2641 ESTABLISHED tcp 0 0 localhost:80 77.70.106.4:13781 ESTABLISHED tcp 0 0 localhost:80 75.37.103.134:54726 ESTABLISHED tcp 0 1 localhost:37671 208.67.70.3:80 LAST_ACK tcp 0 0 localhost:37505 208.67.70.3:80 TIME_WAIT tcp 0 0 localhost:80 124.64.83.6:4841 ESTABLISHED tcp 0 0 localhost:36915 216.35.75.108:80 TIME_WAIT tcp 162 0 localhost:80 75.177.24.203:60002 CLOSE_WAIT tcp...

...tfilter/nf_conntrack_tcp.h.orig 2006-09-09 13:23:25.000000000 +1000 +++ /usr/src/linux-2.6.17.13/include/linux/netfilter/nf_conntrack_tcp.h 2006-09-15 11:18:28.000000000 +1000 @@ -49,6 +49,7 @@ u_int32_t last_seq; /* Last sequence number seen in dir */ u_int32_t last_ack; /* Last sequence number seen in opposite dir */ u_int32_t last_end; /* Last seq + len */ + u_int16_t last_win; /* Last window advertisement seen in dir */ }; #endif /* __KERNEL__ */ --- /usr/src/linux-2.6.17.13/net/ipv4/netfilter/ip_conntrack_proto_tc...

...test-tcp COMMIT # nfct list timeout .test-tcp = { .l3proto = 2, .l4proto = 6, .policy = { .SYN_SENT = 120, .SYN_RECV = 60, .ESTABLISHED = 100, .FIN_WAIT = 120, .CLOSE_WAIT = 10, .LAST_ACK = 30, .TIME_WAIT = 120, .CLOSE = 10, .SYN_SENT2 = 120, .RETRANS = 300, .UNACKNOWLEDGED = 300, }, }; .test-tcp-2 = { .l3proto = 2, .l4proto = 6, .policy = { .SYN_SENT = 120...

https://bugzilla.samba.org/show_bug.cgi?id=2628 ------- Additional Comments From wayned@samba.org 2005-04-20 01:11 ------- You didn't mention the client command you're running. As for the log-data output by a --daemon, did you look in the appropriate syslog file? or check the rsyncd.conf file to see if it is logging to a file? You can also use the "max verbosity" setting

...setting for that). Currently I have the system configured to take a lower amount of traffic, hovering at around 47% CPU, at around 833 req/s and it has 43k connections in these states: #### state ------------------ 65 CLOSING 94 ESTABLISHED 172 FIN_WAIT1 50 FIN_WAIT2 10 LAST_ACK 497 SYN_RECV 43480 TIME_WAIT On a side note, the 'active tcp sockets' reported by sar seems wildly inaccurate, it reports only ~10 active tcp sockets, it barely varies from the system being idle to the system being maxxed out. The docs I can find says seek expert assistance..any exp...

...e 444 orphan 302 tw 152 alloc 451 mem 5280 UDP: inuse 4 RAW: inuse 0 FRAG: inuse 0 memory 0 root at dl:~# netstat -tan | awk '{print $6}' | sort | uniq -c 2 CLOSE_WAIT 121 CLOSING 1 established) 109 ESTABLISHED 17 FIN_WAIT1 9 FIN_WAIT2 1 Foreign 300 LAST_ACK 20 LISTEN 2 SYN_RECV 433 TIME_WAIT It also doesn't seem to be out of file descriptors but I'm not 100% sure on that. And even if it were, wouldn't that produce an error, not hang? It does seem to be somewhat related to the number of connections lighttpd is serving. I ca...

This is the next version of my patch series for teaching DRM how to automatically create debugfs nodes for drivers with MST topologies. This was originally intended just for nouveau, but has since been expanded to all DRM drivers. Cc: Maarten Lankhorst <maarten.lankhorst at linux.intel.com> Cc: Daniel Stone <daniel at fooishbar.org> Lyude Paul (4): drm/debugfs: Add support for

I have a server with an asterisk ss7 link connected to a Siemens working well for over a year. A few days ago I started having problems with signaling. I found the following logs in / var / log / messages Sep 12 11:49:25 call3 kernel: [1018427.030959] dahdi: Master changed to TE2/0/2 Sep 12 11:49:25 call3 kernel: [1018427.120740] dahdi: Master changed to TE2/0/1 Sep 12 11:49:26 call3 kernel:

This series cleans up duplicated code for replacing firmware FB driver with proper DRI driver and adds handover support to Tegra driver. This is a sligtly updated version of a series sent on 24 Nov 2017. --- v2: - rebased on current drm-next - dropped staging/sm750fb changes - added kernel docs for DRM helpers v3: - move kerneldoc to fbdev, where functions are implemented - split kerneldoc

This series cleans up duplicated code for replacing firmware FB driver with proper DRI driver and adds handover support to Tegra driver. This is a sligtly updated version of a series sent on 24 Nov 2017. --- v2: - rebased on current drm-next - dropped staging/sm750fb changes - added kernel docs for DRM helpers v3: - move kerneldoc to fbdev, where functions are implemented - split kerneldoc

This is the next version of https://patchwork.freedesktop.org/series/46815/ With a lot more thought put into it so as to avoid the potential deadlock scenarios I missed. This also required fixing some bogus DRM helper usage. Try and deadlock me now, nouveau. I dare you!!! Lyude Paul (8): drm/nouveau: Fix bogus drm_kms_helper_poll_enable() placement drm/nouveau: Enable polling even if we

I''m having a problem with the Shorewall firewall and CUPS printing interfering with each other. My Linux firewall machine is acting as both a CUPS server and client for all of my tests. Shorewall 2.0.13 CUPS 1.1.22-2 Linux kernel 2.6.9 CUPS was working fine to print to my Epson C84 (network connected via a Netgear PS101 print server using lpd://PS101.IP.address/raw ) until I