SSH 3.2.0: Too many open connections --- how to check what's open?

heplesser_at_gmail.com
Date: 11/16/05


Date: 16 Nov 2005 01:14:40 -0800


Hi!

I am managing a compute server under Tru64 Unix V5.1B-3. Access is
allowed via ssh only. Access is managed by the sshd2 supplied with the
OS, i.e. "SSH Secure Shell Tru64 UNIX 3.2.0".

The maximum number of connections is set to 50.

Recently, connections have been refused on several occasions with the
error message "Received disconnect from 128.39.236.85: 12: Too many
connections.", while the auth.log file on my machine shows " Too many
open connections (max 50, now open 50)".

But netstat showed at that time only seven open connections. Five of
those connections forwarded X11, but even if I count those as
connections, I only get to 13.

Is there any way to query the sshd for the open connections? If not,
what debug level do I need to choose when I restart sshd to get
sufficient information to trace "zombie" connections?

And would it be safe to simply restart sshd2 to get rid of "zombie"
connections, or could such a restart open the door for intruders?

Thanks in advance for any information!
Hans



Relevant Pages

  • Re: service soemtime will get slower -- what to watch
    ... I bet that after a couple of days you have a BIG number of connections open and that is the problem you are seeing. ... Not just client initiative the conversation, sometime the srever will actively send data to client,and then client response as well. ... And the conversation between client and server has to be "real time". ... see how many open connections you have. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: service soemtime will get slower -- what to watch
    ... I bet that after a couple of days you have a BIG number of connections open ... The client connect to the server in ... Server) thought TCP/IP socket in a local 100M LAN. ... see how many open connections you have. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Strange Message on Shutdown...!
    ... If you are nervous about someone watching you on a network, ... want to see if there are any open connections to your machine. ... all windows associated with network connectivity (AIM/Internet Explorer ...
    (microsoft.public.windowsxp.basics)
  • Re: Max open connections
    ... > to restrict the number of open connections. ... If there is such an option there will be no trouble in the ...
    (Fedora)
  • Re: SBS Exchange 2003: too many "Current Sessions" opened
    ... Since exchange defaults to accepting ... IF, after a week, you are still seeing some connections, try *DISABLING* ... SenderID filtering on the Virtual SMTP server. ... You do *not* need to restart the server, ...
    (microsoft.public.windows.server.sbs)