sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (10 occurrences)
-
Prezados, tenho um pfsense 2.4.3_1com o squid proxy, squidguard e pf2ad para autenticação com o AD, desde sempre aparece esses alertas no log de sistema, já até troquei de maquina mas sempre aparece isso, alguém tem ideia do que pode ser?
Jun 28 10:23:54 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (10 occurrences)
Jun 28 10:14:47 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (1 occurrences)
Jun 28 10:13:46 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (24 occurrences)
Jun 28 09:59:35 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (6 occurrences)
Jun 28 09:57:54 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (23 occurrences)
Jun 28 09:56:22 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (134 occurrences)
Jun 28 09:53:48 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (1 occurrences)
Jun 28 09:50:53 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (17 occurrences)
Jun 28 09:44:16 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (11 occurrences)
Jun 28 09:35:06 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (5 occurrences)
Jun 28 09:28:57 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (2 occurrences)
Jun 28 09:27:56 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (9 occurrences)
Jun 28 09:24:53 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (24 occurrences)
Jun 28 09:21:20 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (2 occurrences)
Jun 28 09:19:49 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (8 occurrences)
Jun 28 09:06:35 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (27 occurrences)
Jun 28 08:54:14 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (3 occurrences)
Jun 28 08:40:11 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (4 occurrences)
Jun 27 20:27:00 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (12 occurrences)
Jun 27 20:05:26 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (6 occurrences)
Jun 27 19:54:31 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (304 occurrences)
Jun 27 14:04:32 kernel sonewconn: pcb 0xfffff801ef9afcb0: Listen queue overflow: 193 already in queue awaiting acceptance (2271 occurrences)
Jun 27 14:03:31 kernel sonewconn: pcb 0xfffff801ef9afcb0: Listen queue overflow: 193 already in queue awaiting acceptance (12673 occurrences) -
Pesquisando na internet consegui obter o processo que gera esses alertas Samba4, utilizo o pf2ad em um servidor com 550 maquinas conectadas, já ajustei a Authentication Processes para 800 mas meu pfsense 2.4.3_1 sempre aparece o erro no log do Sistema:
Jun 28 10:55:51 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (112 occurrences)
ao usar o comando netstat -Aan | grep fffff8013eb5aa50 o resultadofffff8013eb5aa50 stream 0 0 fffff8005c5b4ce8 0 0 0 /var/run/samba4/winbindd/pipe
algumas vezes alguns usuários reclamam de paginas solicitando autenticação, vocês recomenda aumentar ainda mais esse numero de autenticação?
o numero Authentication TTL esta em 30 minutos será que é pouco para esse tamanho de rede? -
@dreivi
Aumentei a fila com o comando: kern.ipc.soacceptqueue=4096 notei que houve uma melhora mas ainda continua alguém já pegou esse problema e resolveu?
Current listen queue sizes (qlen/incqlen/maxqlen)
Proto Listen Local Address
tcp4 0/0/256 127.0.0.1.953
tcp4 0/0/256 *.53
tcp6 0/0/256 *.53
tcp4 0/0/4096 127.0.0.1.8080
tcp4 110/0/4096 192.168.220.144.8080