socket overflows

[bruandet]

Hi,
I am running HPUX 11.0. Wneb I do a netstat -s I see under the udp section: socket overflows = 2738.(for one morning)and it's increase.
I'm not use My server for Nfs, and I try to increase nfsd to 64.But my problem still exist.
why can I do ?

[Todd Whitcher · Accepted solution]

Try to determine which Process is causing yoru socket overflows. Once you determine that find out why the application is not pulling data off the socket fast enough.

The Customer viewable document is KBRC00007731, in the Technical Knowledge base.
Here is a portion of the document.
# netstat -s -p udp
udp:
0 incomplete headers
0 bad checksums
6 socket overflows


To isolate the connection the overflows were created on use the ndd
command

# ndd -get /dev/udp ip_udp_status

UDP ipc hidx lport fport laddr faddr flags overflows
01cba440 0033 c033 0000 000.000.000.000 000.000.000.000 20800000 0000000000
01b19640 0043 0043 0000 000.000.000.000 000.000.000.000 a0800000 0000000000
01c22240 0049 0849 0000 000.000.000.000 000.000.000.000 20800000 0000000000

01c05d40 0059 c059 0000 000.000.000.000 000.000.000.000 20800000 0000000006

0155b440 006f 006f 0000 000.000.000.000 000.000.000.000 20800000 0000000000
01baae40 0087 0287 0000 000.000.000.000 000.000.000.000 20800000 0000000000
01c19940 0087 0087 0000 000.000.000.000 000.000.000.000 20800000 0000000000



The third field from the left, lport, is the UDP applications listener
port. This value is in hex, convert this to decimal to see which UDP port
the application is running on.

c059 hexadecimal converts to 49241 decimal

Using lsof the process i.d. and program name can be found.
./opt/lsof -i | grep 49241
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
inetd 967 root 29u inet 0x1c05d40 0t0 UDP *:49241 (Idle)
rpc.spray 1966 root 0u inet 0x1c05d40 0t0 UDP *:49241 (Idle)
rpc.spray 1966 root 1u inet 0x1c05d40 0t0 UDP *:49241 (Idle)
rpc.spray 1966 root 2u inet 0x1c05d40 0t0 UDP *:49241 (Idle)

In this case the program causing the problem was spray or rpc.sprayd which is
an rpc application used to send / receive UDP packets.

lsof is a public domain utility readily available on the internet, try
the HPUX Software Porting and Archive Centre.

http://hpux.cs.utah.edu/

[bruandet]

ok, thank you I have to identify application which posed problem.