Red Hat ES 4 Update 5.<br>That's what I normally would think, but it doesn't make any sense that the source AND destination are both localhost or the local IP. It's as though the Hobbit server is trying to communicate with itself using network sockets. It would make more sense if either the source or destination was a client IP, but that isn't the case.<br>
<br><div class="gmail_quote">On Jan 29, 2008 10:15 AM, Hubbard, Greg L <<a href="mailto:greg.hubbard@eds.com">greg.hubbard@eds.com</a>> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div>
<div dir="ltr" align="left"><span><font color="#0000ff" face="Arial" size="2">What OS? Some operating systems allow network
connections to hang around a bit after disconnection. On Solaris you can
set a parameter to reduce the timeout period. Hobbit could trigger this
because each client connects to the server, sends a data blast, and then
disconnects.</font></span></div><br>
<blockquote style="margin-right: 0px;">
<div dir="ltr" align="left" lang="en-us">
<hr>
<font face="Tahoma" size="2"><b>From:</b> Gary Baluha [mailto:<a href="mailto:gumby3203@gmail.com" target="_blank">gumby3203@gmail.com</a>]
<br><b>Sent:</b> Tuesday, January 29, 2008 8:58 AM<br><b>To:</b>
<a href="mailto:hobbit@hswn.dk" target="_blank">hobbit@hswn.dk</a><br><b>Subject:</b> [hobbit] Large number of
TIME_WAITs<br></font><br></div><div><div></div><div class="Wj3C7c">
<div></div>I noticed something strange on my Hobbit server, though I'm not
sure if it's a problem or not. There are about 140 TIME_WAITs from the
local IP of the Hobbit server, and about 30 TIME_WAITs from localhost, all
using port 1984. They look something like
this:<br><br>0 0 <a href="http://1.2.3.4:42389" target="_blank">1.2.3.4:42389</a>
<a href="http://1.2.3.4:1984" target="_blank">1.2.3.4:1984</a>
TIME_WAIT<br>0 0 <a href="http://1.2.3.4:42394" target="_blank">1.2.3.4:42394</a>
<a href="http://1.2.3.4:1984" target="_blank">1.2.3.4:1984</a>
TIME_WAIT<br>0 0 <a href="http://1.2.3.4:42399" target="_blank">1.2.3.4:42399</a>
<a href="http://1.2.3.4:1984" target="_blank">1.2.3.4:1984</a>
TIME_WAIT<br>0 0 <a href="http://1.2.3.4:42396" target="_blank">1.2.3.4:42396</a>
<a href="http://1.2.3.4:1984" target="_blank">1.2.3.4:1984</a>
TIME_WAIT<br>0 0 <a href="http://1.2.3.4:42397" target="_blank">1.2.3.4:42397</a>
<a href="http://1.2.3.4:1984" target="_blank">1.2.3.4:1984</a>
TIME_WAIT<br><br>0 0 <a href="http://127.0.0.1:42310" target="_blank">127.0.0.1:42310</a>
<a href="http://127.0.0.1:1984" target="_blank">127.0.0.1:1984</a>
TIME_WAIT<br>0 0 <a href="http://127.0.0.1:42309" target="_blank">127.0.0.1:42309</a>
<a href="http://127.0.0.1:1984" target="_blank">127.0.0.1:1984</a>
TIME_WAIT<br>0 0 <a href="http://127.0.0.1:42315" target="_blank">127.0.0.1:42315</a>
<a href="http://127.0.0.1:1984" target="_blank">127.0.0.1:1984</a>
TIME_WAIT<br>0 0 <a href="http://127.0.0.1:42322" target="_blank">127.0.0.1:42322</a>
<a href="http://127.0.0.1:1984" target="_blank">127.0.0.1:1984</a>
TIME_WAIT<br>0 0 <a href="http://127.0.0.1:42320" target="_blank">127.0.0.1:42320</a>
<a href="http://127.0.0.1:1984" target="_blank">127.0.0.1:1984</a>
TIME_WAIT<br><br>There are also a few on various other
ports:<br>0 0 <a href="http://127.0.0.1:42246" target="_blank">127.0.0.1:42246</a>
<a href="http://127.0.0.1:29021" target="_blank">127.0.0.1:29021</a>
TIME_WAIT<br>0 0 <a href="http://127.0.0.1:42301" target="_blank">127.0.0.1:42301</a>
<a href="http://127.0.0.1:29023" target="_blank">127.0.0.1:29023</a>
TIME_WAIT<br>0 0 <a href="http://127.0.0.1:42362" target="_blank">127.0.0.1:42362</a>
<a href="http://127.0.0.1:29017" target="_blank">127.0.0.1:29017</a>
TIME_WAIT<br>0 0 <a href="http://127.0.0.1:29030" target="_blank">127.0.0.1:29030</a>
<a href="http://127.0.0.1:42380" target="_blank">127.0.0.1:42380</a>
TIME_WAIT<br>0 0 <a href="http://127.0.0.1:42348" target="_blank">127.0.0.1:42348</a>
<a href="http://127.0.0.1:29019" target="_blank">127.0.0.1:29019</a>
TIME_WAIT<br><br><br>Any idea why there should be so many of them,
particularly on the localhost address? And any idea if this looks
abnormal or not?<br></div></div></blockquote></div>
</blockquote></div><br>