Welcome to Linux.
Originally Posted by ayhanne
On our side we still can see that the status of connection of that client is ESTABLISHED even when the client already disconnected. How can we check if there are ghost connections? Why we didn't see the status as close_wait or time_wait or other status? Is there a way we can configure the settings on linux to display time_wait, close_wait or other connection status that will tell us that the client was disconnected?
TMK the netstat
command by default will show TIME_WAIT after the connection has been closed. I am not sure if the length of time is configurable or not. If you are not seeing it, my guess is that the remote host didn't actually do the handshake to terminate the connection. (You could check this by running a packet sniffer such as tcpdump
You might get some more knowledgable responses to you post if you request that this thread be moved to the networking
forum. (Please don't double post!) You can do that by clicking the REPORT button at the bottom (near the EDIT and QUOTE buttons) of your post.