Re: [squid-users] code red is making horrible on our network

Hi All !

I think I find the solution & the problem

echo 2048 >>/proc/sys/net/ipv4/tcp_max_syn_backlog
because its only 128 by default

sockets are flooded

and look at this :
netstat -na | grep SYN

tcp 0 0 192.118.7.37:8080 192.168.1.162:4675 SYN_RECV
tcp 0 0 192.118.7.198:8080 213.25.246.141:2198 SYN_RECV
tcp 0 0 192.118.7.224:8080 63.225.16.65:4349 SYN_RECV
tcp 0 0 195.133.86.7:8080 192.118.6.146:2203 SYN_RECV
tcp 0 0 209.249.147.83:8080 192.118.7.196:1271 SYN_RECV
tcp 0 0 192.117.152.58:8080 192.118.6.58:1085 SYN_RECV
tcp 0 0 212.31.251.13:8080 192.118.6.62:1687 SYN_RECV
tcp 0 0 213.140.4.102:8080 192.118.6.62:1689 SYN_RECV
tcp 0 0 212.31.251.13:8080 192.118.6.62:1690 SYN_RECV
tcp 0 0 209.75.20.41:8080 192.118.6.52:1304 SYN_RECV
tcp 0 0 195.22.188.137:8080 192.118.7.161:3764 SYN_RECV
tcp 0 0 195.22.188.137:8080 192.118.7.161:3765 SYN_RECV
tcp 0 0 195.22.188.137:8080 192.118.7.161:3766 SYN_RECV
tcp 0 0 195.22.188.137:8080 192.118.7.161:3767 SYN_RECV
tcp 0 0 65.108.63.105:8080 192.118.7.166:1161 SYN_RECV
tcp 0 0 205.188.140.249:8080 192.118.6.59:1444 SYN_RECV
tcp 0 0 65.108.63.105:8080 192.118.7.166:1162 SYN_RECV
tcp 0 0 65.108.63.105:8080 192.118.7.166:1163 SYN_RECV
tcp 0 0 65.108.63.105:8080 192.118.7.166:1164 SYN_RECV
tcp 0 0 195.178.208.103:8080 192.118.7.194:2292 SYN_RECV
tcp 0 0 205.188.140.249:8080 192.118.7.100:4484 SYN_RECV
tcp 0 0 195.128.128.26:8080 192.118.6.177:1514 SYN_RECV
tcp 0 0 192.118.70.207:8080 192.118.6.83:1110 SYN_RECV
tcp 0 0 217.73.192.19:8080 192.118.6.177:1515 SYN_RECV
tcp 0 0 192.118.6.11:8080 192.118.7.123:1347 SYN_RECV

Sorry for my english and I hope this will help

Alexander Pressman
Received on Sat Aug 11 2001 - 08:20:43 MDT