Page 1 of 1

Is this LSOF 25 output normal?

Posted: Wed Dec 13, 2006 2:53 pm
by billatarcat
Hi Scalix,

We have a new install that is operating a little slow. I did a:
lsof -i :25
and there are 100's of lines of output.

20% are (ESTABLISHED)
50% are (CLOSE-WAIT)

In the posting so far I've seen at most 3 lines output from this command.

Any help would be great.

Thanks,
Bill

Posted: Thu Dec 14, 2006 3:44 am
by Valerion
Not sure if hundreds is normal, unless you have a VERY busy server.

Connections in state ESTABLISHED is currently connected (both endpoints) and I assume busy sending/receiving an email.

There's some discussion on CLOSE_WAIT here. It usually indicates that the remote side is dropping the connection without properly closing down. Could it be spammers or similar?