Setting rmem to just under 2GB is a very stupid thing to do. That means a single TCP socket can consume close to 2GB of memory. You're opening the system up to fairly trivial DoS attacks by doing that. Seeing things like this reminds me that some people really shouldn't be sysadmins.