Results 1 to 3 of 3
  1. #1
    Join Date
    Sep 2002
    Posts
    265

    large number for netstat -n | grep :80 |wc -l?

    netstat -n | grep :80 |wc -l
    1952

    netstat -na|grep ESTABLISHED|wc -l
    26

    ps -ef|grep httpd|wc -l
    62

    what do these number mean? especially the number 1952? how come it is so large? how can I reduce it?

    is there anything wrong? Am I under DOS attack?

    the top command output:

    00:08:52 up 32 days, 26 min, 1 user, load average: 0.49, 0.50, 0.39
    245 processes: 243 sleeping, 2 running, 0 zombie, 0 stopped
    CPU states: cpu user nice system irq softirq iowait idle
    total 2.9% 0.0% 2.2% 0.0% 0.0% 0.0% 94.8%
    Mem: 1026112k av, 897100k used, 129012k free, 0k shrd, 69476k buff
    681472k active, 162148k inactive
    Swap: 2096440k av, 17256k used, 2079184k free 534224k cached

    PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
    23902 nobody 15 0 28328 12M 9668 S 1.4 1.2 0:26 0 httpd
    20542 mysql 16 0 114M 83M 1548 S 0.7 8.3 0:29 0 mysqld
    22309 nobody 16 0 28268 12M 9040 S 0.7 1.2 0:23 0 httpd
    23924 nobody 16 0 28192 12M 9452 S 0.7 1.2 0:22 0 httpd
    25271 mysql 16 0 114M 83M 1548 S 0.7 8.3 0:04 0 mysqld
    27150 mysql 16 0 114M 83M 1548 S 0.7 8.3 0:00 0 mysqld
    29262 root 16 0 4212 1276 900 R 0.7 0.1 0:00 0 top
    1 root 16 0 1584 228 208 S 0.0 0.0 0:03 0 init
    2 root RT 0 0 0 0 SW 0.0 0.0 0:00 0 migration/0
    3 root 34 19 0 0 0 SWN 0.0 0.0 0:00 0 ksoftirqd/0
    4 root 10 -5 0 0 0 SW< 0.0 0.0 0:00 0 events/0
    5 root 11 -5 0 0 0 SW< 0.0 0.0 0:00 0 khelper
    10 root 10 -5 0 0 0 SW< 0.0 0.0 0:00 0 kthread
    18 root 20 -5 0 0 0 SW< 0.0 0.0 0:00 0 kacpid
    97 root 10 -5 0 0 0 SW< 0.0 0.0 8:18 0 kblockd/0
    110 root 25 0 0 0 0 SW 0.0 0.0 0:00 0 khubd
    185 root 20 -5 0 0 0 SW< 0.0 0.0 0:00 0 aio/0
    184 root 15 0 0 0 0 SW 0.0 0.0 21:22 0 kswapd0
    774 root 25 0 0 0 0 SW 0.0 0.0 0:00 0 kseriod
    846 root 10 -5 0 0 0 SW< 0.0 0.0 0:00 0 ata/0
    850 root 16 0 0 0 0 SW 0.0 0.0 0:00 0 scsi_eh_0
    851 root 17 0 0 0 0 SW 0.0 0.0 0:00 0 scsi_eh_1
    869 root 16 0 0 0 0 SW 0.0 0.0 0:00 0 khpsbpkt
    887 root 15 0 0 0 0 SW 0.0 0.0 0:05 0 kjournald
    1475 root 15 0 0 0 0 SW 0.0 0.0 0:59 0 kjournald
    1476 root 15 0 0 0 0 SW 0.0 0.0 0:04 0 kjournald
    1477 root 15 0 0 0 0 SW 0.0 0.0 1:24 0 kjournald
    1478 root 15 0 0 0 0 SW 0.0 0.0 1:54 0 kjournald
    1988 root 16 0 1636 336 264 S 0.0 0.0 0:08 0 syslogd
    1992 root 16 0 1588 240 196 S 0.0 0.0 0:00 0 klogd
    2030 root 16 0 1640 172 136 S 0.0 0.0 0:00 0 mdadm
    2085 root 21 0 1580 196 192 S 0.0 0.0 0:00 0 acpid
    2278 named 17 0 32464 2720 1044 S 0.0 0.2 2:19 0 named
    2290 root 16 0 3712 464 364 S 0.0 0.0 0:12 0 sshd
    2327 root 17 0 6108 1076 660 S 0.0 0.1 0:27 0 chkservd
    2387 mailnull 16 0 6664 1884 1548 S 0.0 0.1 0:10 0 exim
    2427 mailnull 15 0 6664 1844 1520 S 0.0 0.1 0:00 0 exim
    2463 root 16 0 6112 404 312 S 0.0 0.0 0:01 0 pure-ftpd
    2472 root 16 0 2972 668 448 S 0.0 0.0 0:12 0 antirelayd
    2475 root 16 0 5652 184 144 S 0.0 0.0 0:00 0 pure-authd
    2498 root 16 0 1652 392 324 S 0.0 0.0 0:01 0 crond
    2833 root 16 0 1740 560 472 S 0.0 0.0 0:00 0 portsentry
    3059 cpanel 20 0 3988 4 0 S 0.0 0.0 0:00 0 stunnel-4.04loc
    3064 root 18 0 1576 148 144 S 0.0 0.0 0:00 0 mingetty
    3065 root 18 0 1576 148 144 S 0.0 0.0 0:00 0 mingetty
    3066 root 18 0 1576 148 144 S 0.0 0.0 0:00 0 mingetty
    3067 root 18 0 1576 148 144 S 0.0 0.0 0:00 0 mingetty
    3068 root 18 0 1576 148 144 S 0.0 0.0 0:00 0 mingetty
    3069 root 18 0 1576 148 144 S 0.0 0.0 0:00 0 mingetty


    Thanks.

  2. #2
    Join Date
    Jul 2001
    Location
    Singapore
    Posts
    1,790
    That is not all in the ESTABLISHED state as some will be in SYN_RECV, SYN_SENT, TIME_WAIT, FIN_WAIT2 etc... read a little about tcp connections at http://www.faqs.org/docs/iptables/tcpconnections.html
    Giam Teck Choon
    :: Join choon.net Community today to share your tips and tricks on server issues please ::
    :: Singapore Dedicated Servers :: Singapore Virtual Private Servers :: Linux/FreeBSD Server Management ::

  3. #3
    Join Date
    Sep 2002
    Posts
    265
    after checking
    netstat -na |grep :80 |sort
    there are lots of time_wait connections, can I reduce them?

    my conf settings:

    Timeout 150
    KeepAlive off
    MaxKeepAliveRequests 0
    KeepAliveTimeout 10
    MinSpareServers 10
    MinSpareServers 40
    StartServers 10
    MaxClients 250
    MaxRequestPerChild 10000

    Thanks.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •