CentOS

Hello.

On my CentOS 8 (release 8.5.2111), "netstat -s" does not show TCPBacklogDrop and ListenOverflows, but they exist in "/proc/net/netstat".

Code: Select all

[root@node ~]# netstat -s | egrep -i '(queue|drop|overflow)'
    2 outgoing packets dropped
    2 dropped because of missing route
    1521 packets pruned from receive queue because of socket buffer overrun
    9446 ICMP packets dropped because they were out-of-window
    629 packets collapsed in receive queue due to low socket buffer
    TCPOFOQueue: 19253045
    TCPSpuriousRtxHostQueues: 213

I see many articles on the Internet about how to investigate SYN queue and backlog queue by "netstat -s" command, but it is not available in my system.

I find the reason.
Unless a counter's value is not zero, netstat will not show it.

Also you should know that CentOS Linux 8.5.2111 was the last release of CentOS Linux 8 and it is now EOL. This means your system is stuck in time and is already 18 months or so out of date. You should look at the alternatives to CentOS Linux 8 - Rocky/Alma/OEL or even RHEL itself - and migrate to one of those to remain up to date and secure.

Your system is not secure and will become increasingly less so as time goes by.

Check out also ss -- supposedly does everything that netstat did, and then some.

Thank TrevorH.
I'm considering Rocky or CentOS 9.

And thank jlehtone, the "ss -s" only shows very little statistics, not including important info about TCP SYN queue, Listen queue, etc.

there is no CentOS 9

there is CentOS 9 Stream a bugged beta of RHEL 9

CentOS

Why does "netstat -s" show incomplete information?

Why does "netstat -s" show incomplete information?

Re: Why does "netstat -s" show incomplete information ?

Re: Why does "netstat -s" show incomplete information ?

Re: Why does "netstat -s" show incomplete information ?

Re: Why does "netstat -s" show incomplete information ?

Re: Why does "netstat -s" show incomplete information ?