Open Hermanverschooten opened 6 years ago
Hi, I noticed on a number of production servers that there are a number of TCP connection to https://www.iana.org that remain in CLOSE_WAIT. The only code that references www.iana.org seems to be tzdata. Do you have any clue?
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME beam.smp 1424 root 11u IPv4 18985 0t0 TCP *:35058 (LISTEN) beam.smp 1424 root 12u IPv4 18987 0t0 TCP localhost:60553->localhost:epmd (ESTABLISHED) beam.smp 1424 root 13u IPv4 18137 0t0 TCP gratwifi.lan:81 (LISTEN) beam.smp 1424 root 16u IPv4 422369 0t0 TCP 192.168.1.7:42237->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 17u IPv4 16152 0t0 UDP *:52241 beam.smp 1424 root 19u IPv4 723308 0t0 TCP 192.168.1.7:37011->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 20u IPv4 581191 0t0 TCP 192.168.1.7:60339->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 21u IPv4 1129389 0t0 TCP 192.168.1.7:54109->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 22u IPv4 864988 0t0 TCP 192.168.1.7:59174->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 23u IPv4 1011660 0t0 TCP 192.168.1.7:56804->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 24u IPv4 1276491 0t0 TCP 192.168.1.7:58875->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 25u IPv4 1435758 0t0 TCP 192.168.1.7:33240->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 26u IPv4 1592295 0t0 TCP 192.168.1.7:37590->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 27u IPv4 1764131 0t0 TCP 192.168.1.7:41133->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 28u IPv4 2365627 0t0 TCP 192.168.1.7:32983->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 29u IPv4 1955942 0t0 TCP 192.168.1.7:59567->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 30u IPv4 2573572 0t0 TCP 192.168.1.7:45931->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 31u IPv4 2168659 0t0 TCP 192.168.1.7:50945->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 32u IPv4 2499120 0t0 UDP *:60100 beam.smp 1424 root 33u IPv4 2979799 0t0 TCP 192.168.1.7:37016->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 34u IPv4 2785116 0t0 TCP 192.168.1.7:33791->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 35u IPv4 3183900 0t0 TCP 192.168.1.7:37685->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 36u IPv4 3352151 0t0 TCP 192.168.1.7:56252->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 37u IPv4 101022 0t0 TCP 192.168.1.7:59720->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 38u IPv4 262679 0t0 TCP 192.168.1.7:46152->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 39u IPv4 3537364 0t0 TCP 192.168.1.7:39599->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 40u IPv4 3882622 0t0 TCP 192.168.1.7:60647->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 41u IPv4 3733899 0t0 TCP 192.168.1.7:35346->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 42u IPv4 4064143 0t0 TCP 192.168.1.7:52116->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 43u IPv4 4372605 0t0 TCP 192.168.1.7:52828->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 44u IPv4 4512808 0t0 TCP 192.168.1.7:38491->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 45u IPv4 4235652 0t0 TCP 192.168.1.7:45662->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 46u IPv4 4630737 0t0 TCP 192.168.1.7:54971->www.iana.org:https (CLOSE_WAIT) beam.smp 1424 root 47u IPv4 4790369 0t0 TCP 192.168.1.7:49358->www.iana.org:https (CLOSE_WAIT)
Hi. It sounds likely that that is tzdata. In the default configuration iana.org is polled every day for updates to the timezone rules.
Hi, I noticed on a number of production servers that there are a number of TCP connection to https://www.iana.org that remain in CLOSE_WAIT. The only code that references www.iana.org seems to be tzdata. Do you have any clue?