sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (10 occurrences)



  • Prezados, tenho um pfsense 2.4.3_1com o squid proxy, squidguard e pf2ad para autenticação com o AD, desde sempre aparece esses alertas no log de sistema, já até troquei de maquina mas sempre aparece isso, alguém tem ideia do que pode ser?
    Jun 28 10:23:54 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (10 occurrences)
    Jun 28 10:14:47 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (1 occurrences)
    Jun 28 10:13:46 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (24 occurrences)
    Jun 28 09:59:35 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (6 occurrences)
    Jun 28 09:57:54 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (23 occurrences)
    Jun 28 09:56:22 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (134 occurrences)
    Jun 28 09:53:48 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (1 occurrences)
    Jun 28 09:50:53 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (17 occurrences)
    Jun 28 09:44:16 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (11 occurrences)
    Jun 28 09:35:06 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (5 occurrences)
    Jun 28 09:28:57 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (2 occurrences)
    Jun 28 09:27:56 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (9 occurrences)
    Jun 28 09:24:53 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (24 occurrences)
    Jun 28 09:21:20 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (2 occurrences)
    Jun 28 09:19:49 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (8 occurrences)
    Jun 28 09:06:35 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (27 occurrences)
    Jun 28 08:54:14 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (3 occurrences)
    Jun 28 08:40:11 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (4 occurrences)
    Jun 27 20:27:00 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (12 occurrences)
    Jun 27 20:05:26 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (6 occurrences)
    Jun 27 19:54:31 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (304 occurrences)
    Jun 27 14:04:32 kernel sonewconn: pcb 0xfffff801ef9afcb0: Listen queue overflow: 193 already in queue awaiting acceptance (2271 occurrences)
    Jun 27 14:03:31 kernel sonewconn: pcb 0xfffff801ef9afcb0: Listen queue overflow: 193 already in queue awaiting acceptance (12673 occurrences)



  • Pesquisando na internet consegui obter o processo que gera esses alertas Samba4, utilizo o pf2ad em um servidor com 550 maquinas conectadas, já ajustei a Authentication Processes para 800 mas meu pfsense 2.4.3_1 sempre aparece o erro no log do Sistema:
    Jun 28 10:55:51 kernel sonewconn: pcb 0xfffff8013eb5aa50: Listen queue overflow: 8 already in queue awaiting acceptance (112 occurrences)
    ao usar o comando netstat -Aan | grep fffff8013eb5aa50 o resultado

    fffff8013eb5aa50 stream 0 0 fffff8005c5b4ce8 0 0 0 /var/run/samba4/winbindd/pipe

    algumas vezes alguns usuários reclamam de paginas solicitando autenticação, vocês recomenda aumentar ainda mais esse numero de autenticação?
    o numero Authentication TTL esta em 30 minutos será que é pouco para esse tamanho de rede?



  • @dreivi
    Aumentei a fila com o comando: kern.ipc.soacceptqueue=4096 notei que houve uma melhora mas ainda continua alguém já pegou esse problema e resolveu?
    Current listen queue sizes (qlen/incqlen/maxqlen)
    Proto Listen Local Address
    tcp4 0/0/256 127.0.0.1.953
    tcp4 0/0/256 *.53
    tcp6 0/0/256 *.53
    tcp4 0/0/4096 127.0.0.1.8080
    tcp4 110/0/4096 192.168.220.144.8080


 

© Copyright 2002 - 2018 Rubicon Communications, LLC | Privacy Policy