9

I've got a MediaTemple DV server. I've been seeing a lot of QOS alerts for "numothersock" which is defined as:

The number of sockets other than TCP ones. Local (UNIX-domain) sockets are used for communications inside the system. UDP sockets are used, for example, for Domain Name Service (DNS) queries. UDP and other sockets may also be used in some very specialized applications (SNMP agents and others).

How can I determine what application/daemon/etc is creating these sockets? The limit is 300 and we're hitting that several times a day recently.

Thanks in advance.

16
netstat -nap
p shows the process id 
| improve this answer | |
  • 4
    Please avoid netstat -a it will run dns name resolution, using -np is fine... – Roy Bellingan Nov 16 '15 at 13:52
8

netstat -an | grep ESTABLISHED | wc -l

This will count all opened sockets in the system and will output just the total. You can of course also change ESTABLISHED for whatever you need, for example a port or a communication status like CONNECTED or LISTENING.

| improve this answer | |
  • 2
    watch -n1 -d "netstat -an | grep ESTABLISHED | wc -l" – sjas Sep 26 '16 at 14:47
  • 2
    instead of grep SOMETHING| wc -l, you could use grep -c SOMETHING – Shiplu Mokaddim Sep 27 '16 at 12:06
3

To watch live MySQL opened connections through UNIX socket, run (as root):

watch -n1 'netstat -np | grep -i mysqld'

| improve this answer | |
1

netstat -a shows'em all. Or you can study its manual page to filter out only those types of connections you're interested in.

| improve this answer | |
  • Thanks guys! Appreciate it! In my case, it was BIND. I don't even need it running. Thanks a ton! – Encoderer Jul 16 '11 at 18:36
1

with ss

netstat is deprecated, its replacement is ss.

For your case, ss -pun might be useful that shows UDP (-u) sockets with process information (-p) and doesn't turn port numbers into service names (-n).

I use ss -ptln a lot whichs shows listening (-l) TCP sockets (-t).

It's useful with watch when you want to make sure your web application cleans up its TCP sockets:

watch ss -ptln

Here are some more examples with ss.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.