Link to home
Start Free TrialLog in
Avatar of Bstafford51
Bstafford51

asked on

Netstat -a recv and send Q's

System is Sun V40z with RH4. 12 gig memory. I am looking for reasons for system  intermitant slowness loging in users. Top show 97% plus on all cpus. A restart of service = sshd seems to clear the problem for awhile. I need info on what the recv and send Q's are in netstat -a.  Are these ques on the network card or RH software, etc.  Specificaly I have large numbers in the q's. How can I flush these ques?  How do I interpet these numbers?
thanks
netstat -a | grep syslog
udp     4224      0 *:syslog                    *:*
tcp        0         52 McPbsAM:ssh                 mcdpnety.ad.ewsad.net:1451  ESTABLISHED

Open in new window

Avatar of fosiul01
fosiul01
Flag of United Kingdom of Great Britain and Northern Ireland image

is this server located in Inside of your network ?? or remotely ??

you said, top command show 97% cpu uses,  , so which service is consuming so much cpu ??

how much ram is available ??? from top command

netstat -an | grep ESTABLISHED

how many establisshed conneciton you got ?? are those legite connections ??
Avatar of Bstafford51
Bstafford51

ASKER

My bad. I ment 97% idle on cpu. The server is inside the network. I was able to clearhte ques on syslog
by restarting the syslog service. But i need to know what the number means, ie how is it generated.

thanks
sorry i didnot understand what you meant by this

"But i need to know what the number means, ie how is it generated. "

what number ??
The usual explanation I have found for the netstat utility does not go into very mush depth as to what the numbers  mean.  so if I have a high number in the RECV-q is it an error etc. What generates that number, where does the utility get that number. Is it from the interface? Is it a peak number or an average. I need more info on the guts of the Linux OS, something past the normal web/book information.

thanks
Avatar of Morne Lategan
I'm not answering your question on the q's but slowness on login could be a dns issue as well. If DNS goes down, or becomes slow, it takes long between login and the password prompt because sshd will try to reverse lookup your IP address.
ASKER CERTIFIED SOLUTION
Avatar of fosiul01
fosiul01
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial