[c-nsp] Thousands of tcp sessions stuck in TIMEWAIT

Joe Freeman joe at netbyjoe.com
Wed May 11 10:47:31 EDT 2011


I have a customer with an 1841 doing webvpn, running advsecurity-12.4-24.T5.
They have been randomly loosing the ability to connect to resources through
this unit.

A show tcp brief reveals that there are thousands of sockets stuck in
TIMEWAIT. In fact it took almost six minutes for the show tcp brief to dump
it's output to a file in flash:.

A clear tcp tcb * will, of course wipe out all the connections and allow the
customer to resume making connections for a time.

Anyone have any thoughts on how I should troubleshoot this further, or even
better, thoughts as to resolution?

Thanks-
Joe


More information about the cisco-nsp mailing list