sonewconn: pcb [...]: Listen queue overflow to human-readable form

[Gary Palmer]

On Thu, Dec 15, 2016 at 05:27:02PM +0200, Artem Viklenko wrote:
> 2016-12-15 14:28, Eugene Grosbein ??????????????:
> > On 15.12.2016 19:23, Eugene M. Zheganin wrote:
> > 
> >> but at the time of investigation the socket is already closed and lsof
> >> cannot show me the owner. I wonder if the kernel can itself decode 
> >> this
> >> output and write it in the human-readable form ?
> > 
> > Until that's not implemented, you can monitor "netstat -Lan" output and
> > continuously save it for later analisys and/or draw graphs.
> > 
> 
> netstat -LanA -f inet ?

That's only IPv4 sockets (or sockets that are listening on both families
at the same time).  If you are dual stack with IPv6, you'd probably also
need to capture

netstat -LanA -f inet6

Regards,

Gary