From: "Massimo S." Received: from [192.168.100.201] (HELO mail.2rosenthals.com) by 2rosenthals.com (CommuniGate Pro SMTP 5.4.10) with ESMTP id 13851734 for ecs-isp@2rosenthals.com; Fri, 15 Aug 2025 05:22:08 -0400 Received: from secmgr-va.2rosenthals.com ([50.73.8.217]:54737 helo=mail2.2rosenthals.com) by mail.2rosenthals.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.97.1) (envelope-from ) id 1umqdN-000000004P6-03RP for ecs-isp@2rosenthals.com; Fri, 15 Aug 2025 05:22:01 -0400 Received: from mail2.quasarbbs.net ([80.86.52.115]:10161) by mail2.2rosenthals.com with esmtp (Exim 4.97.1) (envelope-from ) id 1umqdE-000000004eZ-1lMi for ecs-isp@2rosenthals.com; Fri, 15 Aug 2025 05:21:54 -0400 X-SASI-Hits: BODYTEXTP_SIZE_3000_LESS 0.000000, BODY_SIZE_2000_2999 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, CTE_8BIT 0.000000, DKIM_ALIGNS 0.000000, DKIM_SIGNATURE 0.000000, HTML_00_01 0.050000, HTML_00_10 0.050000, IN_REP_TO 0.000000, LEGITIMATE_SIGNS 0.000000, MSGID_SAMEAS_FROM_HEX_844412 0.100000, MSG_THREAD 0.000000, NO_CTA_URI_FOUND 0.000000, NO_URI_HTTPS 0.000000, REFERENCES 0.000000, REPLYTO_SAMEAS_FROM 0.000000, SENDER_NO_AUTH 0.000000, SUSP_DH_NEG 0.000000, TO_IN_SUBJECT 0.500000, USER_AGENT 0.000000, __ANY_URI 0.000000, __BODY_NO_MAILTO 0.000000, __BOUNCE_CHALLENGE_SUBJ 0.000000, __BOUNCE_NDR_SUBJ_EXEMPT 0.000000, __CT 0.000000, __CTE 0.000000, __CT_TEXT_PLAIN 0.000000, __DKIM_ALIGNS_1 0.000000, __DKIM_ALIGNS_2 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FORWARDED_MSG 0.000000, __FRAUD_MONEY_BIG_COIN 0.000000, __FRAUD_MONEY_BIG_COIN_DIG 0.000000, __FROM_DOMAIN_NOT_IN_BODY 0.000000, __FROM_NAME_NOT_IN_ADDR 0.000000, __FROM_NAME_NOT_IN_BODY 0.000000, __FUR_HEADER 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REFERENCES 0.000000, __HAS_REPLYTO 0.000000, __HEADER_ORDER_FROM 0.000000, __IN_REP_TO 0.000000, __IOC_PHRASE 0.000000, __MAIL_CHAIN 0.000000, __MIME_BOUND_CHARSET 0.000000, __MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MOZILLA_USER_AGENT 0.000000, __MSGID_HEX_844412 0.000000, __NO_HTML_TAG_RAW 0.000000, __REFERENCES 0.000000, __REPLYTO_SAMEAS_FROM_ACC 0.000000, __REPLYTO_SAMEAS_FROM_ADDY 0.000000, __REPLYTO_SAMEAS_FROM_DOMAIN 0.000000, __SANE_MSGID 0.000000, __SCAN_D_NEG 0.000000, __SCAN_D_NEG2 0.000000, __SCAN_D_NEG_HEUR 0.000000, __SCAN_D_NEG_HEUR2 0.000000, __SUBJ_ALPHA_END 0.000000, __SUBJ_ALPHA_NEGATE 0.000000, __SUBJ_REPLY 0.000000, __TO_IN_SUBJECT 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_MAILTO 0.000000, __URI_NO_WWW 0.000000, __URI_NS 0.000000, __USER_AGENT 0.000000 X-SASI-Probability: 10% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 5.1.4, AntispamData: 2025.8.15.82719 X-SASI-Hits: BODYTEXTP_SIZE_3000_LESS 0.000000, BODY_SIZE_2000_2999 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, CTE_8BIT 0.000000, DKIM_ALIGNS 0.000000, DKIM_SIGNATURE 0.000000, HTML_00_01 0.050000, HTML_00_10 0.050000, IN_REP_TO 0.000000, LEGITIMATE_SIGNS 0.000000, MSGID_SAMEAS_FROM_HEX_844412 0.100000, MSG_THREAD 0.000000, NO_CTA_URI_FOUND 0.000000, NO_URI_HTTPS 0.000000, REFERENCES 0.000000, REPLYTO_SAMEAS_FROM 0.000000, SUSP_DH_NEG 0.000000, TO_IN_SUBJECT 0.500000, USER_AGENT 0.000000, __ANY_URI 0.000000, __AUTH_RES_PASS 0.000000, __BODY_NO_MAILTO 0.000000, __BOUNCE_CHALLENGE_SUBJ 0.000000, __BOUNCE_NDR_SUBJ_EXEMPT 0.000000, __CT 0.000000, __CTE 0.000000, __CT_TEXT_PLAIN 0.000000, __DKIM_ALIGNS_1 0.000000, __DKIM_ALIGNS_2 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FORWARDED_MSG 0.000000, __FRAUD_MONEY_BIG_COIN 0.000000, __FRAUD_MONEY_BIG_COIN_DIG 0.000000, __FROM_DOMAIN_NOT_IN_BODY 0.000000, __FROM_NAME_NOT_IN_ADDR 0.000000, __FROM_NAME_NOT_IN_BODY 0.000000, __FUR_HEADER 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REFERENCES 0.000000, __HAS_REPLYTO 0.000000, __HEADER_ORDER_FROM 0.000000, __IN_REP_TO 0.000000, __IOC_PHRASE 0.000000, __MAIL_CHAIN 0.000000, __MIME_BOUND_CHARSET 0.000000, __MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MOZILLA_USER_AGENT 0.000000, __MSGID_HEX_844412 0.000000, __NO_HTML_TAG_RAW 0.000000, __REFERENCES 0.000000, __REPLYTO_SAMEAS_FROM_ACC 0.000000, __REPLYTO_SAMEAS_FROM_ADDY 0.000000, __REPLYTO_SAMEAS_FROM_DOMAIN 0.000000, __SANE_MSGID 0.000000, __SCAN_D_NEG 0.000000, __SCAN_D_NEG2 0.000000, __SCAN_D_NEG_HEUR 0.000000, __SCAN_D_NEG_HEUR2 0.000000, __SUBJ_ALPHA_END 0.000000, __SUBJ_ALPHA_NEGATE 0.000000, __SUBJ_REPLY 0.000000, __TO_IN_SUBJECT 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_MAILTO 0.000000, __URI_NO_WWW 0.000000, __URI_NS 0.000000, __USER_AGENT 0.000000 X-SASI-Probability: 10% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 5.1.4, AntispamData: 2025.8.15.82719 DKIM-Signature: v=1; q=dns/txt; a=rsa-sha256; c=relaxed/relaxed; s=default; d=ecomstation.it; bh=3Wui9cED2I3DrP0+EtTkkNNdMIg50oUgOQHsVs//R8U=; h=Return-Path:From:To:Subject:Date:Message-ID; b=DvxOlixJdATRAj0Dd8Ji24C8gUuwAgj1b/FBs/xMHYumvmsWFCJ58w+5niKpWHdShiMFH AU3ptruHzLXNg43uN5VZFYDVWP3j58ZBCoF9qLyx4J1lBfta2YvaOL8aKkO79zGLLFEkCA7 wdcHjMwjClvC8mb+lzmWUWxFpDUZLb2XbHuepRrtY/0CefVQUDZWMBj8nvuRfL9vi+CsgHU 5kGDLYnlJTEA8HReafzg0ZxReu1JtP6vtM9EsIfrJt+W1j+W83hXvXH6mQoI+GaQLAhyX0u BU6Z0BWZ8E8SAvPWpYyUKZ30zO0gaULJ+lirfSMKMhfCb5wXHdygY5mv5r5Q== Received: from [192.168.10.199] (dtp [192.168.10.199]) by srv2 (Weasel v3.06) for ; Fri, 15 Aug 2025 11:21:45 -0000 Reply-To: ml@ecomstation.it Subject: Re: [eCS-ISP] socket - no buffer space availble To: eCS ISP Mailing List References: Organization: Massimo S. Message-ID: <74e7900f-5695-e559-f567-8c391cd6bc1d@ecomstation.it> Date: Fri, 15 Aug 2025 11:21:43 +0200 User-Agent: Mozilla/5.0 (OS/2; U; Warp 4.5; it-IT; rv:1.7.13) Gecko/20060424 Thunderbird/1.0.8 Mnenhy/0.7.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=iso-8859-15; format=flowed Content-Language: it Content-Transfer-Encoding: 8bit Il 30/07/2025 20:15, Steven Levine ha scritto: > In , on 07/30/25 > at 10:02 AM, "Massimo S." said: > > Hi Massimo, > >>>>>      0 STREAM           42164        http..80 217.182.195.225  FIN_WAIT_2 >>>>>      0 STREAM           56842      https..443    103.42.4.140  FIN_WAIT_2 >>>>>      0 STREAM           18331        http..80   51.68.111.239  FIN_WAIT_2 >>>>>      0 STREAM           62505        http..80  91.225.160.193  FIN_WAIT_2 > >> all the FIN_WAIT_2 have 0 as socket number >> if i use the scritp with: >> soclose 0 > > Opps my bad. I was not thinking clearly. As you found, that's never > going to work even if try to use unsupported command line operands. > > Netstat is not reporting the original socket number. I have no idea if > this is by design or a netstat defect. > > I wonder if a brute force approach might work - close the sockets that are > not listed as open as in > > run netstat -s to collect a list of open sockets > for socket = 1 to 32767 > if socket not in list > soclose socket > end > > The stack knows the FIN_WAIT_2 socket number or it would not be able to > prevent it from being reused. The question is is there anything that can > be done to speed up to full release the socket resources. > > Steven hi all, sorry, but, it do not work, it can't close stuff that it seems not to exist i've seen this behaviour with eCS2.2b and AOS 503 under Vbox maybe it is a sort of DDOS, or an issue of virtual box: AOS 503: 1) the VM don't comunicate anymore with tcp/ip (in some case only icmp ping work), i go into the vbox window, i start the reboot command (it close the services and at the end do a setboot /b) 2) VM rebooted after some seconds the same behaviour happens again.. 3) the same than 2 etc.. 4) the VM restart i get a ring0 trap on OS2KRNL (too fast to read, i've no details) 5) at the next reboot all start to work well again eCS 2.2b 1) the VM don't comunicate anymore with tcp/ip (neither icmp ping work), i go into the vbox window, i start the reboot command (it close the services and at the end do a setboot /b) 2) VM reboot, but stil do not communicate over tcp/ip, neither ping 3) setboot /b, same result 4) this situation last until i close in the bad way the VM, the red stop key 5) after it reboots and all work well again what is the common point? it's that in both cases i get "No buffer space available" on tcp/ip massimo