Name

DNSE-301 — Sockets table is exhausted

Severity

C (critical)

Message text

File descriptor (%d) higher then maximum (%d)

Description

Function socket() returned file descriptor with number higher than allowed maximum. List of pending requests follows this message (if W-level messages are allowed).

Proxy reaction depends on the kind of the unsatisfied request:

  • UDP request is replied with ServFail response code

  • TCP connection is closed

  • internal request fails and causes failure recovery of the originator.

If the requests table is filled by a reasonable amount of requests in reasonable state, increase size of the sockets table in the configuration (item sockets-table-size).

See also

dns-proxy(5), DNSE-300(6), DNSE-301(6), DNSE-309(6), logging(7)

Authors

This man page is a part of Kernun Firewall.
Copyright © 2000–2021 Trusted Network Solutions, a. s.
All rights reserved.