I've just installed ipfilter on 2 Ciscoworks machines (Running on an E220 with Solaris 8),
and it seems this has caused one of the java processes to fail. (The exact same
process on both machines)
The process has a lot of connections in CLOSE_WAIT state, and cannot be killed
with kill -9. The process is running in the S state.
I've tried the following to get the process running again:
- put an empty ruleset in, and clear the state table - remove ipfilter from the machine (including kernel module)
This didn't work, so it looks like I need a reboot to get rid of the process.
I've also got ipfilter running on another CiscoWorks box (an E280 with Solaris 8),
which doesn't seem to have this problem.
Is this a known problem ? If not, is there a way to debug this ? (The logs show nothing unusual)
Try using truss to attach to the process to see what syscall it's hung in. That may be useful information...
# truss -v all -p xxx
-- Jefferson Ogata <[EMAIL PROTECTED]> NOAA Computer Incident Response Team (N-CIRT) <[EMAIL PROTECTED]>
