sonewconn: pcb: Listen queue overflow flooding logs

[fjen]

I did a recent rebuild of pfSense in a new machine, and I've been receiving the following messages in my System Logs:

sonewconn: pcb 0xfffff8005876e910: Listen queue overflow: 8 already in queue awaiting acceptance (1 occurrences)

From a quick search, it seems as though people blame this on the NIC's not being capable enough to handle the traffic. However, I am using genuine Intel i350-t4 NIC's and people tout that as being a "high-end" NIC. I assume it should be capable of handling gigabit traffic just fine, so I think it's probably not that issue.

Is there some system tuneable value that is possibly affecting this issue? I'm not noticing a performance impact, but I would like to read my logs without it being flooded with this message every few minutes.

[jimp]

Look at the output of netstat -LaAn and see what port number that pcb corresponds to, and then look at sockstat and see what is listening on that port.

That one process is being overloaded with requests, whatever it may be.