Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 6 Mar 1998 19:39:36 -0800 (PST)
From:      Jan Koum <jkb@best.com>
To:        questions@FreeBSD.ORG
Subject:   Re: odd netstat statistic
Message-ID:  <Pine.BSF.3.96.980306193036.22224A-100000@shell6.ba.best.com>
In-Reply-To: <Pine.BSF.3.96.980306142338.5640A-100000@shell6.ba.best.com>

next in thread | previous in thread | raw e-mail | index | archive | help

	Ok, I answered one (regarding kvm_read: Bad address) of my own
questions after looking through archives:

===============
Date:      Fri, 07 Jul 1995 00:45:07 -0700
From:      David Greenman <davidg@Root.COM>
To:        "Kenneth D. Merry" <ken@rflab1.gtri.gatech.edu>
Subject:   Re: strange netstat errors 

>       I've been getting occasional strange error messages from netstat, 
>usually something like this:  (this is under 2.0.5)
>
>----
>Active Internet connections
>Proto Recv-Q Send-Q  Local Address          Foreign Address
(state)
>tcp        0      0  wc206.auth             wc115.1123
TIME_WAIT
>netstat: kvm_read: kvm_read: Bad address

   This can happen whenever the internal state of the kernel changes while
the
information is being read. It can be made somewhat more robust and I might
take a stab at it before 2.1R.

-DG
=============

	I am still curious regarding the negative numbers in netstat's
output and how can it be solved easy (I assume int or float overflow?)

-- Yan


On Fri, 6 Mar 1998, Jan Koum wrote:

>
>	Hello all,
>
>	I am getting odd netstat output. The machine is somewhat busy web
>server (it only does httpd, about 100000 hits per day) running apache
>1.2.5 and 2.2.5-RELEASE with custom kernel which has: 
>options         NMBCLUSTERS=8192        #mbuf clusters at 8192
>options         CHILD_MAX=1024          #max number of child processes
>options         OPEN_MAX=1024
[snip]
>
>	Doing netstat -a again a second later worked just fine, but this
>time I got: (notice the negative numbers) 
>
>tcp        0      0  www.http               207.235.168.3.10608 TIME_WAIT
>tcp        0      0  www.http               207.235.168.3.10541 TIME_WAIT
>tcp      320 -266393784  www.http               16.112.170.244.10526 -265120128
>tcp      312 -266363128  www.http               144.94.170.244.10541 -266234176
>tcp      239 -265502528  *.44020                144.134.170.244.37039 -265316220
>tcp     2384 -266516456  *.44020                16.180.171.244.36893 CLOSED*
>tcp       28 -264778220  *.43764                16.74.169.244.39013 CLOSED*
>tcp      679 -266061684  *.44020                144.254.168.244.38924 -265958576
>tcp      344 -266462408  *.43764                16.102.169.244.38938 CLOSED
>tcp       56 -264760852  *.43508                16.75.171.244.6372 CLOSED*
>tcp        0 -266389720  *.43764                144.156.170.244.39081 -266065488
>[snip]
>	And netstat -s is also doing negative numbers thingie *grin* :
>% netstat -s
>[snip]
>tcp:
>        4821743 packets sent
>                3459033 data packets (-967744068 bytes)
>                263312 data packets (296817086 bytes) retransmitted
>                192 resends initiated by MTU discovery
>                847250 ack-only packets (102774 delayed)
>                0 URG only packets
>                2790 window probe packets
>                1185 window update packets
>                248173 control packets
>        4760259 packets received
>                2726009 acks (for -1008981097 bytes)
>                612410 duplicate acks
>[snip]
>%
>
>	Any suggestions? I assume this is of course not a good thing.
>Even though it only happened today for the first time in a month. :)
>	I can upgrade to 2.2-STABLE or wait for 2.2.6, but is there any
>other way to fix it? And would upgrade help?
>
>-- Yan
>
>
>To Unsubscribe: send mail to majordomo@FreeBSD.org
>with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.980306193036.22224A-100000>