LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   understanding netstat (https://www.linuxquestions.org/questions/linux-newbie-8/understanding-netstat-926813/)

-Karl- 01-31-2012 08:44 PM
understanding netstat
 
Hello,

My server has been loading slowly for the last few days and I'm trying to find out why.

We did receive a DDoS attack but it was quickly resolved, since then it hasn't quite been the same.

I've run netstat -nt and I'm not sure if this means anything but hopefully someone can help me out. Is it usual to see this? There are more, **.**.**.** is the servers IP.

Code:
tcp        0      0 **.**.**.**:8888          **.**.**.**:44501        TIME_WAIT
tcp        0      0 **.**.**.**:8888          **.**.**.**:44506        TIME_WAIT
tcp        0      0 **.**.**.**:8888          **.**.**.**:44507        TIME_WAIT
tcp        0      0 **.**.**.**:8888          **.**.**.**:44504        TIME_WAIT
tcp        0      0 **.**.**.**:8888          **.**.**.**:44505        TIME_WAIT
tcp        0      0 **.**.**.**:8888          **.**.**.**:44510        TIME_WAIT
tcp        0      0 **.**.**.**:8888          **.**.**.**:44511        TIME_WAIT
tcp        0      0 **.**.**.**:8888          **.**.**.**:44508        TIME_WAIT
tcp        0      0 **.**.**.**:8888          **.**.**.**:44509        TIME_WAIT

acid_kewpie 02-01-2012 01:56 PM
TIME_WAIT is a connection that has closed and is going to be purged by your system within about 30 seconds on average. In themselves they are utterly uninteresting. having too many of them can cause DDOS's though as they use up ports that new connections are unable to use.


All times are GMT -5. The time now is 05:07 PM.