Re: dst cache overflow

From: kuznet@ms2.inr.ac.ru
Date: Tue Jan 11 2000 - 15:03:02 EST


Hello!

> Doing a 'netstat -t -n -o' says that there are 5364 connections in
> LAST_ACK state, is this some kind of DOS or what?

It depends. The fact is that you have "bad" clients, whether
it is deliberate or not. Valid WEB connections cannot finish
in LAST-ACK state.

LAST_ACK timeout is too long, and if clients close connection
and hide, corpeses will live for very long time (btw each of them may
eat 64K of memory, multiply by 5000!). Apache is not able
to detect and kill them, unfortunately.

> I have some information (netstat and some /proc output) if more
> information is needed.

Please, make "netstat -t -n -o|grep LAST_ACK" and send it (gzipped! 8))
me.

Alexey

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Sat Jan 15 2000 - 21:00:19 EST