When I do netstat -a on my Windows machine, I get a listing of the ports with one of the four states:
- LISTENING
- CLOSE_WAIT
- TIME_WAIT
- ESTABLISHED
What do CLOSE_WAIT and TIME_WAIT mean/indicate?
Tell me more
×
Super User is a question and answer site for
computer enthusiasts and power users. It's 100% free, no registration required.
|
|
||||
|
|
|
Due to the way TCP/IP works connections can not be closed immediately. Packets may arrive out of order or be retransmitted after the connection has been closed. CLOSE_WAIT indicates that the other side of the connection has closed the connection. TIME_WAIT indicates that this side has closed the connection. The connection is being kept around so that any delayed packets can be matched to the connection and handled appropriately. The connections will be removed when they time out within four minutes. See http://en.wikipedia.org/wiki/Transmission_Control_Protocol for more details. |
||||
|
|
|
Basically the "WAIT" states mean that one side closed the connection but the final confirmation of the close is pending. See e.g. this diagram of TCP states for details: |
|||
|
|
|
RFC's are your friend. RFC 793, RFC 1337, RFC 1323. |
|||||||||||
|
