nf_conntrack连接不会从time_wait状态关闭状态。相反,当time_wait值达到zere时,将从nf_conntrack中删除
这是一个目标IP为80.249.99.148的条目
ipv4 2 tcp 6 1 TIME_WAIT src=192.168.20.236 dst=80.249.99.148 sport=60653 dport=8080
packets=31 bytes=1825
src=80.249.99.148 dst=10.10.10.163 sport=8080 dport=60653 packets=157 bytes=231298 [ASSURED] mark=0
use=2
ipv4 2 tcp 6 2 TIME_WAIT src=192.168.20.236 dst=80.249.99.148 sport=60655 dport=8080
packets=21 bytes=1425 src=80.249.99.148 dst=10.10.10.163 sport=8080 dport=60655 packets=83
bytes=118980 [ASSURED] mark=0 use=2
ipv4 2 tcp 6 1 TIME_WAIT src=192.168.20.236 dst=80.249.99.148 sport=60649 dport=8080
packets=69 bytes=3347 src=80.249.99.148 dst=10.10.10.163 sport=8080 dport=60649 packets=237
bytes=436568 [ASSURED] mark=0 use=2
ipv4 2 tcp 6 1 TIME_WAIT src=192.168.20.236 dst=80.249.99.148 sport=60654 dport=8080
packets=24 bytes=1547 src=80.249.99.148 dst=10.10.10.163 sport=8080 dport=60654 packets=111
bytes=167265 [ASSURED] mark=0 use=2
ipv4 2 tcp 6 0 TIME_WAIT src=192.168.20.236 dst=80.249.99.148 sport=60653 dport=8080
packets=31 bytes=1825 src=80.249.99.148 dst=10.10.10.163 sport=8080 dport=60653 packets=157
bytes=231298 [ASSURED] mark=0 use=2
ipv4 2 tcp 6 1 TIME_WAIT src=192.168.20.236 dst=80.249.99.148 sport=60655 dport=8080
packets=21 bytes=1425 src=80.249.99.148 dst=10.10.10.163 sport=8080 dport=60655 packets=83
bytes=118980 [ASSURED] mark=0 use=2
ipv4 2 tcp 6 0 TIME_WAIT src=192.168.20.236 dst=80.249.99.148 sport=60649 dport=8080
packets=69 bytes=3347 src=80.249.99.148 dst=10.10.10.163 sport=8080 dport=60649 packets=237
bytes=436568 [ASSURED] mark=0 use=2
ipv4 2 tcp 6 0 TIME_WAIT src=192.168.20.236 dst=80.249.99.148 sport=60654 dport=8080
packets=24 bytes=1547 src=80.249.99.148 dst=10.10.10.163 sport=8080 dport=60654 packets=111
bytes=167265 [ASSURED] mark=0 use=2
上面的日志间隔1秒,如果我运行,则time_wait状态为零后
cat /proc/net/nf_conntrack
我发现nf_conntrack为空。
在从nf_conntrack中删除之前,我需要使这些条目进入CLOSE状态。 在从nf_conntrack中删除之前,如何确保每个连接都处于关闭状态?