Hong James-q19252 a écrit :
Solaris OS log is all normal.
netstat -a find ten thousand duplicate lines:
10.192.200.3.6879 10.192.200.8.56524 49640 0 49640 0 TIME_WAIT
10.192.200.3.6879 10.192.200.12.38677 49640 0 49640 0 TIME_WAIT
10.192.200.3.6879 10.192.200.13.52591 49640 0 49640 0 TIME_WAIT
10.192.200.3.6879 10.192.200.11.52936 49640 0 49640 0 TIME_WAIT
10.192.200.3.6879 10.192.200.5.43768 49640 0 49640 0 TIME_WAIT
10.192.200.3.6879 10.192.200.8.56525 49640 0 49640 0 TIME_WAIT
10.192.200.3.6879 10.192.200.12.38678 49640 0 49640 0 TIME_WAIT
10.192.200.3.6879 10.192.200.13.52592 49640 0 49640 0 TIME_WAIT
10.192.200.3.6879 10.192.200.11.52937 49640 0 49640 0 TIME_WAIT
10.192.200.3.6879 10.192.200.5.43769 49640 0 49560 0 TIME_WAIT
10.192.200.3.6879 10.192.200.8.56526 49640 0 49640 0 TIME_WAIT
quite strange. this looks like a port scan ...
could you check with an lsof which process runs so many connections ?