OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[ISSForum] All Sensors have the same error: Thes session has been closed by the peer [ID=0x47200401]

From: Tony Wu (tonywusanyo.com.hk)
Date: Mon Aug 04 2003 - 19:36:23 CDT


Dear Sirs,

All the sensors have the same error from the Application Log of the Event Viewer, and all the sensors 7.0, Fusion 2.0, and site Protector 2.0 are installed on the Windows 2000 Platform, but the network sensor 7.0 is installed on the Linux Redhat 7.2 platform. The exact error listed below from server sensor:

Event Type: Error
Event Source: ISS
Event Category: ServerSensor
Event ID: 1
Date: 8/4/2003
Time: 1:50:56 PM
User: N/A
Computer: Server_Sensor7.0
Description:
(server_sensor_1) - OnError from 111.111.111.222: The session has been closed by the peer. [ID=0x47200401]

The Fusion error:

Event Type: Error
Event Source: ISS
Event Category: Security Fusion Module
Event ID: 1
Date: 8/4/2003
Time: 2:43:26 PM
User: N/A
Computer: Fusion_2.0
Description:
Unable to check out 'RealSecureDB' connection: Attempted connection to undefined database 'RealSecureDB'

Event Type: Error
Event Source: ISS
Event Category: Security Fusion Module
Event ID: 1
Date: 8/4/2003
Time: 1:59:24 PM
User: N/A
Computer: Fusion_2.0
Description:
Disconnected from EventCollector_SiteProtector2.0 event source with error The session has been closed by the peer. [ID=0x47200401]

Event Type: Error
Event Source: ISS
Event Category: Security Fusion Module
Event ID: 1
Date: 8/4/2003
Time: 1:51:58 PM
User: N/A
Computer: Fusion_2.0
Description:
Disconnected from EventCollector_SiteProtector2.0 event source with error WSAECONNRESET - Connection reset by peer.
 An existing connection was forcibly closed by the remote host. This normally
results if the peer application on the remote host is suddenly stopped, the
host is rebooted, or the remote host used a "hard close" (see
setsockopt(SO_LINGER)) on the remote socket. [ID=10054]

Event Type: Error
Event Source: ISS
Event Category: Security Fusion Module
Event ID: 1
Date: 8/4/2003
Time: 1:33:38 PM
User: N/A
Computer: Fusion_2.0
Description:
Failed to open data source with Server=SiteProtector2.0;Database=RealSecureDB;UID=SecurityFusionModule_Fusion_2.0

Event Type: Error
Event Source: ISS
Event Category: Security Fusion Module
Event ID: 1
Date: 8/4/2003
Time: 1:33:38 PM
User: N/A
Computer: Fusion_2.0
Description:
Database error(s) occurred:
OLE DB Source - "Microsoft OLE DB Provider for SQL Server" OLE DB Description - "[DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied."

Event Type: Error
Event Source: ISS
Event Category: Security Fusion Module
Event ID: 1
Date: 8/4/2003
Time: 1:33:38 PM
User: N/A
Computer: Fusion_2.0
Description:
Error in opening database to pull event collector information!

Event Type: Error
Event Source: ISS
Event Category: Security Fusion Module
Event ID: 1
Date: 8/4/2003
Time: 1:33:19 PM
User: N/A
Computer: Event Type: Error
Event Source: ISS
Event Category: Security Fusion Module
Event ID: 1
Date: 8/4/2003
Time: 1:33:19 PM
User: N/A
Computer: Fusion_2.0
Description:
java.sql.SQLException: [42000][Microsoft][ODBC SQL Server Driver][SQL Server]SHUTDOWN is in progress. Log off.
ids.sql.IDSSocket.error(IDSSocket.java:325)
ids.sql.IDSSocket.verify(IDSSocket.java:270)
ids.sql.IDSStatement.submit(IDSStatement.java:119)
ids.sql.IDSStatement.execute(IDSStatement.java:406)
net.iss.sma.fusion.dbutilities.SqlServer.sqlQuery(Unknown Source)
net.iss.sma.fusion.dbutilities.DbManager.dbSelect(Unknown Source)
net.iss.sma.fusion.SPExceptionManager.runPeriodicTask(Unknown Source)
net.iss.sma.fusion.utilities.PeriodicTaskDispatcher$Task.run(Unknown Source)
net.iss.sma.fusion.utilities.PeriodicTaskDispatcher.runTasksThatAreDueToRun(Unknown Source)
net.iss.sma.fusion.utilities.PeriodicTaskDispatcher.sleepAndThenRunTasks(Unknown Source)
net.iss.sma.fusion.utilities.PeriodicTaskDispatcher.run(Unknown Source)
java.lang.Thread.run(Unknown Source)
 
Event Type: Error
Event Source: ISS
Event Category: Security Fusion Module
Event ID: 1
Date: 8/4/2003
Time: 1:34:38 PM
User: N/A
Computer: Fusion_2.0
Description:
Error closing connection pool: java.net.SocketException: Connection reset

Event Type: Error
Event Source: ISS
Event Category: Security Fusion Module
Event ID: 1
Date: 8/4/2003
Time: 1:35:25 PM
User: N/A
Computer: Fusion_2.0
Description:
Disconnected from EventCollector_SiteProtector2.0 event source with error WSAECONNRESET - Connection reset by peer.
 An existing connection was forcibly closed by the remote host. This normally
results if the peer application on the remote host is suddenly stopped, the
host is rebooted, or the remote host used a "hard close" (see
setsockopt(SO_LINGER)) on the remote socket. [ID=10054]

Event Type: Error
Event Source: ISS
Event Category: Security Fusion Module
Event ID: 1
Date: 8/4/2003
Time: 1:35:26 PM
User: N/A
Computer: Fusion_2.0
Description:
net.iss.sma.fusion.FusionException: Error creating connection pool (connectString=jdbc:ids://SiteProtector2.0:12/conn?dsn='DRIVER={SQL Server};SERVER=SiteProtector2.0;database=RealSecureDB', userName=SecurityFusionModule_Fusion2.0): java.net.ConnectException: Connection refused: connect
net.iss.sma.fusion.dbutilities.SqlServer.createConnectionPool(Unknown Source)
net.iss.sma.fusion.dbutilities.SqlServer.<init>(Unknown Source)
net.iss.sma.fusion.dbutilities.DbManager.registerSqlServer(Unknown Source)
net.iss.sma.fusion.dbutilities.DbManager.initServerConfigs(Unknown Source)
net.iss.sma.fusion.dbutilities.DbManager.resetDbManagerIfNecessary(Unknown Source)
net.iss.sma.fusion.dbutilities.DbManager.dbSelect(Unknown Source)
net.iss.sma.fusion.SPExceptionManager.runPeriodicTask(Unknown Source)
net.iss.sma.fusion.utilities.PeriodicTaskDispatcher$Task.run(Unknown Source)
net.iss.sma.fusion.utilities.PeriodicTaskDispatcher.runTasksThatAreDueToRun(Unknown Source)
net.>>>

Event Type: Error
Event Source: ISS
Event Category: Security Fusion Module
Event ID: 1
Date: 8/4/2003
Time: 1:35:26 PM
User: N/A
Computer: Fusion_2.0
Description:
Unable to retrieve latest exception filters from database

Event Type: Error
Event Source: ISS
Event Category: Security Fusion Module
Event ID: 1
Date: 8/4/2003
Time: 1:35:26 PM
User: N/A
Computer: Fusion_2.0
Description:
Will continue using old exception filters

Event Type: Error
Event Source: ISS
Event Category: Security Fusion Module
Event ID: 1
Date: 8/4/2003
Time: 1:35:26 PM
User: N/A
Computer: Fusion_2.0
Description:
Attempted connection to undefined database 'RealSecureDB'

Event Type: Error
Event Source: ISS
Event Category: Security Fusion Module
Event ID: 1
Date: 8/4/2003
Time: 1:35:28 PM
User: N/A
Computer: Fusion_2.0
Description:
EventCollector_SiteProtector2.0: Status code C7340033 : The event channel automatic reconnection was cancelled. [ID=0xc7340033]

 

Description:
java.sql.SQLException: [42000][Microsoft][ODBC SQL Server Driver][SQL Server]SHUTDOWN is in progress. Log off.
ids.sql.IDSSocket.error(IDSSocket.java:325)
ids.sql.IDSSocket.verify(IDSSocket.java:270)
ids.sql.IDSStatement.submit(IDSStatement.java:119)
ids.sql.IDSStatement.execute(IDSStatement.java:406)
net.iss.sma.fusion.dbutilities.SqlServer.sqlQuery(Unknown Source)
net.iss.sma.fusion.dbutilities.DbManager.dbSelect(Unknown Source)
net.iss.sma.fusion.SPExceptionManager.runPeriodicTask(Unknown Source)
net.iss.sma.fusion.utilities.PeriodicTaskDispatcher$Task.run(Unknown Source)
net.iss.sma.fusion.utilities.PeriodicTaskDispatcher.runTasksThatAreDueToRun(Unknown Source)
net.iss.sma.fusion.utilities.PeriodicTaskDispatcher.sleepAndThenRunTasks(Unknown Source)
net.iss.sma.fusion.utilities.PeriodicTaskDispatcher.run(Unknown Source)
java.lang.Thread.run(Unknown Source)
 

 

 

Best Regards,

Tony Wu

Sanyo Energy (HK) Co., Ltd.
EDP Department
Tel : 29435587
Mobile: 93249716
Fax: 31122913
Email: tonywusanyo.com.hk
Address: 9/F Chuan Kei Factory Building, 15-23 Kin Hong Street, Kwai Hing

_______________________________________________
ISSForum mailing list
ISSForumiss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo