search for: syn_recv

...ed. Sep 2 05:26:50 localhost kernel: ip_conntrack: table full, dropping packet. ... [root at localhost log]# netstat -n Active Internet connections (w/o servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 localhost:80 124.234.65.55:2058 SYN_RECV tcp 0 0 localhost:80 211.103.128.148:3232 SYN_RECV tcp 0 0 localhost:80 59.56.127.21:1320 SYN_RECV tcp 0 0 localhost:80 204.15.74.53:2661 SYN_RECV tcp 0 0 localhost:80 124.135.20.40:2279 SYN_RECV tcp...

OK, Something wacky. I'm getting many, many of these, it just keeps building: --snip-- netstat -vat: tcp 0 0 192.168.103.99:http statusurl.e-gold.com:57015 SYN_RECV tcp 0 0 192.168.103.99:http statusurl.e-gold.com:26377 SYN_RECV tcp 0 0 192.168.103.99:http statusurl.e-gold.com:64279 SYN_RECV tcp 0 0 192.168.103.99:http statusurl.e-gold.com:27807 SYN_RECV tcp 0 0 192.168.103.99:http...

Hello, today I came to my job and I noticed that apache is not running. When I tried to run it, I learned that port 80 uis already in use. Using netstat -aenpl I tried to learn wha proces is using port 80, but I only leatned this: tcp 0 0 172.16.0.1:80 172.16.0.1:35664 SYN_RECV 0 0 - tcp 0 0 172.16.0.1:80 172.16.0.1:43464 SYN_RECV 0 0 - tcp 0 0 172.16.0.1:80 172.16.0.1:33764 SYN_RECV 0 0 - tcp 0 0 172.16.0.1:80 172.16.0.1:51384 SYN_RECV 0 0 - tcp 0 0 172.16.0.1:80 172.16.0.1:47699 SYN_RECV 0 0 - tcp 0 0 172.16.0.1:80 172.16.0.1:47791 SYN_RECV 0 0 - tcp 0 0 my.pub.lic.ip:8...

...en dovecot stops accepting connections, I checked netstat and found this: > > [root at hosting1 ~]# netstat -an | grep 993 > tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN > tcp 0 0 65.39.x.x:993 184.101.x.x:36351 SYN_RECV > tcp 0 0 65.39.x.x:993 107.212.x.x:51487 SYN_RECV > tcp 0 0 65.39.x.x:993 107.212.x.x:51488 SYN_RECV > tcp 0 0 65.39.x.x:993 184.101.x.x:44650 SYN_RECV > > This told me it wasn...

Permissions to the logs are fine. In /var/log/maillog I do see dovecot logging in there but nothing that indicates why there?s a failure. The one thing I thought of is if there?s too many connections but I am using a firewall that blocks excessive attempts but that?s fine. Netstat shows a bunch of CLOSE_WAIT though. I?ll try the debug level and see what I find. Thanks, Steffan Cline steffan at

Hi, I am not sure to report this as a bug. so mailing to the list. I have sshd(openssh3.5p1) server running on my router and when i run tcpjunk to that port, sshd gets killed after some time 192.168.71.1 is my sshd server and 192.168.71.4 is my client from where i send my dos attack This is the tcpjunk command i gave to the ssh server #tcpjunk -s 192.168.71.1 -p 22 -c req -i 100 req session

...> When dovecot stops accepting connections, I checked netstat and found this: > > [root at hosting1 ~]# netstat -an | grep 993 > tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN > tcp 0 0 65.39.x.x:993 184.101.x.x:36351 SYN_RECV > tcp 0 0 65.39.x.x:993 107.212.x.x:51487 SYN_RECV > tcp 0 0 65.39.x.x:993 107.212.x.x:51488 SYN_RECV > tcp 0 0 65.39.x.x:993 184.101.x.x:44650 SYN_RECV > > This told me it wasn?t too many conne...

...epting connections, I checked netstat and found this: > > > > [root at hosting1 ~]# netstat -an | grep 993 > > tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN > > tcp 0 0 65.39.x.x:993 184.101.x.x:36351 SYN_RECV > > tcp 0 0 65.39.x.x:993 107.212.x.x:51487 SYN_RECV > > tcp 0 0 65.39.x.x:993 107.212.x.x:51488 SYN_RECV > > tcp 0 0 65.39.x.x:993 184.101.x.x:44650 SYN_RECV are you sure th...

...t2525 doesn''t :( This seems to work to a point, traffic goes out via eth2 and ACKs come back but they never make it to eth1 and InternalhostB :( Nothing in the firewall logs either and the connection tracking record in /proc/net/ip_conntrack looks ok doesn''t it? tcp 6 59 SYN_RECV src=INTERNALHOSTA dst=80.130.222.48 sport=48664 dport=2525 src=80.130.222.48 dst=192.168.0.142 sport=2525 dport=48664 use=1 Suggestions? Alex

...t stops accepting connections, I checked netstat and found this: >> >> [root at hosting1 ~]# netstat -an | grep 993 >> tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN >> tcp 0 0 65.39.x.x:993 184.101.x.x:36351 SYN_RECV >> tcp 0 0 65.39.x.x:993 107.212.x.x:51487 SYN_RECV >> tcp 0 0 65.39.x.x:993 107.212.x.x:51488 SYN_RECV >> tcp 0 0 65.39.x.x:993 184.101.x.x:44650 SYN_RECV >> >> This told me it w...

...little further. When dovecot stops accepting connections, I checked netstat and found this: [root at hosting1 ~]# netstat -an | grep 993 tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN tcp 0 0 65.39.x.x:993 184.101.x.x:36351 SYN_RECV tcp 0 0 65.39.x.x:993 107.212.x.x:51487 SYN_RECV tcp 0 0 65.39.x.x:993 107.212.x.x:51488 SYN_RECV tcp 0 0 65.39.x.x:993 184.101.x.x:44650 SYN_RECV This told me it wasn?t too many connections c...

...tos: set socket 3 IP_TOS 0x48 debug2: fd 3 setting O_NONBLOCK <----------- hangs here debug1: connect to address 10.0.0.6 port 1022: Connection timed out ssh: connect to host 10.0.0.6 port 1022: Connection timed out Netstat output shows client is stuck after receiving the syn-ack. It remains in SYN_RECV status. //client root at node2:~# netstat -ant | grep 1022 tcp 0 0 10.0.0.6:1022 10.0.0.5:52836 SYN_RECV //server root at node1:~# netstat -ant | grep 1022 tcp 0 0 10.0.0.5:1022 0.0.0.0:* LISTEN tcp 0 0 10.0.0.5:39668...

...T [5:268] -A PREROUTING -p tcp -m tcp --dport 1416 -j CT --timeout test-tcp-2 -A PREROUTING -p tcp -m tcp --dport 1414 -j CT --timeout test-tcp COMMIT # nfct list timeout .test-tcp = { .l3proto = 2, .l4proto = 6, .policy = { .SYN_SENT = 120, .SYN_RECV = 60, .ESTABLISHED = 100, .FIN_WAIT = 120, .CLOSE_WAIT = 10, .LAST_ACK = 30, .TIME_WAIT = 120, .CLOSE = 10, .SYN_SENT2 = 120, .RETRANS = 300, .UNACKNOWLEDG...

...on the linksys router. It does accept traffic, but i''m trying to dnat web traffic and ssl ports (among others), but it doesn''t seem to work. If i change the rules to log info, i do see it coming in. If i do a netstat on my other linux webserver, i see it coming in with the SYN_RECV state, but nothing after that. Here''s the log entry from my shorewall machine: Jan 2 13:34:05 MachineName kernel: Shorewall:net_dnat:DNAT:IN=eth0 OUT= MAC=00:00:00:00:00... SRC=x.x.x.x DST=192.168.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=45682 PROTO=TCP SPT=54945 DPT=80 WINDOW=65535...

Anybody else experience the need to restart puppetmasterd before a node can register itself. I''ve been cleaning up my installation here on client nodes and every once and a while I find myself needing to restart the puppetmaster daemon. A client node attempts to connect and never does. A restart fixes things. There doesn''t seem to be anything useful in the error messages

...ction request to my mailserver correctly, so port forwarding on the router is ok, as my mailserver gets a connection request from the client. Proof: "netstat -nt" shows me: Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 10.0.0.1:143 10.196.124.7:1024 SYN_RECV So, my server gets a connection request on port 143 from my client PC, but then nothing happens. By nothing I mean, that nothing gets written into /var/log/mail.log and my email client (Thunderbird) gets a connection timeout. Any ideas why dovecot is refusing connections? How can I solve this pro...

.... Currently I have the system configured to take a lower amount of traffic, hovering at around 47% CPU, at around 833 req/s and it has 43k connections in these states: #### state ------------------ 65 CLOSING 94 ESTABLISHED 172 FIN_WAIT1 50 FIN_WAIT2 10 LAST_ACK 497 SYN_RECV 43480 TIME_WAIT On a side note, the 'active tcp sockets' reported by sar seems wildly inaccurate, it reports only ~10 active tcp sockets, it barely varies from the system being idle to the system being maxxed out. The docs I can find says seek expert assistance..any experts reading this...

...1 mem 5280 UDP: inuse 4 RAW: inuse 0 FRAG: inuse 0 memory 0 root at dl:~# netstat -tan | awk '{print $6}' | sort | uniq -c 2 CLOSE_WAIT 121 CLOSING 1 established) 109 ESTABLISHED 17 FIN_WAIT1 9 FIN_WAIT2 1 Foreign 300 LAST_ACK 20 LISTEN 2 SYN_RECV 433 TIME_WAIT It also doesn't seem to be out of file descriptors but I'm not 100% sure on that. And even if it were, wouldn't that produce an error, not hang? It does seem to be somewhat related to the number of connections lighttpd is serving. I can shut down lighttpd and the pro...

I'm having trouble accessing the website... is it currently down? -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.llvm.org/pipermail/llvm-dev/attachments/20120630/da0d8dbd/attachment.html>

...ue Nov 28 09:53:41 2017] (pid=2286) [ERROR] inject-add2: Invalid argument Tue Nov 28 09:53:41 2017 tcp 6 SYN_SENT src=192.168.2.10 dst=x.x.x.x sport=39554 dport=443 [UNREPLIED] [Tue Nov 28 09:53:41 2017] (pid=2286) [ERROR] inject-upd1: Invalid argument Tue Nov 28 09:53:41 2017 tcp 6 SYN_RECV src=192.168.2.10 dst=x.x.x.x sport=39554 dport=443 [Tue Nov 28 09:53:41 2017] (pid=2286) [ERROR] inject-upd1: Invalid argument Tue Nov 28 09:53:41 2017 tcp 6 ESTABLISHED src=192.168.2.10 dst=x.x.x.x sport=39554 dport=443 [ASSURED] [Tue Nov 28 09:53:41 2017] (pid=2286) [ERROR] inject-upd1: I...