LS, I have a problem concercing a server sensor running on a solaris 8 server. I also dropped the problem by ISS support but maybey somebody in this forum does have the answer to resolve the problem.
We have two (identical) webservers running in a load balanced environment (running on Solaris 8) on both of the machines a server sensor (6.5) is installed. On a given moment we noticed that after a while (roughly 1 week) the load of the machine was climbing to 1.5. after stopping and starting (/etc/init.d realsecure stop/start) the load was dropping to its "normal" value of 0.5. so apperently this has something to do with the server sensor running on the machine. after discussed this with ISS support i tried to create a new (empty) policy in order to check if the load problem was caused by the policy appled to the server sensors. that was the moment when the real problems started. the first "empty" policy i applied was by accident not entirely empty (the scanning of HTTP_GET was enabled (on a webserver....) ). So i created an other "empty" policy and tried to apply this to the server sensor. during this process the workgroup manager started to acting odd. It did not respond anymore. I had to stop and start the workgroup manager. During a second attempt the same occured. This time i stopped and started the sever sensor on the webserver. due to this stopping and starting an error message occured in the workgroup manager. (but i did not had to stop and start the work group manager). A third attempt also resulted in the same problem. but when a tried to stop the server sensor on the webserver something strange happened. the /etc/init.d/realsecure stop did not return with a shell. and also all other shells (which i already opened on the machine) did nog interact anymore. The only way to resolve this was to power down the webserver and start it again. This problem is reproducable. Kind Regards, Erwin Prummel _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo
