I think I recall that some of the NETSTAT displays include both open and recently closed connections. I'll bet that recently closed connections are what you are seeing.
-----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Joe Messineo Sent: Tuesday, March 18, 2008 8:28 AM To: IBM-MAIN@bama.ua.edu Subject: netstat -t concerns When running the netstat -t command, I am getting a lot of established connections which do not have an ApplName or and LuName tied to them. These have bytes in and bytes out counts. I have tried lowering the values to the TIMEMARK and SCANINTERVAL parameters but this has no effect on these occurences. These can account for 20-30% of the total connections during peak hours. My feeling is these are also tied to some of our older 3270 emulator programs. Perhaps these emulators are not breaking the connection properly? Is this something to be concerned about? Are there ways to reduce or eliminate these occurences? Thanks in advance Joe NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html