[cobalt-users] Help! The case of the disapearing remote Raq3...

[Cobalter <nospam@xxxxxxxxxxxx>]

Recently, our Raq3 has developed a habit of "disappearing" from the net (no 
services, no pinging, no nuttin'!) for about 45 minutes at a time (It's 
hundreds of miles away in a colo place, so for all I know it's out getting 
coffee).

Regardless, the logs show that swatch and other cron programs are running 
faithfully every 15 minutes during the outage, but absolutely NO network 
traffic is measured. There is no record of the services shutting down or 
restarting either -- the machine just stops answering. Dead silence for 
almost an hour, and then suddenly, it shows up again, happy as a a clam and 
answering all its ports as normal.

ANY clues as to what might cause this behavior?? It's driving me -- and my 
frustrated clients -- up the wall!

Any help would be appreciated! Thanks!

Mike


(By the way, I just happened to do a 'netstat -la' just before sending this 
off. While MOST things looked normal, I'm puzzled by all the localhost 
ricocheting on so many ports that seems to be going on at the top...) 
Another netstat right after this showed plain ol' normal activity, 
though... Any connection/thoughts?


tcp	1	0	localhost:mysql		localhost:3662	CLOSE_WAIT	
tcp	0	0	localhost:3662		localhost:mysql	FIN_WAIT2	
tcp	1	0	localhost:ftp		localhost:3505	CLOSE_WAIT	
tcp	0	0	localhost:3505		localhost:ftp	FIN_WAIT2	
tcp	1	0	localhost:imap2		localhost:3398	CLOSE_WAIT	
tcp	0	0	localhost:3398		localhost:imap2	FIN_WAIT2	
tcp	0	0	localhost:3278		localhost:ssh	CLOSE	
tcp	0	0	localhost:617		localhost:2755	CLOSE_WAIT	
tcp	0	0	localhost:2755		localhost:617	FIN_WAIT2	
tcp	0	0	localhost:2717		localhost:81	TIME_WAIT	
tcp	0	0	localhost:2618		localhost:www	TIME_WAIT	
tcp	0	0	localhost:2511		localhost:snpp	TIME_WAIT	
tcp	0	0	localhost:2496		localhost:domain	TIME_WAIT	
tcp	0	0	www.xxxxxxx.co:smtp	xx.member.yahoo.co:1908	TIME_WAIT	
tcp	0	0	www.xxxxxxx.com:www	butch.xxxxx.com:44097	TIME_WAIT	
tcp	0	0	www.xxxxxxx.c:pop-3	user217.xxxx.xx.:4914	TIME_WAIT	
tcp	0	0	www.xxxxxxx.c:pop-3	user217.xxxx.xx:55882	TIME_WAIT	
tcp	0	0	www.xxxxxxx.c:pop-3	user217.xxxxx.xx.:4918	TIME_WAIT	
tcp	0	0	www.xxxxxxx.com:www	xxx.xx.xx.xxx:1196	ESTABLISHED	
tcp	0	0	www.xxxxxxx.com:www	xxx.xx.xx.xx:9964	FIN_WAIT2	
tcp	0	0	www.xxxxxxx.com:www	xxx.xx.xx.xxx:2576	FIN_WAIT2	
tcp	0	0	*:www			*:*	LISTEN	
tcp	0	0	www.xxxxxxx.c:https	*:*	LISTEN	
tcp     0	0	www.yyyyyyyyy.co:https	*:*	LISTEN	
tcp	0	0	www.zzzzz.com:https	*:*	LISTEN	
tcp	0	0	vvvvvv.com:https	*:*	LISTEN	
tcp	0	0	www.yyyyyyyyy.com:ssh	adsl-80-204-37.rd:18505	ESTABLISHED	
tcp	0	0	*:7937	*:*	LISTEN	
tcp	0	0	*:7938	*:*	LISTEN	
tcp	0	0	*:smtp	*:*	LISTEN	
tcp	0	0	*:81	*:*	LISTEN	
tcp	0	0	*:snpp	*:*	LISTEN	
tcp	0	0	*:617	*:*	LISTEN	
tcp	0	0	*:ssh	*:*	LISTEN	
tcp	0	0	uuuuuuu.com:domain	*:*	LISTEN	
tcp	0	0	tttttt.com:domain	*:*	LISTEN	
tcp	0	0	vvvvvv.com:domain	*:*	LISTEN	
tcp	0	0	www.zzzzz.com:domain	*:*	LISTEN	
tcp	0	0	www.xxxxxxx.:domain	*:*	LISTEN	
tcp	0	0	www.yyyyyyyyy.c:domain	*:*	LISTEN	
tcp	0	0	localhost:domain	*:*	LISTEN	
tcp	0	0	*:imap2	*:*	LISTEN	
tcp	0	0	*:pop-3	*:*	LISTEN	
tcp	0	0	*:ftp	*:*	LISTEN	
tcp	0	0	*:mysql	*:*	LISTEN	
udp	0	0	www.yyyyyyyyy.com:4071	www.yyyyyyyyy.c:domain	ESTABLISHED	
udp	0	0	*:7938	*:*	
udp	0	0	*:1024	*:*	
udp	0	0	vvvvvvv.com:domain	*:*	
udp	0	0	uuuuuu.com:domain	*:*	
udp	0	0	vvvvvv.com:domain	*:*	
udp	0	0	www.zzzzz.com:domain	*:*	
udp	0	0	www.xxxxxxx.:domain	*:*	
udp	0	0	www.yyyyyyyyy.c:domain	*:*	
udp	0	0	localhost:domain	*:*	
raw	0	0	*:icmp	*:*	7	
raw	0	0	*:tcp	*:*	7	
Active	UNIX	domain	sockets	(servers	and	established)
Proto	RefCnt	Flags	Type	State	I-Node	Path
unix	0	[	ACC	]	STREAM	LISTENING	87	/tmp/mysql.sock
unix	0	[	ACC	]	STREAM	LISTENING	399	/var/run/ndc
unix	3	[	]	DGRAM	67	/dev/log
unix	0	[	ACC	]	STREAM	LISTENING	506	/tmp/.s.PGSQL.5583
unix	0	[	]	DGRAM	609	
unix	0	[	]	DGRAM	397	
unix	0	[	]	DGRAM	218