[ILUG] Solaris Issue "Please Help"
[ILUG] Solaris Issue "Please Help"
la la
linux.ul.ie at gmail.com
Tue Aug 1 13:54:02 IST 2006
Jul 25 02:32:16 coorswms1 sshd[27309]: [ID 800047 auth.crit] fatal: Read
from socket failed: Connection reset by peer
this is the key point , generally, you need to delete the corresponding
key, and generate
a new key used for connection.
good luck
On 8/1/06, Anil Kamath <kamath.anil at gmail.com > wrote:
>
> Please find the logs pasted below as requested by you.
>
> * *
>
> */var/adm/messages*
>
> Jul 24 03:57:42 coorswms1 sshd[4841]: [ID 800047 auth.crit] fatal: Read
> from socket failed:
>
Connection reset by peer
>
> Jul 24 05:36:24 coorswms1 pseudo: [ID 129642 kern.info] pseudo-device:
> fcsm0
>
> Jul 24 05:36:24 coorswms1 genunix: [ID 936769 kern.info] fcsm0 is
> /pseudo/fcsm at 0
>
> Jul 25 02:32:16 coorswms1 sshd[27309]: [ID 800047 auth.crit] fatal: Read
> from socket failed: Connection reset by peer
>
> Jul 25 02:34:21 coorswms1 sshd[27950]: [ID 800047 auth.crit] fatal: Read
> from socket failed: Connection reset by peer
>
> Jul 25 02:39:58 coorswms1 bpjava-msvc[29633]: [ID 427199 user.error]
> pam_dial_auth: terminal-device not specifiedby login, returning Error in
> underlying service module.
>
> Jul 25 03:24:21 coorswms1 sshd[10553]: [ID 800047 auth.crit] fatal: Read
> from socket failed: Connection reset by peer
>
> Jul 25 03:24:31 coorswms1 sshd[10516]: [ID 800047 auth.crit] fatal: Read
> from socket failed: Connection reset by peer
>
> Jul 25 03:36:54 coorswms1 ip: [ID 766727 kern.warning] WARNING: The
> <if>:ip*_forwarding ndd variables are obsolete and may be removed in a
> future release of Solaris. Use ifconfig(1M) to manipulate the forwarding
> status of an interface.
>
> Jul 25 03:36:54 coorswms1 last message repeated 1 time
>
> Jul 25 04:14:26 coorswms1 sshd[22570]: [ID 800047 auth.crit] fatal: Read
> from socket failed: Connection reset by peer
>
>
>
> */etc/inet/inetd.conf*
>
> 100235/1 tli rpc/ticotsord wait root /usr/lib/fs/cachefs/cachefsd
> cachefsd"
>
> # TFTPD - tftp server (primarily used for booting)
>
> #tftp dgram udp6 wait root /usr/sbin/in.tftpd in.tftpd-s /tftpboot
>
> # Sun ToolTalk Database Server
>
> 100083/1 tli rpc/tcp wait root /usr/dt/bin/rpc.ttdbserverd
> rpc.ttdbserverd
>
> # rpc.cmsd is a data base daemon which manages calendar data backed
>
> # by files in /var/spool/calendar
>
> 100068/2-5 dgram rpc/udp wait root /usr/dt/bin/rpc.cmsd rpc.cmsd
>
> bpcd stream tcp nowait root /usr/openv/netbackup/bin/bpcd bpcd
>
> vnetd stream tcp nowait root /usr/openv/bin/vnetd vnetd
>
> vopied stream tcp nowait root /usr/openv/bin/vopied vopied
>
> bpjava-msvc stream tcp nowait root
> /usr/openv/netbackup/bin/bpjava-msvc bpjava-msvc -transient
>
>
>
> *netstat -rn*
>
> Routing Table: IPv4
>
> Destination Gateway Flags Ref Use Interface
>
> -------------------- -------------------- ----- ----- ------ ---------
>
> 199.2.111.233 147.115.111.254 UGHD 1 1
>
> 192.168.129.0 192.168.129.68 U 1 503 ce1
>
> 192.168.129.0 192.168.129.62 U 1 0 ce1:1
>
> *147.115.111.0 147.115.111.68* U 1 336 ce0
>
> 147.115.111.0 147.115.111.62 U 1 0 ce0:1
>
> 147.115.111.0 147.115.111.63 U 1 0 ce0:2
>
> 224.0.0.0 147.115.111.68 U 1 0 ce0
>
> default 147.115.111.1 UG 1 4227
>
> 127.0.0.1 127.0.0.1 UH 111056903 lo0
>
>
>
> *Snoop Output (First Page)*
>
> 199.2.111.233 -> coorsdbprd TCP D=22 S=1024 Push Ack=4167073853
> Seq=2135341980 Len=52 Win=64963
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Ack=2135342032
> Seq=4167074041 Len=0 Win=49680
>
> 199.2.111.233 -> coorsdbprd TCP D=22 S=1024 Push Ack=4167073905
> Seq=2135342032 Len=52 Win=64911
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Ack=2135342084
> Seq=4167074041 Len=0 Win=49680
>
> 199.2.111.233 -> coorsdbprd TCP D=22 S=1024 Push Ack=4167073957
> Seq=2135342084 Len=52 Win=64859
>
> 147.115.111.3 -> ALL-ROUTERS.MCAST.NET UDP D=1985 S=1985 LEN=28
>
> 199.2.111.233 -> coorsdbprd TCP D=22 S=1024 Push Ack=4167074041
> Seq=2135342136 Len=52 Win=64775
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Ack=2135342188
> Seq=4167074041 Len=0 Win=49680
>
> coorswms1 -> 10.1.10.201 DNS C 233.111.2.199.in-addr.arpa . Internet
> PTR ?
>
> 10.1.10.201 -> coorswms1 DNS R Error: 3(Name Error)
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Push Ack=2135342188
> Seq=4167074041 Len=244 Win=49680
>
> coorswms1 -> 10.1.10.201 DNS C 3.111.115.147.in-addr.arpa . Internet
> PTR ?
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Push Ack=2135342188
> Seq=4167074285 Len=340 Win=49680
>
> 10.1.10.201 -> coorswms1 DNS R Error: 3(Name Error)
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Push Ack=2135342188
> Seq=4167074625 Len=116 Win=49680
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Push Ack=2135342188
> Seq=4167074741 Len=244 Win=49680
>
> ? -> (multicast) ETHER Type=0000 (LLC/802.3), size = 52 bytes
>
> 199.2.111.233 -> coorsdbprd TCP D=22 S=1024 Push Ack=4167074285
> Seq=2135342188 Len=52 Win=64531
>
> 199.2.111.233 -> coorsdbprd TCP D=22 S=1024 Push Ack=4167074625
> Seq=2135342240 Len=52 Win=64191
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Ack=2135342292
> Seq=4167074985 Len=0 Win=49680
>
> 199.2.111.233 -> coorsdbprd TCP D=22 S=1024 Push Ack=4167074741
> Seq=2135342292 Len=52 Win=65535
>
> 199.2.111.233 -> coorsdbprd TCP D=22 S=1024 Push Ack=4167074985
> Seq=2135342344 Len=52 Win=65291
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Ack=2135342396
> Seq=4167074985 Len=0 Win=49680
>
> coorswms1 -> 10.1.10.201 DNS C 201.10.1.10.in-addr.arpa . Internet PTR
> ?
>
> 10.1.10.201 -> coorswms1 DNS R Error: 3(Name Error)
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Push Ack=2135342396
> Seq=4167074985 Len=180 Win=49680
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Push Ack=2135342396
> Seq=4167075165 Len=580 Win=49680
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Push Ack=2135342396
> Seq=4167075745 Len=516 Win=49680
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Push Ack=2135342396
> Seq=4167076261 Len=244 Win=49680
>
> 147.115.111.2 -> ALL-ROUTERS.MCAST.NET UDP D=1985 S=1985 LEN=28
>
> coorsacs1 -> 147.115.111.255 NBT NS Query Request for PROGRAMFILES[20],
> Success
>
> 199.2.111.233 -> coorsdbprd TCP D=22 S=1024 Push Ack=4167075165
> Seq=2135342396 Len=52 Win=65111
>
> 199.2.111.233 -> coorsdbprd TCP D=22 S=1024 Push Ack=4167075745
> Seq=2135342448 Len=52 Win=64531
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Ack=2135342500
> Seq=4167076505 Len=0 Win=49680
>
> 199.2.111.233 -> coorsdbprd TCP D=22 S=1024 Ack=4167076505
> Seq=2135342500 Len=0 Win=65535
>
> 199.2.111.233 -> coorsdbprd TCP D=22 S=1024 Push Ack=4167076505
> Seq=2135342500 Len=52 Win=65535
>
> 199.2.111.233 -> coorsdbprd TCP D=22 S=1024 Push Ack=4167076505
> Seq=2135342552 Len=52 Win=65535
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Ack=2135342604
> Seq=4167076505 Len=0 Win=49680
>
> coorsacs1 -> 147.115.111.255 NBT NS Query Request for PROGRAMFILES[20],
> Success
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Push Ack=2135342604
> Seq=4167076505 Len=276 Win=49680
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Push Ack=2135342604
> Seq=4167076781 Len=340 Win=49680
>
> coorswms1 -> 10.1.10.201 DNS C 2.111.115.147.in-addr.arpa . Internet
> PTR ?
>
> 10.1.10.201 -> coorswms1 DNS R Error: 3(Name Error)
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Push Ack=2135342604
> Seq=4167077121 Len=116 Win=49680
>
> coorswms1 -> 10.1.10.201 DNS C 255.111.115.147.in-addr.arpa . Internet
> PTR ?
>
> 10.1.10.201 -> coorswms1 DNS R Error: 3(Name Error)
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Push Ack=2135342604
> Seq=4167077237 Len=132 Win=49680
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Push Ack=2135342604
> Seq=4167077369 Len=148 Win=49680
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Push Ack=2135342604
> Seq=4167077517 Len=244 Win=49680
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Push Ack=2135342604
> Seq=4167077761 Len=132 Win=49680
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Push Ack=2135342604
> Seq=4167077893 Len=244 Win=49680
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Push Ack=2135342604
> Seq=4167078137 Len=228 Win=49680
>
> ? -> (multicast) ETHER Type=0000 (LLC/802.3), size = 52 bytes
>
> 147.115.111.3 -> ALL-ROUTERS.MCAST.NET UDP D=1985 S=1985 LEN=28
>
> 199.2.111.233 -> coorsdbprd TCP D=22 S=1024 Push Ack=4167076781
> Seq=2135342604 Len=52 Win=65259
>
> 199.2.111.233 -> coorsdbprd TCP D=22 S=1024 Ack=4167077237
> Seq=2135342656 Len=0 Win=64803
>
> 199.2.111.233 -> coorsdbprd TCP D=22 S=1024 Push Ack=4167077237
> Seq=2135342656 Len=52 Win=64803
>
> coorsdbprd -> 199.2.111.233 TCP D=1024 S=22 Ack=2135342708
> Seq=4167078365 Len=0 Win=49680
>
> 199.2.111.233 -> coorsdbprd TCP D=22 S=1024 Push Ack=4167077237
> Seq=2135342708 Len=52 Win=64803
>
>
>
> Let me know if any other information/logs required
>
>
> On 8/1/06, la la <linux.ul.ie at gmail.com > wrote:
> >
> > just paste your log
> >
> > On 7/24/06, Anil Kamath <kamath.anil at gmail.com > wrote:
> > >
> > > We are facing this problem when we had taken server in to Maintenance
> > mode
> > > for OS backup last Saturday. Before to that there was no issue.
> > >
> > >
> > >
> > > We are really confused where the problem is, I will tell you some
> > strange
> > > happenings.
> > >
> > >
> > >
> > > As you know we normally telnet or use ssh for logging into servers.
> > Last
> > > week we took the backup for this server in single user mode. After
> > > bringing
> > > this server to multi-user again we are unable to connect using telent
> > or
> > > ssh.
> > >
> > >
> > >
> > > The ping is happening without any problem. We have some more logical
> > IP's
> > > assigned to this server where we can telnet or ssh with this IP's. But
> >
> > > only
> > > to one specific IP (147.115.111.68) its not happening. We can
> > telent/SSH
> > > from the client network to this IP (147.115.111.68 ) also.
> > >
> > >
> > >
> > > For all other servers we are able to connect from our network also.
> > >
> > >
> > >
> > > Once I was able to connect to using this IP ( 147.115.111.68), but
> > suddenly
> > > the connection lost.
> > >
> > >
> > >
> > > Can you let me know where the problem is..?
> > >
> > >
> > > --
> > > Thanks & Regards,
> > > Anil
> > > --
> > > Irish Linux Users' Group mailing list
> > > About this list : http://mail.linux.ie/mailman/listinfo/ilug
> > > Who we are : http://www.linux.ie/
> > > Where we are : http://www.linux.ie/map/
> > >
> > --
> > Irish Linux Users' Group mailing list
> > About this list : http://mail.linux.ie/mailman/listinfo/ilug
> > Who we are : http://www.linux.ie/
> > Where we are : http://www.linux.ie/map/
> >
>
>
>
> --
> Thanks & Regards,
> Anil M Kamath
> mobile:9880037400
>
More information about the ILUG
mailing list Read this without the formatting . 
