[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
oversized [ports] section && 'stopped reporting'
- To: hobbit (at) hswn.dk
- Subject: oversized [ports] section && 'stopped reporting'
- From: "Jerry Yu" <jjj863 (at) gmail.com>
- Date: Fri, 4 Aug 2006 09:54:04 -0400
- Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:mime-version:content-type; b=Hb2+YQycwpuFJy2PpMEyGJXYxMFla7AjllHECl77lxrp/susv/UfHxpmeOrbaM50YEfNnblwHJkZ79C6l6mKdXvEDMCxUhnIyBjnmRfXVxlok4Avs1lcs8K13ejM3YM87a6J7zHjFOzZ/Nsi6FoGJeJ62BEI9b6W6i9JG0VOSnE=
one of our servers have up to 6000 TIME_WAIT tcp connections from time to
time. This got truncated, of course. I want to see them all. any quick way
to change the upper limit w/o recompilation ?
Also, for the same server, from time to time, certain checks 'stopped
reporting' [ files & msgs, in particular ] for some extended period,
sometimes over 35m, while other checks kept going. I wonder if the message
truncation triggered by the over-sized [ports] section caused this loss. Or
should I look elsewhere ? This 'reporting-stopped' symptoms occur with or
without an actual PORT check configured for the clients under questions.