lots of connections in SYN_RECV state

[Valdis.Kletnieks at vt.edu]

On Fri, 07 Nov 2014 23:11:26 +0530, Puneet Agarwal said:

> I use linux kernel 2.6. I have enabled SYN cookies already. But that does not
> seem to solve the problem. Overall request latency is very high with these many
> half open connections.

So, out of curiosity, where are all these half open connections coming
from?  Are they from addresses in your local network?  Outside sites that
*should* be connecting?  Places you've never heard and and probably *shouldn't*
be connecting?

(Also, if you have properly implemented syncookies, you shouldn't *have* any
half-open connections.  That's the whole point of syncookies....)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 848 bytes
Desc: not available
Url : http://lists.kernelnewbies.org/pipermail/kernelnewbies/attachments/20141107/85f1f4aa/attachment.bin