From: Holger.VanKoll@SWISSCOM.COM
Date: Tue Dec 02 2003 - 13:52:57 EST
last_ack means both sides sent "fin" and wait for it to be acknowledged
(as far as I remember)
see socket-faq for details
http://www.ibrado.com/sock-faq/
your first netstat-output show 1 connection in that state
your 2nd output show two sockets listening for connections
there is a option "tcp_finwait2" for the no-command, but i could not
find docu for it
-----Original Message-----
From: Vipin Khushu [mailto:vkhushu@GUERNSEYOP.COM]
Sent: Tuesday, December 02, 2003 6:37 PM
To: aix-l@Princeton.EDU
Subject: interpreting netstat results
Does anyone know what to make of the "LAST_ACK" in the output of
netstat?
# netstat
Active Internet connections
Proto Recv-Q Send-Q Local Address Foreign Address
(state)
tcp4 0 0 companyname.company.8765 123.456.789......
LAST_ACK
where 8765 is the port number.
Our shopping website was non-functional while the LAST_ACK state
persisted.
Upon waiting a few minutes, the following change occurred without any
intervention on our part (which allowed the site to function normally
once
again):
# netstat
Active Internet connections
Proto Recv-Q Send-Q Local Address Foreign Address
(state)
tcp4 0 0 companyname.company.8765 *.*
LISTEN
tcp4 0 0 companyname.company.8766 *.*
LISTEN
man netstat did not have anything useful (based on a quick review) that
would explain how to interpret the (state) messages.
TIA
Vipin
This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 22:17:23 EDT