windows netstat showing false ESTABLISHED connection?

mobrien022 · 05-05-2008, 01:54 PM

Guys,
My first post, hope someone can help. I have a pair of java app servers, each running on a different XP host (lets say machine A=client and B=server). There is a series of connections established from A to B using http 1.1 (my understanding is this uses a persistent connection feature new to 1.1). Anyway, a DOS netstat on each machine shows the expected # of TCP connecitons in ESTABLISHED state.
I then pull the network cable of machine B. A netstat on B does not show the connections at all (expected). But a netstat on A still shows them as ESTABLISHED (as long as 2 hrs later) (not expected).

??? Where does netstat read its info from? I wouldn't think it is the java app's (ie java) responsibility to update each and every change to the TCP state info. I figured netstat or the OS would detect those changes. Am I wrong? Any thoughts?

Thanks,
Mike

05-05-2008, 01:54 PM	#1 (permalink)
mobrien022 Registered User Join Date: May 2008 Posts: 1 OS: XP SP2	windows netstat showing false ESTABLISHED connection? Guys, My first post, hope someone can help. I have a pair of java app servers, each running on a different XP host (lets say machine A=client and B=server). There is a series of connections established from A to B using http 1.1 (my understanding is this uses a persistent connection feature new to 1.1). Anyway, a DOS netstat on each machine shows the expected # of TCP connecitons in ESTABLISHED state. I then pull the network cable of machine B. A netstat on B does not show the connections at all (expected). But a netstat on A still shows them as ESTABLISHED (as long as 2 hrs later) (not expected). ??? Where does netstat read its info from? I wouldn't think it is the java app's (ie java) responsibility to update each and every change to the TCP state info. I figured netstat or the OS would detect those changes. Am I wrong? Any thoughts? Thanks, Mike