tcp keepalive - why new connections have value slightly greater than value I just set.
 

Hi,
I have executed this command
sysctl -w net.ipv4.tcp_keepalive_time=2925
which reduces the keepalive time from the default 7200 seconds down to 2925 seconds.

But, for some reason, some new connections seem to start at a value of 2930 or thereabouts when I execute the command
netstat -an --timers | grep ESTAB

Can anyone explain this?

Thank you.

I think, with netstat, you're measuring the remaining interval
Try running this shell script, add to the grep to limit the output to one of the sockets that exhibits this behaviour
It gives me this output.
If you see the same thing, look at the application that's associated with the socket, since keep_alive can be manipulated by the application layer or the peer you're connected to

And BTW, good question for your second post.