- Ubuntu Server 10.04.1 x86
- Munin 1.4.4
Here is what Munin tells me about connections through firewall on my server:
Here is what netstat -n
has to say about this:
$ netstat -an|awk '/tcp/ {print $6}'|sort|uniq -c 2 CLOSE_WAIT 1 CLOSING 3720 ESTABLISHED 34 FIN_WAIT1 21 FIN_WAIT2 13 LAST_ACK 6 LISTEN 4 SYN_RECV 394 TIME_WAIT
According to netstat
, 10% of sockets are in TIME_WAIT
; 75% or more, according to Munin.
That is strange. Who is right?
More details about configuration etc. here: How to reduce number of sockets in TIME_WAIT?
/proc/net/ip_contrack
. Indeed, it reports 19K connections inTIME_WAIT
out of total 20K. The question is, who to believe?