How can I get >100 connections in FIN_WAIT_2 state from the same IP?
Martin Turgeon
freebsd at optiksecurite.com
Fri Oct 9 16:24:34 UTC 2009
Hi everyone,
I would like to know if anyone knows the reason why I get a lot of
connections (more than 100) from the same IP in FIN_WAIT_2 state.
Refering to this diagram
(http://www.jxos.org/Projects/TCP/tcpstate.html), the connection enter
in FIN_WAIT_1 when the server closes the connection and in FIN_WAIT_2
when the client ACK the FIN from the server. For the connection to stay
in FIN_WAIT_2, the client must never send his FIN, right?
In this case the connections are on port 80. Is it a problem with the
client's browser or OS? Is it possible that some mobile devices doesn't
close their connections correctly to save bandwidth and battery?
I know this isn't specific to FreeBSD, but thanks for your answer anyway
Martin
More information about the freebsd-net
mailing list