Linux Networking: Understanding TCP_CLOSE State
2.5. Reasons for socket transitioning to <span>TCP_CLOSE</span> state Continuing with bpfsnoop: # bpfsnoop \ -k sk_stream_wait_close \ -k '(s)tcp_reset' \ -k '(s)tcp_done' \ -k '(s)tcp_done_with_error' \ -k '(b)__tcp_close' \ –output-arg 'sk->sk_receive_queue.qlen' \ –output-arg '&sk->sk_receive_queue' \ –output-arg 'sk->sk_receive_queue.next' \ –output-arg 'sk->sk_receive_queue.prev' \ –output-arg 'sk->sk_receive_queue.next->pp_recycle' \ –output-arg 'ip42(&sk->__sk_common.skc_daddr)' \ –output-arg 'port(&sk->__sk_common.skc_dport)' \ –output-arg 'sk->__sk_common.skc_num' \ -o tcp_close.bpfsnoop.4.log … Read more