fast opening and closing connection with a specific port
- by michale
We have a Main application named "Trevor" installed in 2008R2 machine named "TEAMER12" which is slow now. One more application named "TVS" also running in and found there were many connections per second occurring to port 5009.
netstat tool mentions that some fast connection open/close seen for port 5009
So first it will be listening mode like shown below
TCP 0.0.0.0:5009 TEAMER12:0 LISTENING
then establishes connection like
TCP 127.0.0.1:5009 TEAMER12:49519 ESTABLISHED
TCP 127.0.0.1:5009 TEAMER12:60903 ESTABLISHED
After that iwill become TIME_WAIT and i could see several entries like shown below
TCP 127.0.0.1:49156 TEAMER12:5009 TIME_WAIT
after that it will establish connection like
TCP 127.0.0.1:60903 TEAMER12:5009 ESTABLISHED
TCP 127.0.0.1:64181 TEAMER12:microsoft-ds ESTABLISHED
again it will go several entries like TIME_WAIT
TCP 127.0.0.1:49156 TEAMER12:5009 TIME_WAIT
Finally it will establish like this
TCP 172.26.127.40:139 TEAMER12:0 LISTENING
TCP 172.26.127.42:139 TEAMER12:0 LISTENING
TCP 172.26.127.42:5009 TEAMER12:64445 ESTABLISHED
TCP 172.26.127.42:64445 TEAMER12:5009 ESTABLISHED
Can any body tell me whats the reason behind why many connections per second occurring to
port 5009 and why application slow?