[tor-relays] interesting network sockets pattern

[patacca]

On 26/08/2016 14:37, Toralf Förster wrote:
> On 08/25/2016 07:02 PM, Toralf Förster wrote:
>> This is a fresh new Tor exit, setup 4 days ago, https://atlas.torproject.org/#details/BE2FA9FCB6242567B93ED99FEC5543FC517C9276 , where I do wonder how to interpret the attached screen shot.
> 
> The full SVG graphic can be derived from http://www.zwiebeltoralf.de/torserver/graph-20160825.svg (scroll down to the end)

Hi,
In my exit relay[1] sometimes I see the orphaned sockets rising up for
small period of time (usually a couple of minutes) and hit the max value
I set up (32768).
It could be the same issue. As you can see from this log there is a
small increase of the timewait too:


[Aug 19 06:28:20 CDT 2016]

Total: 3750 (kernel 3842)
TCP:   6340 (estab 3583, closed 2694, orphaned 18, synrecv 0, timewait
2691/0), ports 4493

[Aug 19 06:29:20 CDT 2016]

Total: 10886 (kernel 11022)
TCP:   21925 (estab 10673, closed 2820, orphaned 8342, synrecv 0,
timewait 2817/0), ports 18948

[Aug 19 06:30:20 CDT 2016]

Total: 5935 (kernel 6253)
TCP:   32393 (estab 5683, closed 2826, orphaned 23752, synrecv 0,
timewait 2823/0), ports 28711

[Aug 19 06:31:20 CDT 2016]

Total: 4474 (kernel 4765)
TCP:   17208 (estab 4131, closed 2311, orphaned 10551, synrecv 0,
timewait 2300/0), ports 14818

[Aug 19 06:32:20 CDT 2016]

Total: 4162 (kernel 4252)
TCP:   6375 (estab 3918, closed 2274, orphaned 60, synrecv 0, timewait
2271/0), ports 4702



[1]https://atlas.torproject.org/#details/2B72D043164D5036BC1087613830E2ED5C60695A