From: Vipin Khushu (vkhushu@GUERNSEYOP.COM)
Date: Tue Dec 02 2003 - 13:22:59 EST
That helps.... Thank you.
What about CLOSE_WAIT, how long before that transitions to LAST_ACK?
Active Internet connections
Proto Recv-Q Send-Q Local Address Foreign Address
(state)
tcp4 32 0 companyname.company.8765 123.345.456.678..1767
CLOSE_WAIT
This operation has been persistent for several minutes...........
-----Original Message-----
From: Bob Booth - UIUC [mailto:booth@UIUC.EDU]
Sent: Tuesday, December 02, 2003 1:51 PM
To: aix-l@Princeton.EDU
Subject: Re: interpreting netstat results
It is part of a 'passive close' TCP operation. LAST_ACK state should
transition to CLOSED in 30 seconds.
The state transition looks like this:
ESTABLISHED --> CLOSED_WAIT --> LAST_ACK --> CLOSED
hope this helps.
bob
On Tue, Dec 02, 2003 at 12:36:33PM -0500, Vipin Khushu wrote:
> Does anyone know what to make of the "LAST_ACK" in the output of netstat?
>
> # netstat
>
> Active Internet connections
>
> Proto Recv-Q Send-Q Local Address Foreign Address
> (state)
> tcp4 0 0 companyname.company.8765 123.456.789......
> LAST_ACK
>
> where 8765 is the port number.
>
> Our shopping website was non-functional while the LAST_ACK state
persisted.
>
> Upon waiting a few minutes, the following change occurred without any
> intervention on our part (which allowed the site to function normally once
> again):
>
> # netstat
>
> Active Internet connections
>
> Proto Recv-Q Send-Q Local Address Foreign Address
> (state)
> tcp4 0 0 companyname.company.8765 *.*
> LISTEN
> tcp4 0 0 companyname.company.8766 *.*
> LISTEN
>
> man netstat did not have anything useful (based on a quick review) that
> would explain how to interpret the (state) messages.
>
> TIA
>
> Vipin
This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 22:17:23 EDT