Re: netstat -a help

From: Bob.Kelley@BRINKSINC.COM
Date: Thu Apr 15 2004 - 15:10:36 EDT


Holger what id/psswd do we use for that site?

Bobby Kelley Jr.
972-877-5341

|---------+---------------------------->
| | Holger.VanKoll@SW|
| | ISSCOM.COM |
| | Sent by: IBM AIX |
| | Discussion List |
| | <aix-l@Princeton.|
| | EDU> |
| | |
| | |
| | 04/15/2004 11:59 |
| | AM |
| | Please respond to|
| | IBM AIX |
| | Discussion List |
| | |
|---------+---------------------------->
>---------------------------------------------------------------------------------------------------------------------------------------------|
  | |
  | To: aix-l@Princeton.EDU |
  | cc: |
  | Subject: Re: netstat -a help |
>---------------------------------------------------------------------------------------------------------------------------------------------|

use lsof to see which app is listening

lsof -i:36300

ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/

use tcpdump to find out which nodes communicate there, f.e.

tcpdump -Ipxvi your_interface port 3700

btw a "udp connection" does not exist - you will always see *.* as
foreign address

-----Original Message-----
From: IBM AIX Discussion List [mailto:aix-l@Princeton.EDU] On Behalf Of
Jason delaFuente
Sent: Thursday, April 15, 2004 6:42 PM
To: aix-l@Princeton.EDU
Subject: netstat -a help

On system A the following command
    netstat -a|grep 3700
shows
    udp4 0 0 *.3700 *.*

On system B I see the following with the same command
   udp4 36300 0 *.3700 *.*

As you can see the second machine has packets sitting in the receive
buffer. They do not go away. We had an application that was
experiencing problems (locked up) on Node B and ended up doing an HACMP
failover to Node A. The first node DID NOT have this entry in its
netstat output before the failover but it does now, the rec buffers are
empty. The entry on Node B went away when the application failed over.
I'm trying to find out where exactly this connection is coming from.
Already checked in /etc/services and there is nothing defined for 3700.
Does anyone have any suggestions.

Thanks!

Jason de la Fuente

NOTICE TO BRINK'S EMPLOYEES:
All electronic mail communications composed, sent, received or stored on or
through Brink's equipment are subject to the Brink's Electronic
Communications Policy. Employees should have no expectation of privacy in
their use of the Company's electronic mail system.



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 22:17:50 EDT