Re: high 'failed connection attempts' values

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Will Slater wrote:
Hi,

I'm seeing fairly high values for 'failed connection attempts' reported
by netstat -s. The values reported just under 10% of the 'active
connections openings' value. The full output from netstat -s is below.

Although we've not noticed any real problems I was just wondering what
causes the failed connection attempts, are they indicative of a some
resource shortage with the server, an indication of miss-behaving
clients or network hardware or just a fact of life?

The most common case is that the accept queue is full, and you already have a bunch of requests sitting in the syn queue. Your listener is underconfigured, going by the other stats.

You could try bumping up /proc/sys/net/ipv4/tcp_max_syn_backlog.

(This is not persistent across boots, so you can put in a
sysctl boot line for net.ipv4.tcp_max_syn_backlog).

thanks,
Nivedita



-
: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux 802.1Q VLAN]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Git]     [Bugtraq]     [Yosemite News and Information]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux PCI]     [Linux Admin]     [Samba]

  Powered by Linux