----- Original Message ----- From: "Paul DuBois" <[EMAIL PROTECTED]> To: "Gary Huntress" <[EMAIL PROTECTED]> Sent: Thursday, March 27, 2003 4:33 PM Subject: Re: Confused about network traffic on mysql port
> >I have noticed on many occasions some extensive traffic on my internal > >network that I cannot explain. Below you will see two sets of tcpdump > >traces. I have a mysql server running on my internal host named > >"herzegbol" and a windows 98 host named shelbyville > > > >This trace is when the MySQL server is running: > >14:33:45.886159 eth1 > herzegbol.mysql > shelbyville.2333: S > >700834979:700834979(0) ack 2360059956 win 5792 <ms [snip] > > > >This trace is after I issue mysqladmin shutdown: > >14:32:09.886091 eth1 > herzegbol.mysql > shelbyville.2333: R 0:0(0) ack > >2360059956 win 0 (DF) [snip] > > > >The reason this is confusing to me is that the traffic originates on the > >mysql server "herzegbol" via the mysql port and the destination is the > >windows box on dozens of ports and there is no program or process on the > >windows machine that is connected to the database server. As far as I can > >tell there is absolutely no reason for Herzegbol to talk to shelbyville, yet > >this traffic will pop up almost every day for a period of time and swamp my > >network. I would like to identify the source and understand the cause. The shelbyville box (192.168.0.2) never ever connects to the Herzegbol (192.168.0.32) MySQL server, shelbyville does not even have a mysql ODBC driver installed. All connections are either from external users (port forwarded through firewall to herzegbol) or from the apache/php web pages (on 192.168.0.1). To add to the confusion, I just checked the host table on herzegbol and there isn't even an entry there for shelbyville so I don't even know how herzegbol even knows there is a box to TRY and connect to! (for those wondering why you then see the host shelbyville show up in the tcpdump above, it is done from a different host) Unless I discover something else, I'm going to assume this is not a mysql problem. Thanks for the help. Regards, Gary "SuperID" Huntress ======================================================= FreeSQL.org offering free database hosting to developers Visit http://www.freesql.org > > Do you experience a lot of connection aborts on the client end? > Maybe the server's periodically trying to ascertain whether the client end > of connections are still alive after a timeout period or something. > (Just a guess, probably a poor one.) > > > > > > > > >-- > >MySQL General Mailing List > >For list archives: http://lists.mysql.com/mysql > >To unsubscribe: http://lists.mysql.com/[EMAIL PROTECTED] > > -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe: http://lists.mysql.com/[EMAIL PROTECTED]
