Re: How can I get >100 connections in FIN_WAIT_2 state from the same IP?

2009-10-13 Thread Jeff Laine
On Tue,13-10-2009 [17:50:00], Michael Powell wrote: > Chuck Swiger wrote: > > > On Oct 13, 2009, at 10:33 AM, Martin Turgeon wrote: > >> I would like to know if anyone knows the reason why I get a lot of > >> connections (more than 100) from the same IP in FIN_WAIT_2 state. > > > > That IP is pro

Re: How can I get >100 connections in FIN_WAIT_2 state from the same IP?

2009-10-13 Thread Michael Powell
Chuck Swiger wrote: > On Oct 13, 2009, at 10:33 AM, Martin Turgeon wrote: >> I would like to know if anyone knows the reason why I get a lot of >> connections (more than 100) from the same IP in FIN_WAIT_2 state. > > That IP is probably running a web proxy or possibly some kind of > spider. It c

Re: How can I get >100 connections in FIN_WAIT_2 state from the same IP?

2009-10-13 Thread Chuck Swiger
On Oct 13, 2009, at 10:33 AM, Martin Turgeon wrote: I would like to know if anyone knows the reason why I get a lot of connections (more than 100) from the same IP in FIN_WAIT_2 state. That IP is probably running a web proxy or possibly some kind of spider. It could also be malicious, trying

How can I get >100 connections in FIN_WAIT_2 state from the same IP?

2009-10-13 Thread Martin Turgeon
Hi everyone, I would like to know if anyone knows the reason why I get a lot of connections (more than 100) from the same IP in FIN_WAIT_2 state. Refering to this diagram (http://www.jxos.org/Projects/TCP/tcpstate.html), the connection enter in FIN_WAIT_1 when the server closes the connection an