IBM Support

Why is the Log File Agent causing many connection in TIME_WAIT state?

Question & Answer


Question

While the Log File Agent is running, you might see many connections being created in the netstat output, with a TIME_WAIT state. These connections are short-living connections, which should be there only a couple of seconds.
In the netstat output on Solaris, you might, for example see:
#‌ netstat -f inet -anuv | grep "TIME_WAIT"
1.2.3.4.111 261760 1f937c3d 1f937c3d 269940 48a0bd61 48a0bd61 1312 8180 TIME_WAIT root 11342 /opt/IBM/ITM/sol286/lo/bin/kloagent hostname_loginst1
1.2.3.4.111 261760 9331f8b5 9331f8b5 269940 9399e166 9399e166 1312 8180 TIME_WAIT root 11342 /opt/IBM/ITM/sol286/lo/bin/kloagent hostname_loginst1
1.2.3.4.111 261760 f1bd1781 f1bd1781 269940 5f184288 5f184288 1312 8180 TIME_WAIT root 11342 /opt/IBM/ITM/sol286/lo/bin/kloagent hostname_loginst1
...
This behavior is not limited to Solaris, but can occur on any Unix/Linux system.
Why is this happening?

[{"Type":"MASTER","Line of Business":{"code":"LOB67","label":"IT Automation \u0026 App Modernization"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSTFXA","label":"Tivoli Monitoring"},"ARM Category":[{"code":"a8m0z0000001f3sAAA","label":"LogFile Agent"}],"ARM Case Number":"TS004933122","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Product Synonym

itmv6
LFA
Log File Agent

Document Information

More support for:
Tivoli Monitoring

Component:
LogFile Agent

Software version:
All Versions

Document number:
6415917

Modified date:
10 July 2024

UID

ibm16415917

Manage My Notification Subscriptions