Date: Wed, 16 Mar 2005 15:01:19 -0500 (EST) From: "kalin mintchev" <kalin@el.net> To: freebsd-questions@freebsd.org Subject: Re: kern.ipc.nmbclusters Message-ID: <54481.68.165.89.73.1111003279.squirrel@68.165.89.73> In-Reply-To: <53058.68.165.89.73.1110948884.squirrel@68.165.89.73> References: <52214.68.165.89.73.1110927742.squirrel@68.165.89.73> <1110945574l.25764l.2l@BARTON> <53058.68.165.89.73.1110948884.squirrel@68.165.89.73>
next in thread | previous in thread | raw e-mail | index | archive | help
where else can i ask about this? i tried bsdforums but still total silence there too... > >> Did you check top to see if you even use swap? > > yea. very small amount. > Swap: 2032M Total, 624K Used, 2031M Free > >> I never use swap with >> 512MB on my desktop. Read man tuning, around byte 32372. > > i did a few times. don't remember which byte was it thought... > >> Try netstat >> -m. > > i did. here: > this was when i send this message originally: > # netstat -m > 6138/6832/26624 mbufs in use (current/peak/max): > 6137 mbufs allocated to data > 1 mbufs allocated to fragment reassembly queue headers > 6092/6656/6656 mbuf clusters in use (current/peak/max) > 15020 Kbytes allocated to network (75% of mb_map in use) > 11125 requests for memory denied > 1 requests for memory delayed > 0 calls to protocol drain routines > > =================================== > > this is now: > > netstat -m > 349/6832/26624 mbufs in use (current/peak/max): > 348 mbufs allocated to data > 1 mbufs allocated to fragment reassembly queue headers > 346/6656/6656 mbuf clusters in use (current/peak/max) > 15020 Kbytes allocated to network (75% of mb_map in use) > 11125 requests for memory denied > 1 requests for memory delayed > 0 calls to protocol drain routines > > > huge difference. so i think about 260 lines of netstat -p tcp output like: > > tcp4 0 33580 server.http c68.112.166.214..3307 > FIN_WAIT_1 > > has to do with all these 6000 clusters. but i'm not sure how. DOS may be?! > they are all from the same client ip and all of them have much higher > number for send then received Q's. what does the state FIN_WAIT_1 mean? > waiting to finish? if so - why it didn't do that for hours and hours. my > web server keeps connections alive for 10 sec. there isn't much else that > uses tcp on that machine. the webserver was inaccessile for about 5-10 > min. so my first thought was DOS... "11125 requests for memory denied" > made it look like it was a DOS... > > maybe somebody can explain the relation if any. it'll be appreciated... > > > thanks.... > > >> >> _______________________________________________ >> freebsd-questions@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-questions >> To unsubscribe, send any mail to >> "freebsd-questions-unsubscribe@freebsd.org" >> > > > -- > > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" > --
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?54481.68.165.89.73.1111003279.squirrel>