rusty@BELCH.BERKELEY.EDU (Rusty Wright) (01/13/91)
Either the kernel isn't closing down connections properly or netstat is listing connectins that it shouldn't. The belch machine gets lots of ftp traffic. The last five ftp connections shown here have been shown by netstat for several weeks now (and there aren't any ftp daemons running that would correspond to them either). The Local Address 2323 socket one is a daemon program of mine and I can query the program to see what connections it has open and it doesn't list any active connections either, so that's another zombie connection. It's also interesting that these are all listed under the Foreign Address column with their numeric internet address rather than their symbolic name; there are plenty of other normal connections that netstat lists by their symbolic name. Active Internet connections Proto Recv-Q Send-Q Local Address Foreign Address (state) tcp 0 251 belch.20 192.41.214.73.50630 CLOSING tcp 0 251 belch.20 192.41.214.73.50631 CLOSING tcp 0 283 belch.20 192.41.214.73.50633 CLOSING tcp 0 229 belch.20 192.41.214.73.50635 CLOSING tcp 0 265 belch.20 192.41.214.73.50641 CLOSING tcp 0 265 belch.20 192.41.214.73.50643 CLOSING tcp 0 265 belch.20 192.41.214.73.50644 CLOSING tcp 0 0 belch.2323 134.106.4.4.9729 ESTABLISHED tcp 0 31 belch.20 129.79.199.186.51182 CLOSING tcp 0 132 belch.20 129.79.199.186.51183 CLOSING tcp 0 113 belch.20 129.79.199.186.51201 CLOSING tcp 0 195 belch.20 129.79.199.186.51203 CLOSING tcp 0 168 belch.20 129.79.199.186.51204 CLOSING