Forum Discussion
I apologize for missing this when you first posted. Here's the MS doc I found that helped alleviate this issues in all of the environments I've deployed LM. Windows defaults to a 3min timeout for the time_wait rather than issuing an explicit final packet. This causes port exhaustion on many collectors. I've ended up shifting the ephemeral range back to the XP values (nearly triple current) and shortened the timeout to 30s rather than 3m (just on the collector vm/server) allowing it to "fail faster"
I also used "netstat -qan" to gather connection data and sliced it up using select-string and -split to find the connection counts that fall within the emphemeral port range that I gather using "netsh int ipv4 show dynamicport tcp". Generally, anything over 10-15% utilization would start showing cracks in the data as the transition from established to wait to closed allowed them to back up.
I also built a TCP Port Utilization dataSource to keep track of these and alert to issues as they start to arise. That isn't publicly accessible.
Related Content
- 6 months ago