netstat

Hi all,

Running FreeBSD 5.1 with Cpanel. Hoping someone here can shed some light.

netstat -na output shows alot of these:

tcp4 0 0 192.168.0.100.51731 220.175.18.52.113 FIN_WAIT_2
tcp4 0 0 192.168.0.100.51638 218.68.21.249.113 FIN_WAIT_2
tcp4 0 0 192.168.0.100.51580 218.227.209.62.113 FIN_WAIT_2
tcp4 0 0 192.168.0.100.51515 203.101.13.105.113 FIN_WAIT_2

It looks to me like some process on my server (192.168.0.100) sent an ident request to the remote machine and it's waiting for the remote side to close the connection.

The question is, what process is doing it? At last count I have 400 connections in the FIN_WAIT_2 state. Last night I had 450. My other systems don't have this many ident connections, maybe 1 or 2 which looks normal to me.

Any ideas?

 

 

 

 

Top