<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Henrik,<br>
</div>
<blockquote cite="mid:501D3C7F.2070902@hswn.dk" type="cite">
<pre wrap="">On 04-08-2012 15:25, <a class="moz-txt-link-abbreviated" href="mailto:me@tdiehl.org">me@tdiehl.org</a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">BBWin failed to send the client data successfully to the Xymon server. The
error was : Can't send message : An existing connection was forcibly
closed by the remote host..
</pre>
</blockquote>
<pre wrap="">
Do you see a message about "data flooding" in the xymond.log file on the
server ?
</pre>
</blockquote>
Just a suggestion on diagnosing these cases - could the "data
flooding" message also include a) the type of message that is
causing the data flooding (client/status/data/etc report) and b) the
client name that is in that message. This info is in line 1 of the
message, so easy enough to detect.<br>
<br>
So rather than:<br>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<pre>Data flooding from 192.168.1.1, closing connection
</pre>
how about:<br>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<pre>Data flooding from 192.168.1.1 - message type 'status' client 'test.example.com' - closing connection</pre>
I have recently had some cases where I am getting these messages
from the xymon server itself, where event logs or syslogs are
forwarded to the xymon server and an external script on the server
is monitoring those logs and sending the message on behalf of the
client. If the volume of messages is sustained at a flooding level,
eventually the test for that client goes purple!<br>
<blockquote cite="mid:501D3C7F.2070902@hswn.dk" type="cite">
<pre wrap="">
Try disabling the "msgs" module in the bbwin config - I've seen Windows
servers generate multi-MB logs which could trigger xymond to close the
connection.
</pre>
</blockquote>
Yes, it's an even worse cause of the above scenario, because
filtering usually only gets done server-side not client side.<br>
<br>
David.<br>
<pre class="moz-signature" cols="72">--
David Baldwin - Senior Systems Administrator (Datacentres + Networks)
Information and Communication Technology Services
Australian Sports Commission <a class="moz-txt-link-freetext" href="http://ausport.gov.au">http://ausport.gov.au</a>
Tel 02 62147830 Fax 02 62141830 PO Box 176 Belconnen ACT 2616
<a class="moz-txt-link-abbreviated" href="mailto:david.baldwin@ausport.gov.au">david.baldwin@ausport.gov.au</a> Leverrier Street Bruce ACT 2617
</pre>
<br>
<hr>
Keep up to date with what's happening in Australian sport visit <a href="http://www.ausport.gov.au">www.ausport.gov.au</a>
<br><br>
<font size="-2" face="arial">This message is intended for the addressee named and may contain confidential and privileged information. If you are not the intended recipient please note that any form of distribution, copying or use of this communication or the information in it is strictly prohibited and may be unlawful. If you receive this message in error, please delete it and notify the sender.</font>
<hr>
</body>
</html>