On 01/26/16 09:10 AM, Arjen Van Drie wrote: > Hi list, > > since yesterday I get in the logs: > > 26-Jan 09:57 backuptest01-dir: ERROR in socket_server.c:56 Connection request > from client failed. > > every minute. > > I see from a tcpdump that the client is one specific host, but when I capture > full packets they don't tell me much about what exactly is going on. > > Thanks for pointing me in the right direction, > Looking at the code at that line it prints that if the recv() call returns 0 or less e.g. receive error on the socket. Maybe some monitoring is probing things and creates a socket and directly closes it. I would guess its some security test run in your network or some wrongly configured monitoring system. You could add a tcp wrapper rule dropping that particular host but that would mean you get it dropped earlier but still being logged. I think the better solution is to figure out what device is doing that in your network and get it to stop doing it.
-- Marco van Wieringen [email protected] Bareos GmbH & Co. KG Phone: +49-221-63069389 http://www.bareos.com Sitz der Gesellschaft: Köln | Amtsgericht Köln: HRA 29646 Komplementär: Bareos Verwaltungs-GmbH Geschäftsführer: Stephan Dühr, M. Außendorf, J. Steffens, P. Storz, M. v. Wieringen -- You received this message because you are subscribed to the Google Groups "bareos-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. For more options, visit https://groups.google.com/d/optout.
