OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Stephen Adkins (eudaemon_98yahoo.com)
Date: Thu Jan 03 2002 - 15:16:32 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
    majordomoiss.net Contact issforum-owneriss.net for help with any problems!
    ----------------------------------------------------------------------------

    I have one machine (a Sun 220R) that is flooding the
    event collector with Loki messages. This only happens
    occasionally, but when it does, it doesn't stop until
    I reboot that box. The box itself is using Sun's
    multipathing for failover on the NIC. (Using hme0 and
    qfe0). When snoop is ran on that box, it shows the two
    interfaces talking to each other using the standard
    ICMP echo request/reply, not ICMP type 1 (Loki). This,
    along with a huge number of program_execution_started
    and program_exited messages can overwhelm the single
    event collector and cause it to go into an unknown
    state. Any ideas?

    __________________________________________________
    Do You Yahoo!?
    Send your FREE holiday greetings online!
    http://greetings.yahoo.com