Re: [squid-users] code red is making horrible on our network

From: Luiz Lima <llima@dont-contact.us>
Date: Sat, 11 Aug 2001 11:41:32 -0300

I'll try that on Monday. For the weekend we left transparent proxy turned off for safety.

It looks like it's going to do something good because yesterday I saw the same thing as you did. I had about 130 of these sockets, which matches what you've said the limit is: 128.

I guess everyone with this problem should give it a try.

---
Luiz Lima
Image Link Internet
http://www.imagelink.com.br
  ----- Original Message ----- 
  From: Alexander Pressman 
  To: squid-users@squid-cache.org 
  Sent: Saturday, August 11, 2001 12:18 PM
  Subject: Re: [squid-users] code red is making horrible on our network
  Hi All !
  I think I find  the solution & the problem
  echo 2048 >>/proc/sys/net/ipv4/tcp_max_syn_backlog 
  because its only 128 by default
  sockets are flooded
  and look at this :
  netstat -na | grep SYN
  tcp        0      0 192.118.7.37:8080       192.168.1.162:4675      SYN_RECV    
  tcp        0      0 192.118.7.198:8080      213.25.246.141:2198     SYN_RECV    
  tcp        0      0 192.118.7.224:8080      63.225.16.65:4349       SYN_RECV    
  tcp        0      0 195.133.86.7:8080       192.118.6.146:2203      SYN_RECV    
  tcp        0      0 209.249.147.83:8080     192.118.7.196:1271      SYN_RECV    
  tcp        0      0 192.117.152.58:8080     192.118.6.58:1085       SYN_RECV    
  tcp        0      0 212.31.251.13:8080      192.118.6.62:1687       SYN_RECV    
  tcp        0      0 213.140.4.102:8080      192.118.6.62:1689       SYN_RECV    
  tcp        0      0 212.31.251.13:8080      192.118.6.62:1690       SYN_RECV    
  tcp        0      0 209.75.20.41:8080       192.118.6.52:1304       SYN_RECV    
  tcp        0      0 195.22.188.137:8080     192.118.7.161:3764      SYN_RECV    
  tcp        0      0 195.22.188.137:8080     192.118.7.161:3765      SYN_RECV    
  tcp        0      0 195.22.188.137:8080     192.118.7.161:3766      SYN_RECV    
  tcp        0      0 195.22.188.137:8080     192.118.7.161:3767      SYN_RECV    
  tcp        0      0 65.108.63.105:8080      192.118.7.166:1161      SYN_RECV    
  tcp        0      0 205.188.140.249:8080    192.118.6.59:1444       SYN_RECV    
  tcp        0      0 65.108.63.105:8080      192.118.7.166:1162      SYN_RECV    
  tcp        0      0 65.108.63.105:8080      192.118.7.166:1163      SYN_RECV    
  tcp        0      0 65.108.63.105:8080      192.118.7.166:1164      SYN_RECV    
  tcp        0      0 195.178.208.103:8080    192.118.7.194:2292      SYN_RECV    
  tcp        0      0 205.188.140.249:8080    192.118.7.100:4484      SYN_RECV    
  tcp        0      0 195.128.128.26:8080     192.118.6.177:1514      SYN_RECV    
  tcp        0      0 192.118.70.207:8080     192.118.6.83:1110       SYN_RECV    
  tcp        0      0 217.73.192.19:8080      192.118.6.177:1515      SYN_RECV    
  tcp        0      0 192.118.6.11:8080       192.118.7.123:1347      SYN_RECV    
  Sorry for my english and I hope this will help
  Alexander Pressman
Received on Sat Aug 11 2001 - 08:41:39 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:01:34 MST