We have a Main application named “Trevor” installed in 2008R2 machine named “TEAMER12” which is slow now. One more application named “TVS” also running in and found there were many connections per second occurring to port 5009.
netstat tool mentions that some fast connection open/close seen for port 5009
So first it will be listening mode like shown belowAfter that iwill become TIME_WAIT and i could see several entries like shown below
TCP 127.0.0.1:56658 TEAMER12:5009 TIME_WAIT
TCP 127.0.0.1:64181 TEAMER12:microsoft-ds ESTABLISHEDagain it will go several entries like TIME_WAIT
TCP 127.0.0.1:49156 TEAMER12:5009 TIME_WAITCan any body tell me whats the reason behind why many connections per second occurring to
port 5009 and why application slow?
Answer
All you’ve shown is that a reasonable number of connections are occurring and then those connections are closing. This may be perfectly normal or it may be abnormal. We don’t know because we only know what you’re telling us.
But the problem is that something isn’t happening. If you can get logs of whatever it is that is supposed to do that something, perhaps they’ll suggest why.
For example, the server might be closing the connection immediately. The client might be closing the connection without doing what it’s supposed to be doing. The client might be sending the correct command but then the server closes the connection. You’ll have to actually troubleshoot.
But all you’ve figured out so far is that a moderate number of connections are taking place.
Attribution
Source : Link , Question Author : michale , Answer Author : David Schwartz
