Hi,
I have setup a network discovery from two endpoints in the hope to uncover unknown/forgotten devices and discover out of controll (not enrolled to our active directory) endpoints in our corporate network. In the same time, we had a crash of one of our main production database servers and full of log entries about rsh connections from the two endpoints in charge of the network discovery.
Here after the log entries incriminating the ITarian communication agent:
/var/adm/messages
May 13 13:39:52 dbserv2 rsh[8280]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port
May 13 13:39:53 dbserv2 rsh[8290]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port
May 13 13:40:00 dbserv2 rsh[8328]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port
May 13 13:40:00 dbserv2 rsh[8346]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port
May 13 13:40:00 dbserv2 rsh[8361]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port
May 13 13:40:02 dbserv2 rsh[8376]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port
May 13 13:43:50 dbserv2 rsh[8892]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port
May 13 13:43:51 dbserv2 rsh[8899]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port
May 13 13:43:58 dbserv2 rsh[8958]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port
May 13 13:43:59 dbserv2 rsh[8971]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port
May 13 13:43:59 dbserv2 rsh[8979]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port
May 13 13:44:00 dbserv2 rsh[8998]: [ID 521673 daemon.notice] connection from 10.25.16.33 (10.25.16.33) - bad port
May 13 13:54:41 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0
May 13 13:54:41 dbserv2 in.mpathd[257]: [ID 594170 daemon.error] NIC failure detected on eri0 of group dbserv
May 13 13:54:41 dbserv2 in.mpathd[257]: [ID 832587 daemon.error] Successfully failed over from NIC eri0 to NIC ce0
May 13 13:54:41 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0
May 13 13:54:41 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0
May 13 13:54:41 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0
May 13 13:54:41 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0
May 13 13:54:41 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0
May 13 13:54:42 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0
May 13 13:54:42 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0
May 13 13:54:42 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0
May 13 13:54:42 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0
May 13 13:54:42 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0
May 13 13:54:42 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0
May 13 13:54:43 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0
May 13 13:54:43 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0
May 13 13:54:43 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0
May 13 13:54:43 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0
May 13 13:54:47 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0
May 13 13:54:47 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0
May 13 13:54:52 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0
May 13 13:54:52 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0
May 13 13:54:53 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0
May 13 13:54:53 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0
May 13 13:54:53 dbserv2 in.mpathd[257]: [ID 215189 daemon.error] The link has gone down on eri0
May 13 13:54:53 dbserv2 in.mpathd[257]: [ID 820239 daemon.error] The link has come up on eri0
May 13 13:55:08 dbserv2 in.mpathd[257]: [ID 299542 daemon.error] NIC repair detected on eri0 of group dbserv
May 13 13:55:08 dbserv2 in.mpathd[257]: [ID 620804 daemon.error] Successfully failed back to NIC eri0