From owner-freebsd-net@FreeBSD.ORG  Tue Aug 24 10:29:23 2004
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 34F4016A4CF
	for <freebsd-net@freebsd.org>; Tue, 24 Aug 2004 10:29:23 +0000 (GMT)
Received: from c00l3r.networx.ch (c00l3r.networx.ch [62.48.2.2])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 698E443D2F
	for <freebsd-net@freebsd.org>; Tue, 24 Aug 2004 10:29:22 +0000 (GMT)
	(envelope-from andre@freebsd.org)
Received: (qmail 31828 invoked from network); 24 Aug 2004 10:28:34 -0000
Received: from unknown (HELO freebsd.org) ([62.48.0.53])
          (envelope-sender <andre@freebsd.org>)
          by c00l3r.networx.ch (qmail-ldap-1.03) with SMTP
          for <gul@gul.kiev.ua>; 24 Aug 2004 10:28:34 -0000
Message-ID: <412B1883.9C3E38C2@freebsd.org>
Date: Tue, 24 Aug 2004 12:29:23 +0200
From: Andre Oppermann <andre@freebsd.org>
X-Mailer: Mozilla 4.8 [en] (Windows NT 5.0; U)
X-Accept-Language: en
MIME-Version: 1.0
To: gul@gul.kiev.ua
References: <20040824091638.GE27112@happy.kiev.ua>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
cc: freebsd-net@freebsd.org
Subject: Re: FIN_WAIT_2 timeout
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Aug 2004 10:29:23 -0000

Pavel Gulchouck wrote:
> 
> Hi.
> 
> I have hangs tcp-sessions in the FIN_WAIT_2 state, in which packets
> sends to remote for several days. Sockstate tells none aboute its,
> restart httpd has no effect.
> http://httpd.apache.org/docs/misc/fin_wait_2.html says that FreeBSD
> has a timeout for FIN_WAIT_2 state, but I don't see it.
> Number of such sessions grows according to uptime.
> FreeBSD 5.2.1-RELEASE-p9.
> Any suggestions?

Very strange...

Could you send the output of "sysctl -a net.inet.tcp" as well?

> root@racoon:~>netstat -na | fgrep 195.248.160.78
> tcp4       0      0  193.109.240.55.80      195.248.160.78.59843   FIN_WAIT_2
> tcp4       0      0  193.109.240.55.80      195.248.160.78.56084   FIN_WAIT_2
> tcp4       0      0  193.109.240.55.80      195.248.160.78.37466   FIN_WAIT_2
> tcp4       0      0  193.109.240.55.80      195.248.160.78.31848   FIN_WAIT_2
> [...]
> root@racoon:~>sockstat | fgrep 195.248.160.78
> root@racoon:~>netstat -na | grep -c FIN_WAIT_2
> 419
> 
> tcpdump shows:
> 
> 20:43:54.922521 hosting.itpark.com.ua.http > 195.248.160.78.48714: . ack
> 3765418226 win 0

It (re-)tries to ACK the FIN probably.

> 20:43:54.923546 hosting.itpark.com.ua.http > 195.248.160.78.48714: . ack 1 win
> 65535 (DF)

And it tries to open the window again to get out of persistent mode!?

> 20:44:09.920818 hosting.itpark.com.ua.http > 195.248.160.78.31848: . ack
> 3792205062 win 0
> 20:44:09.921773 hosting.itpark.com.ua.http > 195.248.160.78.31848: . ack 1 win
> 65535 (DF)

Any chance of finding out what kind of Operating System 195.248.160.78 is?

-- 
Andre