kern.ipc.nmbclusters

[kalin mintchev]

> Did you check top to see if you even use swap?

yea. very small amount.
Swap: 2032M Total, 624K Used, 2031M Free

>  I never use swap with
> 512MB on my desktop.  Read man tuning, around byte 32372.

i did a few times. don't remember which byte was it thought...

> Try netstat
> -m.

i did. here:
this was when i send this message originally:
# netstat -m
6138/6832/26624 mbufs in use (current/peak/max):
        6137 mbufs allocated to data
        1 mbufs allocated to fragment reassembly queue headers
6092/6656/6656 mbuf clusters in use (current/peak/max)
15020 Kbytes allocated to network (75% of mb_map in use)
11125 requests for memory denied
1 requests for memory delayed
0 calls to protocol drain routines

===================================

this is now:

netstat -m
349/6832/26624 mbufs in use (current/peak/max):
        348 mbufs allocated to data
        1 mbufs allocated to fragment reassembly queue headers
346/6656/6656 mbuf clusters in use (current/peak/max)
15020 Kbytes allocated to network (75% of mb_map in use)
11125 requests for memory denied
1 requests for memory delayed
0 calls to protocol drain routines


huge difference. so i think about 260 lines of netstat -p tcp output like:

tcp4       0  33580  server.http              c68.112.166.214..3307 
FIN_WAIT_1

has to do with all these 6000 clusters. but i'm not sure how. DOS may be?!
they are all from the same client ip and all of them have much higher
number for send then received Q's. what does the state FIN_WAIT_1 mean?
waiting to finish? if so - why it didn't do that for hours and hours. my
web server keeps connections alive for 10 sec. there isn't much else that
uses tcp on that machine. the webserver was inaccessile for about 5-10
min. so my first thought was DOS... "11125 requests for memory denied"
made it look like it was a DOS...

maybe somebody can explain the relation if any. it'll be appreciated...


thanks....


>
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscribe at freebsd.org"
>


--