Experimental Physics and
Industrial Control System

Andrew Johnson <[email protected]> · Fri, 3 Jun 2016 12:50:34 -0500

Hi Mark,

On 06/03/2016 12:16 PM, Mark Rivers wrote:
> casr showed some things like this that look suspicious?
> 
> TCP 164.54.160.93:51762(Ferrari): User="XAS_User", V4.13, 677 Channels,
> Priority=0
>       Task Id=0x7a24820, Socket FD=75
>       Secs since last send 593.58, Secs since last receive 593.58
>       Unprocessed request bytes=16, Undelivered response bytes=5192
>       State=up jumbo-send-buf
>  
> Any ideas, and things to look at if I am able to reproduce the problem?

This might be a hung client program which would explain the problem, do
you recognize it? Look for the CA client running on Ferrari with a TCP
socket open on port 51762 (hint below).

In general to find hung clients you can run inetstatShow and look for
TCP connections that have large numbers in the Send-Q column, then go
and identify the specific client with that connection. You will have to
do that through the port number in the "Foreign Address" column, and
find which process on that workstation actually has a TCP socket open
with that port number; on Linux the 'lsof' program can do this if you
can login as the same user as the client or as root, although the
arguments to lsof are rather obscure (try 'lsof -i4:5064 -Tqs').

- Andrew

-- 
Arguing for surveillance because you have nothing to hide is no
different than making the claim, "I don't care about freedom of
speech because I have nothing to say." -- Edward Snowdon

Experimental Physics and Industrial Control System

Experimental Physics and
Industrial Control System