Is this LSOF 25 output normal?

[billatarcat]

Hi Scalix,

We have a new install that is operating a little slow. I did a:
lsof -i :25
and there are 100's of lines of output.

20% are (ESTABLISHED)
50% are (CLOSE-WAIT)

In the posting so far I've seen at most 3 lines output from this command.

Any help would be great.

Thanks,
Bill

[Valerion]

Not sure if hundreds is normal, unless you have a VERY busy server.

Connections in state ESTABLISHED is currently connected (both endpoints) and I assume busy sending/receiving an email.

There's some discussion on CLOSE_WAIT here. It usually indicates that the remote side is dropping the connection without properly closing down. Could it be spammers or similar?