Public Pastes
daily pastebin goal
10%
SHARE
TWEET

Untitled

a guest Jan 23rd, 2017 73 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. _immediately_ before crash:
  2.  
  3. deus@ubuntu:~$ netstat -ant | awk '{print $6}' | sort | uniq -c | sort -n
  4.       1 established)
  5.       1 FIN_WAIT1
  6.       1 Foreign
  7.       2 FIN_WAIT2
  8.      18 CLOSE_WAIT
  9.      32 LISTEN
  10.      81 ESTABLISHED
  11.     862 TIME_WAIT
  12.  
  13. sysctl.conf:
  14.  
  15. deus@ubuntu:~$ cat /etc/sysctl.conf
  16. #
  17. # /etc/sysctl.conf - Configuration file for setting system variables
  18. # See /etc/sysctl.d/ for additional system variables.
  19. # See sysctl.conf (5) for information.
  20. #
  21.  
  22. #kernel.domainname = example.com
  23.  
  24. # Uncomment the following to stop low-level messages on console
  25. #kernel.printk = 3 4 1 3
  26.  
  27. ##############################################################3
  28. # Functions previously found in netbase
  29. #
  30.  
  31. # Uncomment the next two lines to enable Spoof protection (reverse-path filter)
  32. # Turn on Source Address Verification in all interfaces to
  33. # prevent some spoofing attacks
  34. #net.ipv4.conf.default.rp_filter=1
  35. #net.ipv4.conf.all.rp_filter=1
  36.  
  37. # Uncomment the next line to enable TCP/IP SYN cookies
  38. # See http://lwn.net/Articles/277146/
  39. # Note: This may impact IPv6 TCP sessions too
  40. #net.ipv4.tcp_syncookies=1
  41.  
  42. # Uncomment the next line to enable packet forwarding for IPv4
  43. #net.ipv4.ip_forward=1
  44.  
  45. # Uncomment the next line to enable packet forwarding for IPv6
  46. #  Enabling this option disables Stateless Address Autoconfiguration
  47. #  based on Router Advertisements for this host
  48. #net.ipv6.conf.all.forwarding=1
  49.  
  50.  
  51. ###################################################################
  52. # Additional settings - these settings can improve the network
  53. # security of the host and prevent against some network attacks
  54. # including spoofing attacks and man in the middle attacks through
  55. # redirection. Some network environments, however, require that these
  56. # settings are disabled so review and enable them as needed.
  57. #
  58. # Do not accept ICMP redirects (prevent MITM attacks)
  59. #net.ipv4.conf.all.accept_redirects = 0
  60. #net.ipv6.conf.all.accept_redirects = 0
  61. # _or_
  62. # Accept ICMP redirects only for gateways listed in our default
  63. # gateway list (enabled by default)
  64. # net.ipv4.conf.all.secure_redirects = 1
  65. #
  66. # Do not send ICMP redirects (we are not a router)
  67. #net.ipv4.conf.all.send_redirects = 0
  68. #
  69. # Do not accept IP source route packets (we are not a router)
  70. #net.ipv4.conf.all.accept_source_route = 0
  71. #net.ipv6.conf.all.accept_source_route = 0
  72. #
  73. # Log Martian Packets
  74. #net.ipv4.conf.all.log_martians = 1
  75. #
  76. #added by me:
  77.  
  78. net.core.wmem_max=12582912
  79. net.core.rmem_max=12582912
  80. net.ipv4.tcp_rmem= 10240 87380 12582912
  81. net.ipv4.tcp_wmem= 10240 87380 12582912
  82. net.ipv4.tcp_window_scaling = 1
  83. net.ipv4.tcp_timestamps = 1
  84. net.ipv4.tcp_sack = 1
  85. net.ipv4.tcp_no_metrics_save = 1
  86. net.core.netdev_max_backlog = 5000
  87. net.ipv4.tcp_max_syn_backlog = 4096
  88. net.core.somaxconn = 2048
RAW Paste Data
Top