> Did you check top to see if you even use swap? yea. very small amount. Swap: 2032M Total, 624K Used, 2031M Free
> I never use swap with > 512MB on my desktop. Read man tuning, around byte 32372. i did a few times. don't remember which byte was it thought... > Try netstat > -m. i did. here: this was when i send this message originally: # netstat -m 6138/6832/26624 mbufs in use (current/peak/max): 6137 mbufs allocated to data 1 mbufs allocated to fragment reassembly queue headers 6092/6656/6656 mbuf clusters in use (current/peak/max) 15020 Kbytes allocated to network (75% of mb_map in use) 11125 requests for memory denied 1 requests for memory delayed 0 calls to protocol drain routines =================================== this is now: netstat -m 349/6832/26624 mbufs in use (current/peak/max): 348 mbufs allocated to data 1 mbufs allocated to fragment reassembly queue headers 346/6656/6656 mbuf clusters in use (current/peak/max) 15020 Kbytes allocated to network (75% of mb_map in use) 11125 requests for memory denied 1 requests for memory delayed 0 calls to protocol drain routines huge difference. so i think about 260 lines of netstat -p tcp output like: tcp4 0 33580 server.http c68.112.166.214..3307 FIN_WAIT_1 has to do with all these 6000 clusters. but i'm not sure how. DOS may be?! they are all from the same client ip and all of them have much higher number for send then received Q's. what does the state FIN_WAIT_1 mean? waiting to finish? if so - why it didn't do that for hours and hours. my web server keeps connections alive for 10 sec. there isn't much else that uses tcp on that machine. the webserver was inaccessile for about 5-10 min. so my first thought was DOS... "11125 requests for memory denied" made it look like it was a DOS... maybe somebody can explain the relation if any. it'll be appreciated... thanks.... > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "[EMAIL PROTECTED]" > -- _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"