Users receiving intermittent and non-reproducable disconnect - but disconnects are pervasive and preventing reasonable work

detail java console log/trace file contains the following:

network: Connecting http://ddcerp012.probuild.com:8023/forms/lservlet;jsessionid=ac12263b56634d8d100d47f849cf9935d96c93cfa553.e38ObxqQc34Ne3qMchuLahmRbi0 with cookie "__utma=236186560.1311399554483614200.1219156415.1224622085.1224622939.395; __utmz=236186560.1219156415.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmb=236186560.1.10.1224622939; __utmc=236186560; CRP3=R5njbleUx3LtEpmT1rNd20GO:S; oracle.uix=0^^GMT-6:00^p"
java.net.ConnectException: Connection refused: connect
            at java.net.PlainSocketImpl.socketConnect(Native Method)
            at java.net.PlainSocketImpl.doConnect(Unknown Source)
            at java.net.PlainSocketImpl.connectToAddress(Unknown Source)
            at java.net.PlainSocketImpl.connect(Unknown Source)
            at java.net.Socket.connect(Unknown Source)
            at sun.net.NetworkClient.doConnect(Unknown Source)
            at sun.net.www.http.HttpClient.openServer(Unknown Source)
            at sun.net.www.http.HttpClient.openServer(Unknown Source)
            at sun.net.www.http.HttpClient.parseHTTPHeader(Unknown Source)
            at sun.net.www.http.HttpClient.parseHTTP(Unknown Source)
            at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
            at oracle.forms.net.HTTPNStream.doPost(Unknown Source)
            at oracle.forms.net.HTTPNStream.doFlush(Unknown Source)
            at oracle.forms.net.HTTPNStream.flush(Unknown Source)
            at java.io.DataOutputStream.flush(Unknown Source)
            at oracle.forms.net.StreamMessageWriter.run(Unknown Source)
network: Cache entry found [url: http://ddcerp012.probuild.com:8023/OA_JAVA/oracle/apps/fnd/jar/fndewt.jar, version: null]
java.io.EOFException
            at java.io.DataInputStream.readUnsignedByte(Unknown Source)
            at oracle.forms.engine.Message.readDetails(Unknown Source)
            at oracle.forms.engine.Message.readDetails(Unknown Source)
            at oracle.forms.net.StreamMessageReader.run(Unknown Source)
MelanieMooreAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

giltjrCommented:
Base on the error they are not receiving disconnects, but something is refusing the connection.

It appears that your Java application is attempting to connect to:

     http://ddcerp012.probuild.com:8023

Any firewalls, IPS/IDS devices, or other "security" devices inbetween the host getting the errors and the host above that could be preventing the connection?
0
MelanieMooreAuthor Commented:
That makes sense but it is irratic.  It connects over and over, then 'refuses' to connect.  Do you know what might cause that?
0
giltjrCommented:
A couple of possibilities.  

If there is a "security" device it could be sensing what it things is a deny of service attack.  That is too many connections coming in at one time.  So it starts issuing resets to whatever is making the to prevent the server (ddcerp012.probuild.com) from being attacked.

It could be that the server ddcerp012.probuild.com has the maximum number of connections it allows and it is sending resets so that it does not end up with a lot of queue connections.

I would suggest that you look at the logs on ddcerp012.probuild.com.  You may want to  do some network packet capture at various points in the network (starting on the server ddcerp012.probuild.com) to verify that the issue is connections being dropped and what is dropping them.

0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
MelanieMooreAuthor Commented:
I didn't give you that much to go on, and you answered with enough detail to help us look in the right direction.  Supposedly they turned off the IDS, or as they called it whitelisted the 2 servers involved. thanks for taking the time to answer.
0
giltjrCommented:
With security devices you can have a "whitelist", "blacklist", or not listed.

Not listed normally means to go through "normal" processing and watch what the host is doing.  If it is doing anything suspect, block it.
"blacklisted" means that we know we want to watch this guy real closely or even totally block anything he tries to do.
"whitelisted" means we know who this is and we trust them, so they can "do anything they want" or have some of the restriction relaxed.

Glad to be of help.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Java App Servers

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.