Hi Chris,
Please indicate how to show lsof or netstat to *just the JVM* process.
Below is the list of running processes on my server:
UID PID PPID C STIME TTY TIME CMD
root 1 0 0 May07 ? 00:00:14 /usr/lib/systemd/systemd
--switched-root --system --deserialize 17
root 2 0 0 May07 ? 00:00:00 [kthreadd]
root 3 2 0 May07 ? 00:00:00 [rcu_gp]
root 4 2 0 May07 ? 00:00:00 [rcu_par_gp]
root 6 2 0 May07 ? 00:00:00 [kworker/0:0H-kblockd]
root 8 2 0 May07 ? 00:00:00 [mm_percpu_wq]
root 9 2 0 May07 ? 00:00:00 [ksoftirqd/0]
root 10 2 0 May07 ? 00:02:18 [rcu_sched]
root 11 2 0 May07 ? 00:00:00 [migration/0]
root 12 2 0 May07 ? 00:00:00 [watchdog/0]
root 13 2 0 May07 ? 00:00:00 [cpuhp/0]
root 14 2 0 May07 ? 00:00:00 [cpuhp/1]
root 15 2 0 May07 ? 00:00:00 [watchdog/1]
root 16 2 0 May07 ? 00:00:00 [migration/1]
root 17 2 0 May07 ? 00:00:00 [ksoftirqd/1]
root 19 2 0 May07 ? 00:00:00 [kworker/1:0H-kblockd]
root 20 2 0 May07 ? 00:00:00 [cpuhp/2]
root 21 2 0 May07 ? 00:00:00 [watchdog/2]
root 22 2 0 May07 ? 00:00:00 [migration/2]
root 23 2 0 May07 ? 00:00:00 [ksoftirqd/2]
root 25 2 0 May07 ? 00:00:00 [kworker/2:0H-kblockd]
root 26 2 0 May07 ? 00:00:00 [cpuhp/3]
root 27 2 0 May07 ? 00:00:00 [watchdog/3]
root 28 2 0 May07 ? 00:00:00 [migration/3]
root 29 2 0 May07 ? 00:00:00 [ksoftirqd/3]
root 31 2 0 May07 ? 00:00:00 [kworker/3:0H-kblockd]
root 32 2 0 May07 ? 00:00:00 [cpuhp/4]
root 33 2 0 May07 ? 00:00:00 [watchdog/4]
root 34 2 0 May07 ? 00:00:00 [migration/4]
root 35 2 0 May07 ? 00:00:00 [ksoftirqd/4]
root 37 2 0 May07 ? 00:00:00 [kworker/4:0H-kblockd]
root 38 2 0 May07 ? 00:00:00 [cpuhp/5]
root 39 2 0 May07 ? 00:00:00 [watchdog/5]
root 40 2 0 May07 ? 00:00:00 [migration/5]
root 41 2 0 May07 ? 00:00:00 [ksoftirqd/5]
root 43 2 0 May07 ? 00:00:00 [kworker/5:0H-kblockd]
root 44 2 0 May07 ? 00:00:00 [cpuhp/6]
root 45 2 0 May07 ? 00:00:00 [watchdog/6]
root 46 2 0 May07 ? 00:00:00 [migration/6]
root 47 2 0 May07 ? 00:00:00 [ksoftirqd/6]
root 49 2 0 May07 ? 00:00:00 [kworker/6:0H-kblockd]
root 50 2 0 May07 ? 00:00:00 [cpuhp/7]
root 51 2 0 May07 ? 00:00:00 [watchdog/7]
root 52 2 0 May07 ? 00:00:00 [migration/7]
root 53 2 0 May07 ? 00:00:00 [ksoftirqd/7]
root 55 2 0 May07 ? 00:00:00 [kworker/7:0H-kblockd]
root 57 2 0 May07 ? 00:00:00 [kdevtmpfs]
root 58 2 0 May07 ? 00:00:00 [netns]
root 59 2 0 May07 ? 00:00:00 [kauditd]
root 62 2 0 May07 ? 00:00:00 [khungtaskd]
root 63 2 0 May07 ? 00:00:00 [oom_reaper]
root 64 2 0 May07 ? 00:00:00 [writeback]
root 65 2 0 May07 ? 00:00:00 [kcompactd0]
root 66 2 0 May07 ? 00:00:00 [ksmd]
root 67 2 0 May07 ? 00:00:02 [khugepaged]
root 68 2 0 May07 ? 00:00:00 [crypto]
root 69 2 0 May07 ? 00:00:00 [kintegrityd]
root 70 2 0 May07 ? 00:00:00 [kblockd]
root 71 2 0 May07 ? 00:00:00 [tpm_dev_wq]
root 72 2 0 May07 ? 00:00:00 [md]
root 73 2 0 May07 ? 00:00:00 [edac-poller]
root 74 2 0 May07 ? 00:00:00 [watchdogd]
root 92 2 0 May07 ? 00:00:00 [kswapd0]
root 188 2 0 May07 ? 00:00:00 [kthrotld]
root 189 2 0 May07 ? 00:00:00 [irq/24-pciehp]
root 190 2 0 May07 ? 00:00:00 [irq/25-pciehp]
root 191 2 0 May07 ? 00:00:00 [irq/26-pciehp]
root 192 2 0 May07 ? 00:00:00 [irq/27-pciehp]
root 193 2 0 May07 ? 00:00:00 [irq/28-pciehp]
root 194 2 0 May07 ? 00:00:00 [irq/29-pciehp]
root 195 2 0 May07 ? 00:00:00 [irq/30-pciehp]
root 196 2 0 May07 ? 00:00:00 [irq/31-pciehp]
root 197 2 0 May07 ? 00:00:00 [irq/32-pciehp]
root 198 2 0 May07 ? 00:00:00 [irq/33-pciehp]
root 199 2 0 May07 ? 00:00:00 [irq/34-pciehp]
root 200 2 0 May07 ? 00:00:00 [irq/35-pciehp]
root 201 2 0 May07 ? 00:00:00 [irq/36-pciehp]
root 202 2 0 May07 ? 00:00:00 [irq/37-pciehp]
root 203 2 0 May07 ? 00:00:00 [irq/38-pciehp]
root 204 2 0 May07 ? 00:00:00 [irq/39-pciehp]
root 205 2 0 May07 ? 00:00:00 [irq/40-pciehp]
root 206 2 0 May07 ? 00:00:00 [irq/41-pciehp]
root 207 2 0 May07 ? 00:00:00 [irq/42-pciehp]
root 208 2 0 May07 ? 00:00:00 [irq/43-pciehp]
root 209 2 0 May07 ? 00:00:00 [irq/44-pciehp]
root 210 2 0 May07 ? 00:00:00 [irq/45-pciehp]
root 211 2 0 May07 ? 00:00:00 [irq/46-pciehp]
root 212 2 0 May07 ? 00:00:00 [irq/47-pciehp]
root 213 2 0 May07 ? 00:00:00 [irq/48-pciehp]
root 214 2 0 May07 ? 00:00:00 [irq/49-pciehp]
root 215 2 0 May07 ? 00:00:00 [irq/50-pciehp]
root 216 2 0 May07 ? 00:00:00 [irq/51-pciehp]
root 217 2 0 May07 ? 00:00:00 [irq/52-pciehp]
root 218 2 0 May07 ? 00:00:00 [irq/53-pciehp]
root 219 2 0 May07 ? 00:00:00 [irq/54-pciehp]
root 220 2 0 May07 ? 00:00:00 [irq/55-pciehp]
root 222 2 0 May07 ? 00:00:00 [acpi_thermal_pm]
root 223 2 0 May07 ? 00:00:00 [kmpath_rdacd]
root 224 2 0 May07 ? 00:00:00 [kaluad]
root 226 2 0 May07 ? 00:00:00 [ipv6_addrconf]
root 227 2 0 May07 ? 00:00:00 [kstrp]
root 508 2 0 May07 ? 00:00:00 [mpt_poll_0]
root 509 2 0 May07 ? 00:00:00 [ata_sff]
root 510 2 0 May07 ? 00:00:00 [mpt/0]
root 512 2 0 May07 ? 00:00:00 [scsi_eh_0]
root 516 2 0 May07 ? 00:00:00 [scsi_tmf_0]
root 517 2 0 May07 ? 00:00:00 [scsi_eh_1]
root 518 2 0 May07 ? 00:00:00 [scsi_tmf_1]
root 524 2 0 May07 ? 00:00:14 [irq/16-vmwgfx]
root 525 2 0 May07 ? 00:00:00 [ttm_swap]
root 531 2 0 May07 ? 00:00:00 [scsi_eh_2]
root 532 2 0 May07 ? 00:00:00 [scsi_tmf_2]
root 540 2 0 May07 ? 00:00:01 [kworker/7:1H-kblockd]
root 541 2 0 May07 ? 00:00:01 [kworker/5:1H-kblockd]
root 567 2 0 May07 ? 00:00:07 [jbd2/sda3-8]
root 568 2 0 May07 ? 00:00:00 [ext4-rsv-conver]
root 611 2 0 May07 ? 00:00:49 [jbd2/sda2-8]
root 612 2 0 May07 ? 00:00:00 [ext4-rsv-conver]
root 613 2 0 May07 ? 00:00:01 [kworker/6:1H-kblockd]
root 650 2 0 May07 ? 00:00:01 [kworker/4:1H-kblockd]
root 659 2 0 May07 ? 00:00:02 [kworker/3:1H-kblockd]
root 660 2 0 May07 ? 00:00:02 [kworker/2:1H-kblockd]
root 662 2 0 May07 ? 00:00:01 [kworker/0:1H-kblockd]
root 679 1 0 May07 ? 00:00:03
/usr/lib/systemd/systemd-journald
root 682 2 0 May07 ? 00:00:02 [kworker/1:1H-kblockd]
root 716 1 0 May07 ? 00:00:01
/usr/lib/systemd/systemd-udevd
root 723 2 0 May07 ? 00:00:18 [jbd2/sdb1-8]
root 724 2 0 May07 ? 00:00:00 [ext4-rsv-conver]
root 733 2 0 May07 ? 00:00:14 [jbd2/sda6-8]
root 734 2 0 May07 ? 00:00:00 [ext4-rsv-conver]
root 738 2 0 May07 ? 00:00:00 [jbd2/sdc1-8]
root 739 2 0 May07 ? 00:00:00 [ext4-rsv-conver]
root 744 2 0 May07 ? 00:00:00 [jbd2/sda1-8]
root 745 2 0 May07 ? 00:00:00 [ext4-rsv-conver]
root 776 1 0 May07 ? 00:00:01 /sbin/auditd
root 790 2 0 May07 ? 00:00:00 [rpciod]
root 791 2 0 May07 ? 00:00:00 [kworker/u17:0]
root 792 2 0 May07 ? 00:00:00 [xprtiod]
dbus 883 1 0 May07 ? 00:00:03 /usr/bin/dbus-daemon
--system --address=systemd: --nofork --nopidfile --systemd-activation
--syslog-only
root 885 1 0 May07 ? 00:02:42 /usr/sbin/NetworkManager
--no-daemon
root 887 1 0 May07 ? 00:00:44 /usr/sbin/irqbalance
--foreground
root 888 1 0 May07 ? 00:00:00 /usr/bin/VGAuthService -s
root 889 1 0 May07 ? 00:10:28 /usr/bin/vmtoolsd
root 890 1 0 May07 ? 00:00:00 /usr/sbin/sssd -i
--logger=files
chrony 906 1 0 May07 ? 00:00:00 /usr/sbin/chronyd
rngd 944 1 0 May07 ? 00:00:49 /sbin/rngd -f
--fill-watermark=0
root 946 890 0 May07 ? 00:00:06 /usr/libexec/sssd/sssd_be
--domain implicit_files --uid 0 --gid 0 --logger=files
root 954 1 0 May07 ? 00:00:00 /usr/sbin/iscsid -f -d2
root 962 890 0 May07 ? 00:00:12 /usr/libexec/sssd/sssd_nss
--uid 0 --gid 0 --logger=files
root 963 1 0 May07 ? 00:00:00 /usr/sbin/gssproxy -D
root 970 1 0 May07 ? 00:00:02
/usr/lib/systemd/systemd-logind
root 971 2 0 May07 ? 00:00:00 [iscsi_eh]
root 998 1 0 May07 ? 00:00:33 /usr/sbin/rsyslogd -n
root 1007 1 0 May07 ? 00:00:00 /usr/sbin/crond -n
root 6223 1 0 May07 ? 00:07:27 /usr/local/vtl/bin/sanidmgr
root 6271 2 0 May07 ? 00:00:03 [bksc_exec]
root 6272 2 0 May07 ? 00:00:03 [bksc_done]
root 6274 2 0 May07 ? 00:00:00 [scsi_eh_3]
root 6275 2 0 May07 ? 00:00:00 [scsi_tmf_3]
root 6460 2 0 May07 ? 00:00:00 [kdownstream]
root 6461 2 0 May07 ? 00:00:07 [msgfilter]
root 6463 2 0 May07 ? 00:00:12 [iocore]
root 6466 2 0 May07 ? 00:00:02 [ioctl_mgr]
root 6467 2 0 May07 ? 00:00:02 [ioctl_mgr]
root 6505 1 0 May07 ? 00:00:00 fsnupd -d 0
root 6523 2 0 May07 ? 00:01:50 [trudpd]
root 6539 2 0 May07 ? 00:00:00 [fsnalias_worker]
root 6541 2 0 May07 ? 00:00:00 [fsnalias_check]
root 6551 2 0 May07 ? 00:00:00 [misc_thread]
root 6553 2 0 May07 ? 00:00:01 [mtcp2_listen]
root 6554 2 0 May07 ? 00:00:00 [listen_handle]
root 6557 2 0 May07 ? 00:00:00 [ipstord]
root 6579 2 0 May07 ? 00:00:00 [kfsvshostwq]
root 6580 2 0 May07 ? 00:00:00 [scsi_eh_4]
root 6582 2 0 May07 ? 00:00:00 [scsi_tmf_4]
root 6654 1 0 May07 ? 00:00:00
/usr/local/vtl/bin/ipstorcomm -d 0
root 6655 6654 0 May07 ? 00:05:18
/usr/local/vtl/bin/ipstorcomm -d 0
root 6656 6655 0 May07 ? 00:00:36
/usr/local/vtl/bin/ipstorcomm -d 0
root 6693 1 0 May07 ? 00:00:00 rdesirkey
root 6699 1 0 May07 ? 00:00:12 ikmd
root 6721 1 0 May07 ? 00:00:35
/usr/local/vtl/bin/iscliproxy
root 6747 1 0 May07 ? 00:00:40 /usr/local/vtl/bin/ipstorlog
root 6780 1 0 May07 ? 00:04:50 /usr/local/vtl/bin/snmpd
root 7722 1 0 May07 ? 00:00:00 /usr/local/vtl/bin/ipstorsm
root 7723 7722 0 May07 ? 01:08:12 /usr/local/vtl/bin/ipstorsm
root 7901 1 0 May07 ? 00:00:00 /usr/lib/systemd/systemd
--user
root 7904 7901 0 May07 ? 00:00:00 (sd-pam)
root 8179 1 0 May07 tty1 00:00:00 /sbin/agetty -o -p -- \u
--noclear tty1 linux
root 14199 1 0 May08 ? 00:00:01 sshd: root [priv]
root 14201 14199 0 May08 ? 00:00:01 sshd: root@pts/0
root 14202 14201 0 May08 pts/0 00:00:00 -bash
root 14261 1 0 May08 ? 00:00:00 /usr/sbin/sshd -D
-oCiphers=aes256-...@openssh.com,chacha20-poly1...@openssh.com,aes256-ctr,aes256-cbc,aes128-...@openssh.com,aes128-ctr,aes128-cbc
-oMACs=hmac-sha2-256-...@openssh.com,hmac-sha1-...@openssh.com,umac-128-...@openssh.com,hmac-sha2-512-...@openssh.com,hmac-sha2-256,hmac-sha1,umac-...@openssh.com,hmac-sha2-512
-oGSSAPIKexAlgorithms=gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-
-oKexAlgorithms=curve25519-sha256,curve25519-sha...@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1
-oHostKeyAlgorithms=ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-...@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-...@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-...@openssh.com,ssh-ed25519,ssh-ed25519-cert-...@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-...@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-...@openssh.com,ssh-rsa,ssh-rsa-cert-...@openssh.com
-oPubkeyAcceptedKeyTypes=ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-...@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-...@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-...@openssh.com,ssh-ed25519,ssh-ed25519-cert-...@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-...@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-...@openssh.com,ssh-rsa,ssh-rsa-cert-...@openssh.com
-oCASignatureAlgorithms=ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,rsa-sha2-256,rsa-sha2-512,ssh-rsa
root 122905 2 0 May19 ? 00:00:27 [kworker/7:0-events]
root 126037 2 0 05:30 ? 00:00:00 [kworker/1:2-events]
root 128108 2 0 08:40 ? 00:00:00
[kworker/4:1-events_power_efficient]
root 128360 2 0 09:10 ? 00:00:00 [kworker/4:2-cgroup_destroy]
root 128430 2 0 09:30 ? 00:00:00 [kworker/6:0-mm_percpu_wq]
root 128738 2 0 11:00 ? 00:00:00 [kworker/3:3-mm_percpu_wq]
root 128761 2 0 11:00 ? 00:00:00 [kworker/2:1-mm_percpu_wq]
root 130244 1 1 11:01 ? 00:03:50 /usr/local/jre/bin/java
-Djava.util.logging.config.file=/usr/local/apache-tomcat/conf/logging.properties
-Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -d64 -server
-Xms1800m -Xmx8192m -XX:MaxMetaspaceSize=1800m
-Djdk.tls.ephemeralDHKeySize=2048
-Djava.protocol.handler.pkgs=org.apache.catalina.webresources
-Dorg.apache.catalina.security.SecurityListener.UMASK=0027
-Dignore.endorsed.dirs= -classpath
/usr/local/apache-tomcat/bin/bootstrap.jar:/usr/local/apache-tomcat/bin/tomcat-juli.jar
-Dcatalina.base=/usr/local/apache-tomcat
-Dcatalina.home=/usr/local/apache-tomcat
-Djava.io.tmpdir=/usr/local/apache-tomcat/temp
org.apache.catalina.startup.Bootstrap start
elastic+ 130516 1 1 11:01 ? 00:03:26 /bin/java -Xms8g -Xmx8g
-Djava.awt.headless=true -XX:+UseParNewGC -XX:+UseConcMarkSweepGC
-XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly
-XX:+HeapDumpOnOutOfMemoryError -XX:+DisableExplicitGC -Dfile.encoding=UTF-8
-Delasticsearch -Des.foreground=yes -Des.path.home=/usr/share/elasticsearch -cp
:/usr/share/elasticsearch/lib/elasticsearch-1.7.6.jar:/usr/share/elasticsearch/lib/*:/usr/share/elasticsearch/lib/sigar/*
-Des.pidfile=/var/run/elasticsearch/elasticsearch.pid
-Des.default.path.home=/usr/share/elasticsearch
-Des.default.path.logs=/var/log/elasticsearch
-Des.default.path.data=/var/lib/elasticsearch
-Des.default.config=/etc/elasticsearch/elasticsearch.yml
-Des.default.path.conf=/etc/elasticsearch
org.elasticsearch.bootstrap.Elasticsearch
postgres 130548 1 0 11:01 ? 00:00:00 /usr/pgsql-9.6/bin/postgres
-D /DB/postgres/data
postgres 130561 130548 0 11:01 ? 00:00:00 postgres: logger process
postgres 130563 130548 0 11:01 ? 00:00:00 postgres: checkpointer
process
postgres 130564 130548 0 11:01 ? 00:00:00 postgres: writer process
postgres 130565 130548 0 11:01 ? 00:00:00 postgres: wal writer process
postgres 130566 130548 0 11:01 ? 00:00:00 postgres: autovacuum
launcher process
postgres 130567 130548 0 11:01 ? 00:00:00 postgres: stats collector
process
root 130570 1 0 11:01 ? 00:00:01 /usr/local/freestor/bin/fmsd
postgres 130675 130548 0 11:01 ? 00:00:03 postgres: postgres freestor
127.0.0.1(42660) idle
postgres 130676 130548 0 11:01 ? 00:00:04 postgres: postgres freestor
127.0.0.1(42662) idle
postgres 130677 130548 0 11:01 ? 00:00:03 postgres: postgres freestor
127.0.0.1(42664) idle
root 131206 2 0 13:00 ? 00:00:00 [kworker/7:2]
root 131269 2 0 13:20 ? 00:00:00 [kworker/6:2]
root 131347 2 0 13:49 ? 00:00:00 [kworker/5:1-mm_percpu_wq]
root 131364 2 0 13:56 ? 00:00:00
[kworker/u16:2-events_unbound]
root 131401 2 0 14:05 ? 00:00:00
[kworker/u16:1-events_unbound]
root 131438 2 0 14:20 ? 00:00:00 [kworker/2:2]
root 131465 2 0 14:30 ? 00:00:00 [kworker/0:2-events]
root 131490 2 0 14:40 ? 00:00:00 [kworker/3:0]
root 131491 2 0 14:40 ? 00:00:00 [kworker/0:1-events]
root 131515 2 0 14:49 ? 00:00:00
[kworker/1:0-events_freezable]
root 131520 2 0 14:50 ? 00:00:00 [kworker/5:0]
root 131525 14261 0 14:52 ? 00:00:00 sshd: root [priv]
root 131529 131525 0 14:52 ? 00:00:00 sshd: root@pts/1
root 131530 131529 0 14:52 pts/1 00:00:00 -bash
root 131600 131530 0 14:57 pts/1 00:00:00 ps -ef
Thanks
-----Original Message-----
From: Christopher Schultz <ch...@christopherschultz.net>
Sent: Thursday, May 20, 2021 12:49 PM
To: users@tomcat.apache.org
Subject: Re: apache-tomcat-8.5.59 too many open files on Linux 8
Yeggy,
On 5/19/21 19:37, Yeggy Javadi wrote:
Hi Chris,
Thanks for your email. Below are replies to your questions:
1. Did you upgrade anything recently (like Java VM)?
[YJ] To support Linux 8, only Postgres was upgraded from version 9.3 to 9.6.
2. What is error you are seeing? A full stack trace would be helpful.
[YJ] The application error can occur in any place with the (Too many open
files) error when the limit of open files for tomcat has reached (262144 in my
environment), for example, I can get a connectivity error when pulling info
from a server as below :
[InventoryPullerTask - 10.1.6.25] ERROR FSSDataCollectorService -
Error : The XML configuration file failed to be retrieved for server
10.1.6.25. Check server connectivity.Error retrieving IPStorConfg for
server=10.1.6.25 error=java.io.FileNotFoundException:
/usr/local/apache-tomcat-8.5.59/webapps/ROOT/WEB-INF/lib/spring-orm-3.
2.10.RELEASE.jar (Too many open files) restatus=-1 output=
3. What is your <Connector> configuration?
[YJ] It is as below in server.xml:
<Connector address="0.0.0.0" port="80" protocol="HTTP/1.1"
maxThreads="150"
minSpareThreads="25" maxSpareThreads="75"
enableLookups="false" acceptCount="100"
connectionTimeout="20000" disableUploadTimeout="true"
compression="on"
compressionMinSize="2048"
noCompressionUserAgents="gozilla, traviata"
compressableMimeType="text/html,text/xml,application/json"
redirectPort="443" />
...........
<Connector address="0.0.0.0" port="443"
protocol="org.apache.coyote.http11.Http11NioProtocol" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslEnabledProtocols="TLSv1.2"
ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA"
keystoreFile="conf/freestor" keystorePass="freestor"/>
<!-- Define an AJP 1.3 Connector on port 8009 -->
<Connector address="0.0.0.0" port="8009" protocol="AJP/1.3"
redirectPort="443" secretRequired="false" />
You have lots of settings on the HTTP connector but not the HTTPS one.
Is that intentional? Which one are you using? Or both?
Are you using AJP? If not, disable the connetor entirely. Definitely never
enable it on 0.0.0.0 unless you really know what you are doing.
4. Are you counting all the open files for a single process or all of the
sub-processes which represent the threads of the main process?
Different kernel versions count things differently.
[YJ] I am just getting the process ID of tomcat and count open files
for that process
Ok.
5. Running lsof, netstat, etc. can you see if some large number of those
sockets are bound to any specific port (listen or connect)?
[YJ] Here is the netstat output:
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 Yeggy-F8-FMSVA:ssh 10.12.3.33:55236 ESTABLISHED
tcp 0 64 Yeggy-F8-FMSVA:ssh 10.197.255.10:60378 ESTABLISHED
tcp 0 0 localhost.loca:postgres localhost.localdo:36846 ESTABLISHED
That's not helpful. I want to see what the JVM process is holding, not what the
whole OS is handling.
My guess is that lsof is going to be a better bet for inspecting the process. But if you get
"too many open files" being thrown inside the JVM and you don't see a 1/4 million lines
of "lsof" output on your process, then something else is going on. But remember to limit
your lsof to *just the JVM* process.
-chris
-----Original Message-----
From: Christopher Schultz <ch...@christopherschultz.net>
Sent: Monday, May 17, 2021 5:18 PM
To: users@tomcat.apache.org
Subject: Re: apache-tomcat-8.5.59 too many open files on Linux 8
Yeggy,
On 5/17/21 15:17, Yeggy Javadi wrote:
Hi,
I am seeing too many TCP sockets open by tomcat on Oracle Linux 8:
java 51798 root 6601u sock 0,9 0t0 3959342 protocol:
TCPv6
I was running the same application on Linux 7.6 with the same
apache-tomcat version without seeing this issue. I saw that RedHat
has removed apache-tomcat fom their Linux 8 distribution. Please help
with throubleshooting and indicating if there is any changes in Linux
8 that can explain this
Configuration:
apache-tomcat-8.5.59
OEL Linux 8 kernel 4.18.0-193.28.1.el8_2.x86_64 Web-based application
using Postgres and elastic search databases
# ps -ef | grep tomcat
root 51798 1 1 11:16 ? 00:06:01 /usr/local/jre/bin/java
-Djava.util.logging.config.file=/usr/local/apache-tomcat/conf/logging.properties
-Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -d64 -server
-Xms1800m -Xmx8192m -XX:MaxMetaspaceSize=1800m
-Djdk.tls.ephemeralDHKeySize=2048
-Djava.protocol.handler.pkgs=org.apache.catalina.webresources
-Dorg.apache.catalina.security.SecurityListener.UMASK=0027
-Dignore.endorsed.dirs= -classpath
/usr/local/apache-tomcat/bin/bootstrap.jar:/usr/local/apache-tomcat/bin/tomcat-juli.jar
-Dcatalina.base=/usr/local/apache-tomcat
-Dcatalina.home=/usr/local/apache-tomcat
-Djava.io.tmpdir=/usr/local/apache-tomcat/temp
org.apache.catalina.startup.Bootstrap start
root 54122 54037 0 19:43 pts/1 00:00:00 grep --color=auto tomcat
# cat /proc/51798/limits
Limit Soft Limit Hard Limit Units
Max cpu time unlimited unlimited seconds
Max file size unlimited unlimited bytes
Max data size unlimited unlimited bytes
Max stack size 8388608 unlimited bytes
Max core file size unlimited unlimited bytes
Max resident set unlimited unlimited bytes
Max processes 256518 256518 processes
Max open files 262144 262144 files
Max locked memory 65536 65536 bytes
Max address space unlimited unlimited bytes
Max file locks unlimited unlimited locks
Max pending signals 256518 256518 signals
Max msgqueue size 819200 819200 bytes
Max nice priority 0 0
Max realtime priority 0 0
Max realtime timeout unlimited unlimited us
Too may open files:
# lsof -p 51798 | wc -l
6679
Most of open files are TCP sockets:
java 51798 root 6601u sock 0,9 0t0 3959342 protocol:
TCPv6
# lsof -p 51798 | grep "protocol: TCPv6" | wc -l
6413
Some potentially dumb questions:
1. Did you upgrade anything recently (like Java VM)?
2. What is error you are seeing? A full stack trace would be helpful.
3. What is your <Connector> configuration?
4. Are you counting all the open files for a single process or all of the
sub-processes which represent the threads of the main process?
Different kernel versions count things differently.
5. Running lsof, netstat, etc. can you see if some large number of those
sockets are bound to any specific port (listen or connect)?
-chris