[hobbit] Solaris clients don't report

[Hanrahan, Kevin]

OK, I have run TCPdump on the server and when I start the client, I see all kinds of activity on the server from the client: (kc2b3 is the client , satlmon01 is the server)

08:35:27.614681 kc2b3.34515 > satlmon01.1984: . [tcp sum ok] 1:1(0) ack 1 win 49640 (DF) (ttl 57, id 21771, len 40)
08:35:27.614681 kc2b3.34515 > satlmon01.1984: . 1:1461(1460) ack 1 win 49640 (DF) (ttl 57, id 21772, len 1500)
08:35:27.614681 satlmon01.1984 > kc2b3.34515: . [tcp sum ok] 1:1(0) ack 1461 win 8760 (DF) (ttl 64, id 16078, len 40)
08:35:27.614681 kc2b3.34515 > satlmon01.1984: . 1461:2921(1460) ack 1 win 49640 (DF) (ttl 57, id 21773, len 1500)
08:35:27.614681 satlmon01.1984 > kc2b3.34515: . [tcp sum ok] 1:1(0) ack 2921 win 11680 (DF) (ttl 64, id 16079, len 40)
08:35:27.614681 kc2b3.34515 > satlmon01.1984: P 2921:4381(1460) ack 1 win 49640 (DF) (ttl 57, id 21774, len 1500)
08:35:27.614681 satlmon01.1984 > kc2b3.34515: . [tcp sum ok] 1:1(0) ack 4381 win 14600 (DF) (ttl 64, id 16080, len 40)

There is no firewall in between these two machines....any ideas?


kh

From: Brian Catlin [mailto:bcatlin at gmail.com]
Sent: Monday, November 03, 2008 8:16 PM
To: hobbit at hswn.dk
Subject: RE: [hobbit] Solaris clients don't report

I have similar issues on SuSE SLES 10 servers and vms.  The processes are, no firewalls.  This is a security server set, so a lot of services are turned off .  I cant telnet on port 1984 just fine, coming back - there is no telnetd enabled...  My question is = what, if any network services are required from the server to have hobbit communications work.  I have had absolutely no difficulty with my sun servers, even coming through the firewall from the DMZ.

Anyone have this info please?

thanks

lurch at inorbit.com
-------Original Message-------

From: Everett, Vernon<mailto:Vernon.Everett at woodside.com.au>
Date: 11/3/2008 10:17:35 AM
To: hobbit at hswn.dk<mailto:hobbit at hswn.dk>
Subject: RE: [hobbit] Solaris clients don't report

Being able to run the BigBrother client has only negated the need to check step 7.
Please continue, and perform check 5. and 6.
As you have stated, you are running an RC version.
It is possible you have stumbled upon a bug of some sort, unique to your build.

Use snoop to check the client is sending, and again on the server to ensure it is receiving.

Regards
     Vernon

________________________________
From: Hanrahan, Kevin [mailto:Kevin.Hanrahan at elavon.com]
Sent: Monday, 3 November 2008 10:19 AM
To: 'hobbit at hswn.dk'
Subject: RE: [hobbit] Solaris clients don't report
<truncated thread due to length>






----------------------------------------- Note: The information
contained in this e-mail and in any attachments is intended only
for the person or entity to which it is addressed and may contain
confidential and/or privileged material. Any review,
retransmission, dissemination or other use of, or taking of any
action in reliance upon, this information by persons or entities
other than the intended recipient is prohibited. The recipient
should check this e-mail and any attachments for the presence of
viruses. Sender accepts no liability for any damages caused by any
virus transmitted by this e-mail. If you have received this e-mail
in error, please notify us immediately by replying to the message
and delete the e-mail from your computer.  Elavon (formerly NOVA
Information Systems)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20081104/e0986686/attachment.html>