SUN FIRE server crashing due to network discovery

Enterprise Area
1

Hi,
I have setup a network discovery from two endpoints in the hope to uncover unknown/forgotten devices and discover out of controll (not enrolled to our active directory) endpoints in our corporate network. In the same time, we had a crash of one of our main production database servers and full of log entries about rsh connections from the two endpoints in charge of the network discovery.
Here after the log entries incriminating the ITarian communication agent:

/var/adm/messages

May 13 13:39:52 dbserv2 rsh[8280]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port

May 13 13:39:53 dbserv2 rsh[8290]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port

May 13 13:40:00 dbserv2 rsh[8328]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port

May 13 13:40:00 dbserv2 rsh[8346]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port

May 13 13:40:00 dbserv2 rsh[8361]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port

May 13 13:40:02 dbserv2 rsh[8376]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port

May 13 13:43:50 dbserv2 rsh[8892]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port

May 13 13:43:51 dbserv2 rsh[8899]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port

May 13 13:43:58 dbserv2 rsh[8958]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port

May 13 13:43:59 dbserv2 rsh[8971]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port

May 13 13:43:59 dbserv2 rsh[8979]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port

May 13 13:44:00 dbserv2 rsh[8998]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port

May 13 13:54:41 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 13:54:41 dbserv2 in.mpathd[257]: [ID 594170 daemon.error] NIC failure detected on eri0 of group dbserv

May 13 13:54:41 dbserv2 in.mpathd[257]: [ID 832587 daemon.error] Successfully failed over from NIC eri0 to NIC ce0

May 13 13:54:41 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 13:54:41 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 13:54:41 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 13:54:41 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 13:54:41 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 13:54:42 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 13:54:42 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 13:54:42 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 13:54:42 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 13:54:42 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 13:54:42 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 13:54:43 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 13:54:43 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 13:54:43 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 13:54:43 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 13:54:47 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 13:54:47 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 13:54:52 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 13:54:52 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 13:54:53 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 13:54:53 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 13:54:53 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 13:54:53 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 13:55:08 dbserv2 in.mpathd[257]: [ID 299542 daemon.error] NIC repair detected on eri0 of group dbserv

May 13 13:55:08 dbserv2 in.mpathd[257]: [ID 620804 daemon.error] Successfully failed back to NIC eri0

2

Here after the rest of the log entries du to the 10000 max characters of the previous post:
May 13 13:56:24 dbserv2 rsh[10727]: [ID 521673 daemon.notice] connection from 10.1.3.238 (10.1.3.238) - bad port

May 13 13:56:25 dbserv2 rsh[10733]: [ID 521673 daemon.notice] connection from 10.1.3.238 (10.1.3.238) - bad port

May 13 13:56:32 dbserv2 rsh[10743]: [ID 521673 daemon.notice] connection from 10.1.3.238 (10.1.3.238) - bad port

May 13 13:56:32 dbserv2 rsh[10750]: [ID 521673 daemon.notice] connection from 10.1.3.238 (10.1.3.238) - bad port

May 13 13:56:32 dbserv2 rsh[10759]: [ID 521673 daemon.notice] connection from 10.1.3.238 (10.1.3.238) - bad port

May 13 13:56:34 dbserv2 rsh[10776]: [ID 521673 daemon.notice] connection from 10.1.3.238 (10.1.3.238) - bad port

May 13 14:00:13 dbserv2 rsh[11321]: [ID 521673 daemon.notice] connection from 10.1.3.238 (10.1.3.238) - bad port

May 13 14:00:14 dbserv2 rsh[11325]: [ID 521673 daemon.notice] connection from 10.1.3.238 (10.1.3.238) - bad port

May 13 14:00:21 dbserv2 rsh[11344]: [ID 521673 daemon.notice] connection from 10.1.3.238 (10.1.3.238) - bad port

May 13 14:00:21 dbserv2 rsh[11348]: [ID 521673 daemon.notice] connection from 10.1.3.238 (10.1.3.238) - bad port

May 13 14:00:21 dbserv2 rsh[11354]: [ID 521673 daemon.notice] connection from 10.1.3.238 (10.1.3.238) - bad port

May 13 14:00:23 dbserv2 rsh[11369]: [ID 521673 daemon.notice] connection from 10.1.3.238 (10.1.3.238) - bad port

May 13 14:25:22 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 14:25:22 dbserv2 in.mpathd[257]: [ID 594170 daemon.error] NIC failure detected on eri0 of group dbserv

May 13 14:25:22 dbserv2 in.mpathd[257]: [ID 832587 daemon.error] Successfully failed over from NIC eri0 to NIC ce0

May 13 14:25:22 dbserv2 ip: [ID 567813 kern.warning] WARNING: ce0:6 has duplicate address 010.001.003.046 (in use by 00:14:4f:b7:f8:82); disabled

May 13 14:25:22 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 14:25:22 dbserv2 ip: [ID 567813 kern.warning] WARNING: ce0:5 has duplicate address 010.001.003.129 (in use by 00:14:4f:b7:f8:82); disabled

May 13 14:25:23 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 14:25:23 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 14:25:23 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 14:25:23 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 14:25:23 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 14:25:23 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 14:25:24 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 14:25:24 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 14:25:24 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 14:25:24 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 14:25:25 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 14:25:25 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 14:25:25 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 14:25:25 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 14:25:26 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 14:25:26 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 14:25:26 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 14:25:26 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 14:25:27 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 14:25:27 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 14:25:27 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 14:25:27 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 14:25:28 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 14:25:28 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 14:25:40 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 14:25:40 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 14:25:41 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 14:25:41 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 14:25:42 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 14:25:42 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 14:25:43 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 14:25:43 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 14:25:43 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 14:25:43 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 14:25:44 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 14:25:44 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 14:25:44 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0

May 13 14:25:44 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0

May 13 14:25:59 dbserv2 in.mpathd[257]: [ID 299542 daemon.error] NIC repair detected on eri0 of group dbserv

May 13 14:25:59 dbserv2 in.mpathd[257]: [ID 620804 daemon.error] Successfully failed back to NIC eri0

Could someone tell me if this crash is really due to the Itarian communication agent doing the network discovery ?
TIA.

3

@fathibn We will be sending you an email to your forum registered email address as we will be gathering more information from you.