Whilst looking into some transient network issues, I have noticed what seems to be a high number of RST packets received:
40091950 active connections openings
44754733 passive connection openings
2840116 failed connection attempts
49571981 connection resets received
30748407 resets sent
Can anyone comment on whether this would indicate a problem? It seems extraordinarily high, but I may just be misinterpreting the results. From what I have read an RST is sent when a TCP connection does not receive ACK for data it is sending.
We are running several Centos 6.5 servers, Webapps running in tomcat, balanced behind httpd. Each tomcat will make many short lived connections to each other, so this may be a result of that?
I have done some analysis, the RST packets are not coming from the router or from 1 specific host, but seem to be coming from all hosts.