Track

Connection Tracking

The network connections area allows you to track IP addresses that have socket connections to the server.

• Server IP addresses that are registered in Plesk are automatically hidden.
• The administrators IP address is automatically hidden.

Column Description
Connections The total number of connections to the server from that specific source IP address.
Source The source IP address of the connection.
Location The country, region, and state of the source IP address (If available).
Flag The country flag of the source IP address.

TCP States

Column Description
connected All the states except for listen and closed.
synchronized All the connected states except for syn-sent.
established The third step of the three-way connection handshake was performed. The connection is open.
syn-sent The first step of the three-way connection handshake was performed. A connection request has been sent to a remote end-point i.e. an active open was performed.
syn-recv The second step of the three-way connection handshake was performed. An acknowledgement for the received connection request as well as a connection request has been sent to the remote end-point.
fin-wait-1 The first step of an active close (four-way handshake) was performed. The local end-point has sent a connection termination request to the remote end-point.
fin-wait-2 The remote end-point has sent an acknowledgement for the previously sent connection termination request. The local end-point waits for an active connection termination request from the remote end-point.
time-wait The local end-point waits for twice the maximum segment lifetime (MSL) to pass before going to CLOSED to be sure that the remote end-point received the acknowledgement.
closed There is no connection.
close-wait The local end-point has received a connection termination request and acknowledged it e.g. a passive close has been performed and the local end-point needs to perform an active close to leave this state.
last-ack The local end-point has performed a passive close and has initiated an active close by sending a connection termination request to the remote end-point.
closing The local end-point is waiting for an acknowledgement for a connection termination request before going to the TIME-WAIT state.
bucket Show states, which are maintained as minisockets, i.e. time-wait and syn-recv.
big Opposite to bucket state.

Apache Tracking

• You must make sure that the Apache mod_status module is enabled and allows local connections to it.
• Server IP addresses that are registered in Plesk are automatically hidden.
• The administrators IP address is automatically hidden.

Column Description
Srv The ID of the child process and its generation. The generation increases each time a child process is restarted, whether due to a server-restart or a limit placed on the number of processes a child is allowed to handle.
PID The child's process ID.
Acc The first number in this trio is the number of accesses or requests using this connection. For non-KeepAlive connections, this will be 0 since each request makes its own connection and so is always the first (and last). The second is the number of requests handled thus far by this child. The third is the number of requests handled by this slot; the child may have come and gone, its slot taken by another.
M The child's mode of operation.
CPU The child's CPU usage in number of seconds.
Source The source IP address that the request comes from.
Location The location of the source IP address.
Flag The country flag of the source IP address.
Vhost The virtual host that the request is coming for.
Method The HTTP method.
SS Seconds elapsed since the beginning of the request.
Req Milliseconds taken to process the request.
Conn Kilobytes transferred across this connection.
Child Megabytes transferred by this child process.
Slot Megabytes transferred by this slot, across children.

Mode

Column Description
- Waiting for connection
S Starting up
R Reading request
W Sending reply
K KeepAlive (read)
D DNS Lookup
L Logging
G Gracefully finishing
. There is no connection

Process Tracking

The network connections area allows you to track track active processes running on the server.

Column Description
PID The process ID of the process.
User The user owning the process.
CPU% The CPU time used divided by the time the process has been running.
MEM% The ratio of the process’s resident set size to the physical memory on the machine.
Virtual The virtual memory usage of entire process.
Resident The resident set size, the non-swapped physical memory that a task has used.
TTY The controlling terminal.
State The multi-character process state.
Start The starting time or date of the process.
Time The cumulative CPU time of the process.
Command The command with all its arguments.

Process States

Column Description
D uninterruptible sleep (usually IO)
R running or runnable (on run queue)
S interruptible sleep (waiting for an event to complete)
T stopped, either by a job control signal or because it is being traced
W paging
X dead
Z zombie process
< high-priority
N low-priority
L pages locked into memory
s session leader
l multi-threaded
+ foreground process group

Port Tracking

The port tracking area allows you to track ports listening for external connections and the executables running behind them.

Column Description
Port The port number.
Protocol The protocol (TCP or UDP).
Open The number of open slots.
Conns The number of active connections.
PID The process ID of the service.
User The user the service is running under.
Command line The full command line argument that was used to launch the service.
Executable The executable of the service.

Bandwidth Tracking

The bandwidth tracking area allows you to track bandwidth usage on a network interface.

• This feature requires that the iftop package is installed on the server.
• The page will refresh at 20 second intervals to get an accurate reading of data flowing though the network interface.
• The administrators IP address is automatically hidden.

Column Description
Source Waiting for connection
Location Starting up
Flag Reading request
DPort The destination port number.
RX 2s The rate at which data has been received over the preceding 2 seconds.
RX 10s The rate at which data has been received over the preceding 10 seconds.
RX 40s The rate at which data has been received over the preceding 40 seconds.
RX The cumulative total rate rate at which data has been received.
TX 2s The rate at which data has been sent over the preceding 2 seconds.
TX 10s The rate at which data has been sent over the preceding 10 seconds.
TX 40s The rate at which data has been sent over the preceding 40 seconds.
TX The cumulative total rate rate at which data has been sent.
SPort The source port number.
Destination The destination IP address.

I/O Tracking

The I/O tracking area allows track processes / threads that are using disk I/O on the server.

This feature requires that the iotop package is installed on the server.

Column Description
TID The process / thread ID.
Priority The process / thread priority (class/level).
User The user the process / thread is running under.
Disk read The read bandwidth of the process / thread.
Disk write The write bandwidth of the process / thread.
Swapin The percentage of time the process / thread spent while swapping in and while waiting on I/O.
IO The percentage of I/O for the process / thread (which includes disk use and swap).
Command The command that is currently being executed by the process / thread.