Solved

Users receiving intermittent and non-reproducable disconnect - but disconnects are pervasive and preventing reasonable work

Posted on 2008-10-22
5
1,498 Views
Last Modified: 2013-12-01
detail java console log/trace file contains the following:

network: Connecting http://ddcerp012.probuild.com:8023/forms/lservlet;jsessionid=ac12263b56634d8d100d47f849cf9935d96c93cfa553.e38ObxqQc34Ne3qMchuLahmRbi0 with cookie "__utma=236186560.1311399554483614200.1219156415.1224622085.1224622939.395; __utmz=236186560.1219156415.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmb=236186560.1.10.1224622939; __utmc=236186560; CRP3=R5njbleUx3LtEpmT1rNd20GO:S; oracle.uix=0^^GMT-6:00^p"
java.net.ConnectException: Connection refused: connect
            at java.net.PlainSocketImpl.socketConnect(Native Method)
            at java.net.PlainSocketImpl.doConnect(Unknown Source)
            at java.net.PlainSocketImpl.connectToAddress(Unknown Source)
            at java.net.PlainSocketImpl.connect(Unknown Source)
            at java.net.Socket.connect(Unknown Source)
            at sun.net.NetworkClient.doConnect(Unknown Source)
            at sun.net.www.http.HttpClient.openServer(Unknown Source)
            at sun.net.www.http.HttpClient.openServer(Unknown Source)
            at sun.net.www.http.HttpClient.parseHTTPHeader(Unknown Source)
            at sun.net.www.http.HttpClient.parseHTTP(Unknown Source)
            at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
            at oracle.forms.net.HTTPNStream.doPost(Unknown Source)
            at oracle.forms.net.HTTPNStream.doFlush(Unknown Source)
            at oracle.forms.net.HTTPNStream.flush(Unknown Source)
            at java.io.DataOutputStream.flush(Unknown Source)
            at oracle.forms.net.StreamMessageWriter.run(Unknown Source)
network: Cache entry found [url: http://ddcerp012.probuild.com:8023/OA_JAVA/oracle/apps/fnd/jar/fndewt.jar, version: null]
java.io.EOFException
            at java.io.DataInputStream.readUnsignedByte(Unknown Source)
            at oracle.forms.engine.Message.readDetails(Unknown Source)
            at oracle.forms.engine.Message.readDetails(Unknown Source)
            at oracle.forms.net.StreamMessageReader.run(Unknown Source)
0
Comment
Question by:MelanieMoore
  • 3
  • 2
5 Comments
 
LVL 57

Expert Comment

by:giltjr
ID: 22785392
Base on the error they are not receiving disconnects, but something is refusing the connection.

It appears that your Java application is attempting to connect to:

     http://ddcerp012.probuild.com:8023

Any firewalls, IPS/IDS devices, or other "security" devices inbetween the host getting the errors and the host above that could be preventing the connection?
0
 

Author Comment

by:MelanieMoore
ID: 22786183
That makes sense but it is irratic.  It connects over and over, then 'refuses' to connect.  Do you know what might cause that?
0
 
LVL 57

Accepted Solution

by:
giltjr earned 500 total points
ID: 22786492
A couple of possibilities.  

If there is a "security" device it could be sensing what it things is a deny of service attack.  That is too many connections coming in at one time.  So it starts issuing resets to whatever is making the to prevent the server (ddcerp012.probuild.com) from being attacked.

It could be that the server ddcerp012.probuild.com has the maximum number of connections it allows and it is sending resets so that it does not end up with a lot of queue connections.

I would suggest that you look at the logs on ddcerp012.probuild.com.  You may want to  do some network packet capture at various points in the network (starting on the server ddcerp012.probuild.com) to verify that the issue is connections being dropped and what is dropping them.

0
 

Author Closing Comment

by:MelanieMoore
ID: 31508995
I didn't give you that much to go on, and you answered with enough detail to help us look in the right direction.  Supposedly they turned off the IDS, or as they called it whitelisted the 2 servers involved. thanks for taking the time to answer.
0
 
LVL 57

Expert Comment

by:giltjr
ID: 22787074
With security devices you can have a "whitelist", "blacklist", or not listed.

Not listed normally means to go through "normal" processing and watch what the host is doing.  If it is doing anything suspect, block it.
"blacklisted" means that we know we want to watch this guy real closely or even totally block anything he tries to do.
"whitelisted" means we know who this is and we trust them, so they can "do anything they want" or have some of the restriction relaxed.

Glad to be of help.
0

Featured Post

Manage your data center from practically anywhere

The KN8164V features HD resolution of 1920 x 1200, FIPS 140-2 with level 1 security standards and virtual media transmissions at twice the speed. Built for reliability, the KN series provides local console and remote over IP access, ensuring 24/7 availability to all servers.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Issues installing SSL certificate into Apache Tomcat 3 101
SSL sertificate 5 71
Domino Website - Redirection 12 84
web server: redirect 123.domain.com to www.domain.com/123 16 37
It is possible to boost certain documents at query time in Solr. Query time boosting can be a powerful resource for finding the most relevant and "best" content. Of course the more information you index, the more fields you will be able to use for y…
If you are a web developer, you would be aware of the <iframe> tag in HTML. The <iframe> stands for inline frame and is used to embed another document within the current HTML document. The embedded document could be even another website.
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…

837 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question