From: quejoh@auto-trol.com (Quentin Johnson)
Subject: sunrpc mystery needs solving
Summary: netstat reporting mysterious sunrpc activity
Originator: quejoh@quejoh
Keywords: sunrpc netstat whatthehell
Organization: Auto-trol Technology Corporation
Date: Sat, 25 Jul 1992 01:23:08 GMT

I'm trying to understand some weird behavior on a Sun 4/110 running
SunOS 4.1.1.

Netstat reports a lively "sunrpc" life for an otherwise sedate little
workstation.  The "localhost.sunrpc" entries seem to cycle from none to
hundreds and slowly back down to none.  It almost seems as if running
"netstat" causes them to increase!

It's the only system on a subnet that's attached to the second ethernet
interface on a gateway host.   The other interface of the gateway is
connected to a backbone network.  At most there are 20 hosts doing nfs
mounts of the 4/110 system; basically inactive  It's the only system in
our environment not running NIS.  Processes involving RPC (rpc.lockd,
rpc.mountd, nfsd, etc...) are usually idle or idle and swapped out so
I'm puzzled by the output of netstat! I haven't noticed this behavior
on other systems; otherwise this system is working ok.  The output of
"netstat" and "ps ax" follow.

Has anyone else out there run across this?

	Quent Johnson
	Auto-trol Technology, Denver
	303/252-2308 quejoh@auto-trol.com

-------------------<boring data follows>-------------------------------

# netstat
Active Internet connections
Proto Recv-Q Send-Q  Local Address          Foreign Address        (state)
tcp        0      0  localhost.2031         localhost.sunrpc       TIME_WAIT
tcp        0      0  localhost.2030         localhost.sunrpc       TIME_WAIT
tcp        0      0  localhost.2029         localhost.sunrpc       TIME_WAIT
tcp        0      0  localhost.2028         localhost.sunrpc       TIME_WAIT
tcp        0      0  localhost.2027         localhost.sunrpc       TIME_WAIT
tcp        0      0  localhost.2026         localhost.sunrpc       TIME_WAIT
tcp        0      0  localhost.2025         localhost.sunrpc       TIME_WAIT
tcp        0      0  localhost.2024         localhost.sunrpc       TIME_WAIT
tcp        0      0  localhost.2023         localhost.sunrpc       TIME_WAIT
tcp        0      0  localhost.2022         localhost.sunrpc       TIME_WAIT
tcp        0      0  localhost.2021         localhost.sunrpc       TIME_WAIT
tcp        0      0  localhost.2020         localhost.sunrpc       TIME_WAIT
tcp        0      0  localhost.2019         localhost.sunrpc       TIME_WAIT

 (localhost.sunrpc continue on and on)

tcp        0    154  auto-trol.com.login    quejoh.auto-trol.1023  ESTABLISHED
Active UNIX domain sockets
Address  Type   Recv-Q Send-Q    Vnode     Conn     Refs  Nextref Addr
ff655a0c dgram       0      0        0        0        0        0
ff65580c stream      0      0 ff2493e8        0        0        0 /dev/printer
ff650b0c dgram       0      0 ff22c9a8        0        0        0 /dev/log
ff65058c dgram       0      0        0        0        0        0


# ps ax
  PID TT STAT  TIME COMMAND
    0 ?  D     0:00 swapper
    1 ?  IW    0:00 /sbin/init -
    2 ?  D     0:00 pagedaemon
   51 ?  IW    0:31 portmap
   83 ?  IW    0:00 syslogd
   89 ?  IW    0:00 /usr/lib/sendmail -bd -q15m
   95 ?  I     0:00  (nfsd)
   96 ?  IW    0:00 rpc.mountd -n
   97 ?  I     0:00  (nfsd)
   99 ?  I     0:00  (nfsd)
  100 ?  I     0:00  (nfsd)
  101 ?  I     0:00  (nfsd)
  103 ?  I     0:00  (nfsd)
  104 ?  I     0:00  (nfsd)
  105 ?  I     0:00  (nfsd)
  107 ?  IW    0:00 rpc.lockd
  108 ?  IW    0:00 rpc.statd
  111 ?  IW    0:00 /usr/local/news/nn/nnmaster -l -r -C
  118 ?  IW    0:01 update
  121 ?  IW    0:00 cron
  128 ?  IW    0:00 inetd
  131 ?  IW    0:00 /usr/lib/lpd
  135 ?  IW    0:00 - std.19200N ttyh0 (getty)
  136 ?  IW    0:00 - std.19200N ttyh1 (getty)
  137 ?  IW    0:00 - std.19200N ttyh3 (getty)
  138 ?  S     0:06 in.rlogind
  134 co IW    0:00 - std.9600 console (getty)
  141 p0 IW    0:01 -tcsh (tcsh)
  159 p0 S     0:00 -u (csh)
  232 p0 R     0:00 ps ax