OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: : : rouge IPs / user

From: Stuart Henderson (stuspacehopper.org)
Date: Thu Dec 13 2007 - 05:10:51 CST


On 2007/12/13 09:09, Otto Moerbeek wrote:
> It's depening on the application if sockets staying in CLOSE_WAIT are
> a problem or not: it might be intentional (in the hulp duplex case),
> or it might be a program "forgetting" to do a close.

Does select() notify the application of FIN from the other side?

If not, that would explain things, it wouldn't be reasonable for
httpd to manually try and receive from all sockets in keepalive
to see whether it needs to close the socket, since it will only
wait KeepAliveTimeout (default 15s) before it closes them anyway.