Добрый день.
После установки и подключения zabbix agent на windows наблюдается куча незакрытых соединений с сервером. Висят со статусом time wait :
TCP 192.168.0.8:10050 192.168.0.19:53778 TIME_WAIT 0
TCP 192.168.0.8:10050 192.168.0.19:53780 TIME_WAIT 0
TCP 192.168.0.8:10050 192.168.0.19:53782 TIME_WAIT 0
TCP 192.168.0.8:10050 192.168.0.19:53784 TIME_WAIT 0
TCP 192.168.0.8:10050 192.168.0.19:53786 TIME_WAIT 0
TCP 192.168.0.8:10050 192.168.0.19:53788 TIME_WAIT 0
TCP 192.168.0.8:10050 192.168.0.19:53792 TIME_WAIT 0
TCP 192.168.0.8:10050 192.168.0.19:53794 TIME_WAIT 0
TCP 192.168.0.8:10050 192.168.0.19:53796 TIME_WAIT 0
TCP 192.168.0.8:10050 192.168.0.19:53798 TIME_WAIT 0
Таких записей примерно 800-1500 штук, естественно по таймауту они закрываются, при этом появляются новые.
На сервере такого не наблюдается :
netstat -na | grep 192.168.0.8
tcp 0 0 192.168.0.19:10051 192.168.0.8:54130 TIME_WAIT
tcpdump -i enp3s0f0 -n 'dst 192.168.0.8 or src 192.168.0.8'
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on enp3s0f0, link-type EN10MB (Ethernet), capture size 262144 bytes
16:04:11.768497 IP 192.168.0.19.59150 > 192.168.0.8.10050: Flags [S], seq 1645769762, win 29200, options [mss 1460,sackOK,TS val 70217977 ecr 0,nop,wscale 7], length 0
16:04:11.768692 IP 192.168.0.19.59152 > 192.168.0.8.10050: Flags [S], seq 644773636, win 29200, options [mss 1460,sackOK,TS val 70217977 ecr 0,nop,wscale 7], length 0
16:04:11.769105 IP 192.168.0.8.10050 > 192.168.0.19.59150: Flags [S.], seq 3472255184, ack 1645769763, win 8192, options [mss 1460,nop,wscale 8,sackOK,TS val 1558419814 ecr 70217977], length 0
16:04:11.769150 IP 192.168.0.19.59150 > 192.168.0.8.10050: Flags [.], ack 1, win 229, options [nop,nop,TS val 70217977 ecr 1558419814], length 0
16:04:11.769160 IP 192.168.0.8.10050 > 192.168.0.19.59152: Flags [S.], seq 1596751813, ack 644773637, win 8192, options [mss 1460,nop,wscale 8,sackOK,TS val 1558419814 ecr 70217977], length 0
16:04:11.769182 IP 192.168.0.19.59152 > 192.168.0.8.10050: Flags [.], ack 1, win 229, options [nop,nop,TS val 70217977 ecr 1558419814], length 0
16:04:11.769252 IP 192.168.0.19.59152 > 192.168.0.8.10050: Flags [P.], seq 1:101, ack 1, win 229, options [nop,nop,TS val 70217977 ecr 1558419814], length 100
16:04:11.770098 IP 192.168.0.8.10050 > 192.168.0.19.59150: Flags [P.], seq 1:15, ack 38, win 2081, options [nop,nop,TS val 1558419815 ecr 70217977], length 14
16:04:11.770114 IP 192.168.0.8.10050 > 192.168.0.19.59150: Flags [F.], seq 15, ack 38, win 2081, options [nop,nop,TS val 1558419815 ecr 70217977], length 0
16:04:11.770166 IP 192.168.0.19.59150 > 192.168.0.8.10050: Flags [.], ack 15, win 229, options [nop,nop,TS val 70217977 ecr 1558419815], length 0
16:04:11.770198 IP 192.168.0.19.59150 > 192.168.0.8.10050: Flags [F.], seq 38, ack 16, win 229, options [nop,nop,TS val 70217977 ecr 1558419815], length 0
16:04:11.771126 IP 192.168.0.8.10050 > 192.168.0.19.59150: Flags [.], ack 39, win 2081, options [nop,nop,TS val 1558419815 ecr 70217977], length 0
16:04:11.771150 IP 192.168.0.8.10050 > 192.168.0.19.59152: Flags [P.], seq 1:26, ack 101, win 2081, options [nop,nop,TS val 1558419816 ecr 70217977], length 25
16:04:11.771160 IP 192.168.0.8.10050 > 192.168.0.19.59152: Flags [F.], seq 26, ack 101, win 2081, options [nop,nop,TS val 1558419816 ecr 70217977], length 0
16:04:11.771198 IP 192.168.0.19.59152 > 192.168.0.8.10050: Flags [.], ack 26, win 229, options [nop,nop,TS val 70217978 ecr 1558419816], length 0
Подскажите в чем может быть дело? Или это норма?
Сервер Zabbix 3.4.8 (192.168.0.19)
Агент Zabbix 3.4.6 revision 76819 (192.168.0.8)
После установки и подключения zabbix agent на windows наблюдается куча незакрытых соединений с сервером. Висят со статусом time wait :
TCP 192.168.0.8:10050 192.168.0.19:53778 TIME_WAIT 0
TCP 192.168.0.8:10050 192.168.0.19:53780 TIME_WAIT 0
TCP 192.168.0.8:10050 192.168.0.19:53782 TIME_WAIT 0
TCP 192.168.0.8:10050 192.168.0.19:53784 TIME_WAIT 0
TCP 192.168.0.8:10050 192.168.0.19:53786 TIME_WAIT 0
TCP 192.168.0.8:10050 192.168.0.19:53788 TIME_WAIT 0
TCP 192.168.0.8:10050 192.168.0.19:53792 TIME_WAIT 0
TCP 192.168.0.8:10050 192.168.0.19:53794 TIME_WAIT 0
TCP 192.168.0.8:10050 192.168.0.19:53796 TIME_WAIT 0
TCP 192.168.0.8:10050 192.168.0.19:53798 TIME_WAIT 0
Таких записей примерно 800-1500 штук, естественно по таймауту они закрываются, при этом появляются новые.
На сервере такого не наблюдается :
netstat -na | grep 192.168.0.8
tcp 0 0 192.168.0.19:10051 192.168.0.8:54130 TIME_WAIT
tcpdump -i enp3s0f0 -n 'dst 192.168.0.8 or src 192.168.0.8'
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on enp3s0f0, link-type EN10MB (Ethernet), capture size 262144 bytes
16:04:11.768497 IP 192.168.0.19.59150 > 192.168.0.8.10050: Flags [S], seq 1645769762, win 29200, options [mss 1460,sackOK,TS val 70217977 ecr 0,nop,wscale 7], length 0
16:04:11.768692 IP 192.168.0.19.59152 > 192.168.0.8.10050: Flags [S], seq 644773636, win 29200, options [mss 1460,sackOK,TS val 70217977 ecr 0,nop,wscale 7], length 0
16:04:11.769105 IP 192.168.0.8.10050 > 192.168.0.19.59150: Flags [S.], seq 3472255184, ack 1645769763, win 8192, options [mss 1460,nop,wscale 8,sackOK,TS val 1558419814 ecr 70217977], length 0
16:04:11.769150 IP 192.168.0.19.59150 > 192.168.0.8.10050: Flags [.], ack 1, win 229, options [nop,nop,TS val 70217977 ecr 1558419814], length 0
16:04:11.769160 IP 192.168.0.8.10050 > 192.168.0.19.59152: Flags [S.], seq 1596751813, ack 644773637, win 8192, options [mss 1460,nop,wscale 8,sackOK,TS val 1558419814 ecr 70217977], length 0
16:04:11.769182 IP 192.168.0.19.59152 > 192.168.0.8.10050: Flags [.], ack 1, win 229, options [nop,nop,TS val 70217977 ecr 1558419814], length 0
16:04:11.769252 IP 192.168.0.19.59152 > 192.168.0.8.10050: Flags [P.], seq 1:101, ack 1, win 229, options [nop,nop,TS val 70217977 ecr 1558419814], length 100
16:04:11.770098 IP 192.168.0.8.10050 > 192.168.0.19.59150: Flags [P.], seq 1:15, ack 38, win 2081, options [nop,nop,TS val 1558419815 ecr 70217977], length 14
16:04:11.770114 IP 192.168.0.8.10050 > 192.168.0.19.59150: Flags [F.], seq 15, ack 38, win 2081, options [nop,nop,TS val 1558419815 ecr 70217977], length 0
16:04:11.770166 IP 192.168.0.19.59150 > 192.168.0.8.10050: Flags [.], ack 15, win 229, options [nop,nop,TS val 70217977 ecr 1558419815], length 0
16:04:11.770198 IP 192.168.0.19.59150 > 192.168.0.8.10050: Flags [F.], seq 38, ack 16, win 229, options [nop,nop,TS val 70217977 ecr 1558419815], length 0
16:04:11.771126 IP 192.168.0.8.10050 > 192.168.0.19.59150: Flags [.], ack 39, win 2081, options [nop,nop,TS val 1558419815 ecr 70217977], length 0
16:04:11.771150 IP 192.168.0.8.10050 > 192.168.0.19.59152: Flags [P.], seq 1:26, ack 101, win 2081, options [nop,nop,TS val 1558419816 ecr 70217977], length 25
16:04:11.771160 IP 192.168.0.8.10050 > 192.168.0.19.59152: Flags [F.], seq 26, ack 101, win 2081, options [nop,nop,TS val 1558419816 ecr 70217977], length 0
16:04:11.771198 IP 192.168.0.19.59152 > 192.168.0.8.10050: Flags [.], ack 26, win 229, options [nop,nop,TS val 70217978 ecr 1558419816], length 0
Подскажите в чем может быть дело? Или это норма?

Сервер Zabbix 3.4.8 (192.168.0.19)
Агент Zabbix 3.4.6 revision 76819 (192.168.0.8)
Comment