Date: Fri, 30 May 2008 17:18:26 +0900 (JST) From: Tod McQuillin <devin@spamcop.net> To: Peter Jeremy <peterjeremy@optushome.com.au> Cc: freebsd-stable@freebsd.org, Robert Blayzor <rblayzor.bulk@inoc.net> Subject: Re: Sockets stuck in FIN_WAIT_1 Message-ID: <20080530171642.S87269@plexi.pun-pun.prv> In-Reply-To: <20080530081143.GI1028@server.vk2pj.dyndns.org> References: <483E4657.9060906@FreeBSD.org> <483EA513.4070409@earthlink.net> <96AFE8D3-7EAC-4A4A-8EFF-35A5DCEC6426@inoc.net> <483EAED1.2050404@FreeBSD.org> <200805291912.m4TJCG56025525@apollo.backplane.com> <14DA211A-A9C5-483A-8CB9-886E5B19A840@inoc.net> <200805291930.m4TJUeGX025815@apollo.backplane.com> <0C827F66-09CE-476D-86E9-146AB255926B@inoc.net> <200805292132.m4TLWhCv026720@apollo.backplane.com> <CCBAEE3E-35A5-4BF8-A0B7-321272533B62@inoc.net> <20080530081143.GI1028@server.vk2pj.dyndns.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 30 May 2008, Peter Jeremy wrote:
> As a work-around, you could write a cronjob that scans "netstat" and
> temporarily creates an ipfw 'reset' rule that matches each FIN_WAIT_1
> socket
In the past, I've used something like this:
netstat -an | grep FIN_WAIT_1 |
perl -pe 's/.*\s((?:\d+\.){3}\d+)\.(\d+)\s*((?:\d+\.){3}\d+)\.(\d+).*/tcpdrop $1 $2 $3 $4/' |
sh -x
This relies on tcpdrop, included as /usr/sbin/tcpdrop on FreeBSD 6.x; you
may need to install it from a port on FreeBSD 4.x.
--
Tod McQuillin
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080530171642.S87269>