Large # of "Active UNIX domain sockets (w/o servers)" + network stalls
Linux - NetworkingThis forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
Large # of "Active UNIX domain sockets (w/o servers)" + network stalls
I am running an Ubuntu system that I just updated to Feisty. The server runs DHCP, DNS, postfix, MySQL and apache for my personal site, and is located behind a NAT router.
I have noticed several times in the last week that the server's network services stall. No DNS, mail, http or samba for a minute or two. But I can ping the web from the server directly, and other clients have no problem accessing the web through the router (as long as they don't need a DNS request from the server first).
My mail.log and syslog look OK, but running netstat gives a HUGE list, and I am not sure what to make of it...
(I have aliased the usernames with USERX)
Any ideas? This is a little out of my experience...
I have ~200 lines returned from netstat -n, so I don't think that you have that large a number of sockets. Is there anything you can point to as to a typical time that this occurs?
I was trying to determine if there were any scripts running at that point, log rotation, dhcp refreshing, etc. I did see that Google is scanning your site. Is the netstat -n from above taken while you are experiencing the problem?
Good question. I haven't been able to catch the system when it was unresponsive and run the netstat command. But things seem a little sluggish in general.
Can you tell me what exactly this output means? Why do I have so many sockets opened? Should I be concerned?
Sorry to bug you, but I can't seem to get any meaningful info out of the man pages.
is telling you that you have a mysql socket opened with a connection to some other app (I'm guessing a web app) that is getting data from it. Having a lot of unix sockets opened isn't something to worry about as long as the last part seems to be something that you recognize (or if you don't recognize a quick search will tell you what it is). They are basically things that are running on your system. The tcp connections are network connections you are making to another server or another client is making to your system. The foreign address will tell you the remote system and port. If you look at the port it will generally tell you what type of connection it is. You can look up the port by greping for it in /etc/services or by looking at:
I'm not seeing anything unusual in this particular netstat. By getting one that is taken during the slowdown would be more useful if in fact it is a network issue.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
