On Monday 24 January 2005 11:28, Shachar Shemesh wrote:
> I see a large number of connections in "SYN_RECEIVED" state. In fact,
> all port 80 connections are in this state. Running a sniffer reveals
> that a SYN is received, a SYN+ACK sent. Then an ACK is received (the
> sniffer is running on the server, so this is not a question of network
> routes or something), followed by the request. The server, however, does
> not pass this packet through. The connection stays in "SYN_REC", and the
> request is not acknowledged. I even see the request retransmitted.
Interesting... if you have the exact apache pid's related
to these (via netstat -p option) and verify if they are
stuck inside accept() or select():
- If they are, then it looks like a kernel problem, since
the 3-way handshake is done (and the remote side believe
so as well [the retransmit requests]), but the kernel
does not return from accpet()/select() as it should.
- If the process is doing something else, than it looks like
an application bug. I.e: the connections are in the listen
queue and the application hasn't accepted them. If this is
the case, connecting to the server (even via telnet to
port 80) more times then the listen queue size -- should
return "connection refused" to the client -- does it?
--
Oron Peled Voice/Fax: +972-4-8228492
[EMAIL PROTECTED] http://www.actcom.co.il/~oron
ICQ UIN: 16527398
May the Source be with you!
=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
