[Gross] grossd - blocker TIME_WAIT connections
eino at utu.fi
Wed Sep 5 12:09:37 EEST 2007
Jesse Thompson wrote:
> version 0.8.2
> I've been trying to figure out why I'm been having trouble scping and
> sshing from my gross servers. One thing we noticed was a large number
> of connections to the Sophos blocker in TIME_WAIT state.
> netstat -n | grep TIME_WAIT | grep -c 4466
I think it is. It means that you are making some 100 blocker queries per
second. The problem with the current blocker check implementation is
that the connections are not reused. So grossd opens a new TCP
connection for each blocker query.
More information about the Gross