large number for netstat -n | grep :80 |wc -l?
1952
netstat -na|grep ESTABLISHED|wc -l
26
ps -ef|grep httpd|wc -l
62
what do these number mean? especially the number 1952? how come it is so large? how can I reduce it?
is there anything wrong? Am I under DOS attack?
the top command output:
00:08:52 up 32 days, 26 min, 1 user, load average: 0.49, 0.50, 0.39
245 processes: 243 sleeping, 2 running, 0 zombie, 0 stopped
CPU states: cpu user nice system irq softirq iowait idle
total 2.9% 0.0% 2.2% 0.0% 0.0% 0.0% 94.8%
Mem: 1026112k av, 897100k used, 129012k free, 0k shrd, 69476k buff
681472k active, 162148k inactive
Swap: 2096440k av, 17256k used, 2079184k free 534224k cached
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
23902 nobody 15 0 28328 12M 9668 S 1.4 1.2 0:26 0 httpd
20542 mysql 16 0 114M 83M 1548 S 0.7 8.3 0:29 0 mysqld
22309 nobody 16 0 28268 12M 9040 S 0.7 1.2 0:23 0 httpd
23924 nobody 16 0 28192 12M 9452 S 0.7 1.2 0:22 0 httpd
25271 mysql 16 0 114M 83M 1548 S 0.7 8.3 0:04 0 mysqld
27150 mysql 16 0 114M 83M 1548 S 0.7 8.3 0:00 0 mysqld
29262 root 16 0 4212 1276 900 R 0.7 0.1 0:00 0 top
1 root 16 0 1584 228 208 S 0.0 0.0 0:03 0 init
2 root RT 0 0 0 0 SW 0.0 0.0 0:00 0 migration/0
3 root 34 19 0 0 0 SWN 0.0 0.0 0:00 0 ksoftirqd/0
4 root 10 -5 0 0 0 SW< 0.0 0.0 0:00 0 events/0
5 root 11 -5 0 0 0 SW< 0.0 0.0 0:00 0 khelper
10 root 10 -5 0 0 0 SW< 0.0 0.0 0:00 0 kthread
18 root 20 -5 0 0 0 SW< 0.0 0.0 0:00 0 kacpid
97 root 10 -5 0 0 0 SW< 0.0 0.0 8:18 0 kblockd/0
110 root 25 0 0 0 0 SW 0.0 0.0 0:00 0 khubd
185 root 20 -5 0 0 0 SW< 0.0 0.0 0:00 0 aio/0
184 root 15 0 0 0 0 SW 0.0 0.0 21:22 0 kswapd0
774 root 25 0 0 0 0 SW 0.0 0.0 0:00 0 kseriod
846 root 10 -5 0 0 0 SW< 0.0 0.0 0:00 0 ata/0
850 root 16 0 0 0 0 SW 0.0 0.0 0:00 0 scsi_eh_0
851 root 17 0 0 0 0 SW 0.0 0.0 0:00 0 scsi_eh_1
869 root 16 0 0 0 0 SW 0.0 0.0 0:00 0 khpsbpkt
887 root 15 0 0 0 0 SW 0.0 0.0 0:05 0 kjournald
1475 root 15 0 0 0 0 SW 0.0 0.0 0:59 0 kjournald
1476 root 15 0 0 0 0 SW 0.0 0.0 0:04 0 kjournald
1477 root 15 0 0 0 0 SW 0.0 0.0 1:24 0 kjournald
1478 root 15 0 0 0 0 SW 0.0 0.0 1:54 0 kjournald
1988 root 16 0 1636 336 264 S 0.0 0.0 0:08 0 syslogd
1992 root 16 0 1588 240 196 S 0.0 0.0 0:00 0 klogd
2030 root 16 0 1640 172 136 S 0.0 0.0 0:00 0 mdadm
2085 root 21 0 1580 196 192 S 0.0 0.0 0:00 0 acpid
2278 named 17 0 32464 2720 1044 S 0.0 0.2 2:19 0 named
2290 root 16 0 3712 464 364 S 0.0 0.0 0:12 0 sshd
2327 root 17 0 6108 1076 660 S 0.0 0.1 0:27 0 chkservd
2387 mailnull 16 0 6664 1884 1548 S 0.0 0.1 0:10 0 exim
2427 mailnull 15 0 6664 1844 1520 S 0.0 0.1 0:00 0 exim
2463 root 16 0 6112 404 312 S 0.0 0.0 0:01 0 pure-ftpd
2472 root 16 0 2972 668 448 S 0.0 0.0 0:12 0 antirelayd
2475 root 16 0 5652 184 144 S 0.0 0.0 0:00 0 pure-authd
2498 root 16 0 1652 392 324 S 0.0 0.0 0:01 0 crond
2833 root 16 0 1740 560 472 S 0.0 0.0 0:00 0 portsentry
3059 cpanel 20 0 3988 4 0 S 0.0 0.0 0:00 0 stunnel-4.04loc
3064 root 18 0 1576 148 144 S 0.0 0.0 0:00 0 mingetty
3065 root 18 0 1576 148 144 S 0.0 0.0 0:00 0 mingetty
3066 root 18 0 1576 148 144 S 0.0 0.0 0:00 0 mingetty
3067 root 18 0 1576 148 144 S 0.0 0.0 0:00 0 mingetty
3068 root 18 0 1576 148 144 S 0.0 0.0 0:00 0 mingetty
3069 root 18 0 1576 148 144 S 0.0 0.0 0:00 0 mingetty
Thanks.
