Found this. It will remove the CLOSE_WAITs:
#!/usr/bin/ksh
#
# Author Tim Fulford
# Date 22 Jan 2001
# Purpose Kills CLOSE_WAIT sockets using ndd
close_wait_ip_collect ()
{
netstat -na | grep CLOSE | cut -c20-65 > /tmp/close_wait_ip_collect.out
}
close_wait_ip_convert_to_hex ()
{
cat /tmp/close_wait_ip_collect.out | while read TRGT SRCE
do
echo ${TRGT}.${SRCE} | awk -F"." '{printf "%02x%02x%02x%02x%04x%02x%02x%02x%02x%04x\n", $1, $2, $3, $4, $5, $6, $7, $8, $9, $10}'
done
}
close_wait_remove_socket ()
{
cat /tmp/close_wait_ip_convert_to_hex.out | while read SOCKET
do
echo "Clearing socket HEX address : ${SOCKET}"
echo "ndd -set /dev/tcp tcp_discon_by_addr ${SOCKET}"
done
}
close_wait_clear_up ()
{
rm /tmp/close_wait_ip_convert_to_hex.out /tmp/close_wait_ip_collect.out
echo "Finished...."
}
close_wait_ip_collect
close_wait_ip_convert_to_hex > /tmp/close_wait_ip_convert_to_hex.out
close_wait_remove_socket
close_wait_clear_up
Also found this:
Fixes Included in Netscape Directory Server 4.16
PR_Accept Failed Error Messages in the Logs
In Directory Server 4.15 a regression defect was introduced in which all connections would not be closed and left in a CLOSE_WAIT state. In this case all available file descriptors/handles would eventually be used up. PR_Accept failed error messages would appear in the logs and the server would be non-responsive. This regression is fixed. (557007)
Not sure of the relationship between IPLANET and Netscape Server but there are links to both on the bottom of the page. Also a list of recommended HPUX patches.
http://docs.sun.com/source/816-5595-10/Ron
