Vanilla Netrek Server Development Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[VANILLA-L:711] Re: [VANILLA-L:710] Solaris bug?
Bob Tanner wrote:
> When I do a netstat I get hundreds of:
> mage.2592 <remote hostname>.<port> 7884 15 8760 0 CLOSE_WAIT
Yes, CLOSE_WAIT state is essential to TCP/IP, you can't get rid of it,
but I find it hard to believe that it ties up a file descriptor. I
thought the file descriptor would be freed as soon as you close() the
socket.
Check output of newstartd for other reasons for the error. If you are
on 2.7pl6 or later, you can restart newstartd without impacting a
running game ... restart it and watch it's output.
Massive connections as an attack should be worked around by increasing
the number of outstanding connections allowed. Note that the source
address was not forged if those connections are in ESTABLISHED state for
any length of time.
Do these connections show up in "log"?
Add them to the ban list for a start.
--
James Cameron (cameron@stl.dec.com)
Digital Equipment Corporation (Australia) Pty. Ltd. A.C.N. 000 446 800
+
++ Vanilla-l Mailing List ++
To unsubscribe: send "unsubscribe vanilla-l" to majordomo@real-time.com
For more information: http://archives.real-time.com
Follow-Ups:
References: