Networking: netstat -s: 1523 times the listen queue of a socket overflowed — accept queue full, connections dropped
The application accepts connections slower than they arrive, so the kernel's accept queue overflows.
times the listen queue of a socket overflowedlisten queue overflowedSYNs to LISTEN sockets droppedlisten queue full Meaning
Backlog is capped by min(listen backlog, net.core.somaxconn). Raise somaxconn and the backlog in the app/server (nginx listen ... backlog=, Node server.listen(port, host, backlog)), and fix whatever makes the app slow to accept() (blocked event loop, too few workers).
Common causes
- Low
somaxconn/ application backlog - App too slow to accept (blocked event loop/workers)
- Traffic bursts
- Single-process server saturated
- Default 128/511 backlog on a busy host
⚡ Quick fix
- Check:
nstat -az TcpExtListenOverflows - Raise
net.core.somaxconnand the app backlog - Add workers and unblock the accept loop
Detailed fix by platform
Linux
- bash
nstat -az TcpExtListenOverflows TcpExtListenDrops sudo sysctl -w net.core.somaxconn=4096
How to diagnose
- ListenOverflows — Rising?
- Backlog — Large enough?
- App — Accepting promptly?
🔧 Still not fixed?
Many errors look alike. If the steps above didn’t solve it, one of these is probably what you’re facing:
Similar errors
- Cannot assign requested address (EADDRNOTAVAIL) Networking: connect: Cannot assign requested address — ephemeral port range exhausted by TIME_WAIT connections
- Connections hang on large transfers (PMTU black hole) Networking: SSH/HTTPS connects but hangs on large data — path MTU discovery black hole
- High TCP retransmissions / packet loss Networking: netstat -s: segments retransmitted / Wireshark: TCP Retransmission, TCP Dup ACK — packet loss on the path
Most viewed in Networking
- Native VLAN mismatch / wrong VLAN, no connectivity Networking: %CDP-4-NATIVE_VLAN_MISMATCH / device on the wrong VLAN can't reach the gateway
- Port err-disabled (psecure-violation) Networking: %PM-4-ERR_DISABLE: psecure-violation error detected on Gi0/5, putting Gi0/5 in err-disable state
- Rogue DHCP server hands out wrong gateway/DNS Networking: Clients receive the wrong default gateway or DNS server — a rogue DHCP server (often a home router) answers first
Other ways to find it
Where this error sits
Origin: Network. Errors that are often confused with or caused by this one (click to open):
🧠 Still stuck? Analyze your error
Paste the full message, response headers or stack trace — we'll detect the platform and point to the most likely cause.
💬 What worked for others
No tips yet — did something else fix this for you?
Share what worked for you
Tips are checked by an editor before they appear. Links are removed.
Report a correction or suggest an improvement
Last updated 5 Nov 2026