Re: netstat -a help

From: Adams Kevin J (kevin.adams@PHS.COM)
Date: Thu Apr 15 2004 - 15:42:31 EDT


Try http://pdslib4aix.seas.ucla.edu/aixpdslib.html

Kevin Adams
PacifiCare Behavioral Health
Principal Systems Analyst
AIX CATE

-----Original Message-----
From: IBM AIX Discussion List [mailto:aix-l@Princeton.EDU]On Behalf Of
Bob.Kelley@BRINKSINC.COM
Sent: Thursday, April 15, 2004 12:11 PM
To: aix-l@Princeton.EDU
Subject: Re: [aix-l] netstat -a help

Holger what id/psswd do we use for that site?

Bobby Kelley Jr.
972-877-5341

|---------+---------------------------->
| | Holger.VanKoll@SW|
| | ISSCOM.COM |
| | Sent by: IBM AIX |
| | Discussion List |
| | <aix-l@Princeton.|
| | EDU> |
| | |
| | |
| | 04/15/2004 11:59 |
| | AM |
| | Please respond to|
| | IBM AIX |
| | Discussion List |
| | |
|---------+---------------------------->

>---------------------------------------------------------------------------
------------------------------------------------------------------|
  |
|
  | To: aix-l@Princeton.EDU
|
  | cc:
|
  | Subject: Re: netstat -a help
|

>---------------------------------------------------------------------------
------------------------------------------------------------------|

use lsof to see which app is listening

lsof -i:36300

ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/

use tcpdump to find out which nodes communicate there, f.e.

tcpdump -Ipxvi your_interface port 3700

btw a "udp connection" does not exist - you will always see *.* as
foreign address

-----Original Message-----
From: IBM AIX Discussion List [mailto:aix-l@Princeton.EDU] On Behalf Of
Jason delaFuente
Sent: Thursday, April 15, 2004 6:42 PM
To: aix-l@Princeton.EDU
Subject: netstat -a help

On system A the following command
    netstat -a|grep 3700
shows
    udp4 0 0 *.3700 *.*

On system B I see the following with the same command
   udp4 36300 0 *.3700 *.*

As you can see the second machine has packets sitting in the receive
buffer. They do not go away. We had an application that was
experiencing problems (locked up) on Node B and ended up doing an HACMP
failover to Node A. The first node DID NOT have this entry in its
netstat output before the failover but it does now, the rec buffers are
empty. The entry on Node B went away when the application failed over.
I'm trying to find out where exactly this connection is coming from.
Already checked in /etc/services and there is nothing defined for 3700.
Does anyone have any suggestions.

Thanks!

Jason de la Fuente

NOTICE TO BRINK'S EMPLOYEES:
All electronic mail communications composed, sent, received or stored on or
through Brink's equipment are subject to the Brink's Electronic
Communications Policy. Employees should have no expectation of privacy in
their use of the Company's electronic mail system.

This electronic message transmission, including any attachments, contains information from PacifiCare Health Systems Inc. which may be confidential or privileged. The information is intended to be for the use of the individual or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited.
If you have received this electronic transmission in error, please notify the sender immediately by a "reply to sender only" message and destroy all electronic and hard copies of the communication, including attachments.



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 22:17:50 EDT