[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1540
  • Last Modified:

Users receiving intermittent and non-reproducable disconnect - but disconnects are pervasive and preventing reasonable work

detail java console log/trace file contains the following:

network: Connecting http://ddcerp012.probuild.com:8023/forms/lservlet;jsessionid=ac12263b56634d8d100d47f849cf9935d96c93cfa553.e38ObxqQc34Ne3qMchuLahmRbi0 with cookie "__utma=236186560.1311399554483614200.1219156415.1224622085.1224622939.395; __utmz=236186560.1219156415.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmb=236186560.1.10.1224622939; __utmc=236186560; CRP3=R5njbleUx3LtEpmT1rNd20GO:S; oracle.uix=0^^GMT-6:00^p"
java.net.ConnectException: Connection refused: connect
            at java.net.PlainSocketImpl.socketConnect(Native Method)
            at java.net.PlainSocketImpl.doConnect(Unknown Source)
            at java.net.PlainSocketImpl.connectToAddress(Unknown Source)
            at java.net.PlainSocketImpl.connect(Unknown Source)
            at java.net.Socket.connect(Unknown Source)
            at sun.net.NetworkClient.doConnect(Unknown Source)
            at sun.net.www.http.HttpClient.openServer(Unknown Source)
            at sun.net.www.http.HttpClient.openServer(Unknown Source)
            at sun.net.www.http.HttpClient.parseHTTPHeader(Unknown Source)
            at sun.net.www.http.HttpClient.parseHTTP(Unknown Source)
            at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
            at oracle.forms.net.HTTPNStream.doPost(Unknown Source)
            at oracle.forms.net.HTTPNStream.doFlush(Unknown Source)
            at oracle.forms.net.HTTPNStream.flush(Unknown Source)
            at java.io.DataOutputStream.flush(Unknown Source)
            at oracle.forms.net.StreamMessageWriter.run(Unknown Source)
network: Cache entry found [url: http://ddcerp012.probuild.com:8023/OA_JAVA/oracle/apps/fnd/jar/fndewt.jar, version: null]
java.io.EOFException
            at java.io.DataInputStream.readUnsignedByte(Unknown Source)
            at oracle.forms.engine.Message.readDetails(Unknown Source)
            at oracle.forms.engine.Message.readDetails(Unknown Source)
            at oracle.forms.net.StreamMessageReader.run(Unknown Source)
0
MelanieMoore
Asked:
MelanieMoore
  • 3
  • 2
1 Solution
 
giltjrCommented:
Base on the error they are not receiving disconnects, but something is refusing the connection.

It appears that your Java application is attempting to connect to:

     http://ddcerp012.probuild.com:8023

Any firewalls, IPS/IDS devices, or other "security" devices inbetween the host getting the errors and the host above that could be preventing the connection?
0
 
MelanieMooreAuthor Commented:
That makes sense but it is irratic.  It connects over and over, then 'refuses' to connect.  Do you know what might cause that?
0
 
giltjrCommented:
A couple of possibilities.  

If there is a "security" device it could be sensing what it things is a deny of service attack.  That is too many connections coming in at one time.  So it starts issuing resets to whatever is making the to prevent the server (ddcerp012.probuild.com) from being attacked.

It could be that the server ddcerp012.probuild.com has the maximum number of connections it allows and it is sending resets so that it does not end up with a lot of queue connections.

I would suggest that you look at the logs on ddcerp012.probuild.com.  You may want to  do some network packet capture at various points in the network (starting on the server ddcerp012.probuild.com) to verify that the issue is connections being dropped and what is dropping them.

0
 
MelanieMooreAuthor Commented:
I didn't give you that much to go on, and you answered with enough detail to help us look in the right direction.  Supposedly they turned off the IDS, or as they called it whitelisted the 2 servers involved. thanks for taking the time to answer.
0
 
giltjrCommented:
With security devices you can have a "whitelist", "blacklist", or not listed.

Not listed normally means to go through "normal" processing and watch what the host is doing.  If it is doing anything suspect, block it.
"blacklisted" means that we know we want to watch this guy real closely or even totally block anything he tries to do.
"whitelisted" means we know who this is and we trust them, so they can "do anything they want" or have some of the restriction relaxed.

Glad to be of help.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now