Issues with SNMP
Hello everyone
I enabled SNMP on my 2 APs to check the bandwidth usage, it works only for a moment, i mean .. SNMP is still enabled, but i don t know why when i check the OID, in a command line it s like it doens t exist anymore ..
Then i disable ==> save ==> enable SNMP in the configuration panel, it works again until it drops again ..
Anyone had the same problem ??
Have a nice day !
Usually, it works 1 hour, then it stops, SNMP is still active, but interfaces related OIDs seems to disappear ..
Similar Messages
-
I'm working with vADM 6.2.1.
I am having issues with SNMP trying to discover IBM iSeries servers. I can use snmpwalk from windows machines and get a response from the iSeries server, but when I use snmpwalk from the vADM VM collector all I get is a timeout. My policy is also failing to connect to the host. The iSeries sysadmin believes that the problem may be that the response is coming back on a different port than 161 (See the document below). If the fact that the iSeries server is responding back on a different port, or a port above 5000, then I don't quite understand why other implementations of snmpwalk are capturing mib information but the vADM Fedora version is not. I'm not sure what else to try to get it to work. I have validated that the vADM collectors (all of them) are registered as management hosts on the iSeries server and I know there are no firewals intervening.
Document Title
The IBM iSeries Family of Servers SNMP Agent Responds on an Ephemeral Port Rather Than Port 161
Document Description
The user finds that when a request is made to the IBM iSeries family of servers SNMP Agent on port 161, the iSeries family responds on a port above 5000. Why is the iSeries so different from VM or IBM MVS systems that will receive and respond on the same SNMP port? Many customers have a firewall and don't want to open all ephemeral ports above port 5000. Is there a work-around to this?
This is working as designed. There is no current configuration you can use to force SNMP to respond on port 161. The semantics they are looking for are mostly identified with TCP - connection oriented (statefull) sessions. SNMP uses UDP (connectionless) protocols, and the most common way to send datagrams with UDP is by using an ephemeral port.
The original SNMP developers said that there are separate jobs: a receiver job to receive all requests from all managers, and the sender job responsible for the accessing the MIB database and actually responding to the request(s). The receiver job passes off the requests to the sender job and goes back to listening for new requests. Because both jobs cannot bind to port 161 (this was written in V3R1 when mechanisms like spawn were unavailable), the receiver job uses 161 and the sender job uses a random port.I don't believe that platform is supported for vADM Detail Discovery.
If I were to troubleshoot this, I'd try to see if stopping the iptables firewall allows this to work -just as a test. If this does work, then you'll need to configure the IP Tables firewall settings to allow for higher-numbered incoming ports from the expected IP Addresses or ranges where you think you'll be probing. I would not continue running with IP Tables down.
While you're testing this it might be a good idea to run tcpdump to see if the Collector/Single-box system is sending/receiving traffic from the target. -
Issue with SJSWPS4.0.5 and SNMP
I've installed SJSWPS4.0.5 on my Windows XP machine and have been trialing it. One problem that we need solved before we purchase product assurance is how to monitor the health of the server for business and security reasons. Obviously SNMP would be a wonderful thing as all that activity could go to our enVision (RSA) appliance and we could be alerted through that.
My issue is SNMP is supposed to be available for server monitoring but key features within the administration console are missing for Setting SNMP Master Agent (entire button is missing from Global Settings) and Master Host entry line isn't on the Configure SNMP Subagent page and the entire "plugins\snmp\magt" folder just doesn't exist which the Administrators Guide continually mentions concerning setting this up correctly.
I even read the Release Notes for 4.0.2 and found it had an issue where the libnspr4.dll file doesn't get copied to \\%systemroot%\system32, without it SNMP won't work for Windows. I grabbed it from ProxyServer40\bin\proxy\bin folder and put where it's supposed to go and rebooted. Nothing changed.
Maybe I just don't have to worry about this with Windows? How can I make sure it's working? Any thoughts? My SNMP trap service is pointing to the enVision box with the correct community name.Hi Dass,
I replaced the command, but it didn't work. Still the same issue. I don't think that the issue is related to dtmf config under the voip dial-peer.
From the sh http client cache : i can see the follwoing :
entry 129, 1 entries
Ref FreshTime Age Size context
1 86400 248 339790 0
url: http://172.20.10.5/ar-ar/app/Menu1019.wav
entry 140, 1 entries
Ref FreshTime Age Size context
1 86400 130 8158 0
url: http://172.20.10.5/ar-ar/app/Beep.wav
entry 141, 1 entries
Ref FreshTime Age Size context
1 86400 72 8158 0
url: http://172.20.10.5/fr-fr/app/Beep.wav
entry 152, 2 entries
Ref FreshTime Age Size context
1 4760934 250 40136 0
url: http://172.20.10.6:7000/CVP/audio/error.wav
1 4760934 245 40136 0
url: http://172.20.10.7:7000/CVP/audio/error.wav
We do have 4 CALL/VXML servers (172.20.10.6, 172.20.10.7, 172.20.10.8 and 172.20.10.9). I can see the error message is coming from the .6 and .7 servers. Could this help ? -
Does anyone else poll this router with SNMP?
We are using firmware version: 2.0.0.19-tz
We are having problems with the traffic counters, some of them appear to be implemented as 16 bit counter instead of 32 bit counters. The reason this is causing problems is that they roll over (at 65,000) to 0 in less than our minute polling cycle, really skewing our metrics.
The counter for the Lan (interface 2) seems to be functioning properly, however interfaces 3 and 4 (WAN and DMZ / WAN2) rollover at 65000.
Tue May 11 08:38:31 EDT 2010
IF-MIB::ifInOctets.1 = Counter32: 137634
IF-MIB::ifInOctets.2 = Counter32: 1865677943
IF-MIB::ifInOctets.3 = Counter32: 12450
IF-MIB::ifInOctets.4 = Counter32: 49354
Look at counter IF-MIB::ifInOctets.4 5 seconds later:
Tue May 11 08:38:36 EDT 2010
IF-MIB::ifInOctets.1 = Counter32: 137634
IF-MIB::ifInOctets.2 = Counter32: 1865836207
IF-MIB::ifInOctets.3 = Counter32: 13167
IF-MIB::ifInOctets.4 = Counter32: 12900
Any suggestions?
Thanks!Looks like a bug.
I'm using the same firmware, and the bug can be seen with one reading:
$ snmpwalk -v 2c -c public 192.168.20.253
IF-MIB::ifDescr.2 = STRING: ixp0
IF-MIB::ifDescr.3 = STRING: ixp1
IF-MIB::ifDescr.4 = STRING: ixp2
IF-MIB::ifInOctets.2 = Counter32: 2882720251
IF-MIB::ifInOctets.3 = Counter32: 59554
IF-MIB::ifInOctets.4 = Counter32: 31339
IF-MIB::ifInUcastPkts.2 = Counter32: 114769131
IF-MIB::ifInUcastPkts.3 = Counter32: 4291658323
IF-MIB::ifInUcastPkts.4 = Counter32: 4292343584
The unicast packet counters seem correct, the LAN counters (both byte and packet) seem correct, but the WAN (both WAN1 & WAN2) byte counts are flawed, i.e. no relation to the packet counters. -
Issues with WebForm performance
Hi,
We had migrated a new application from UAT to PROD and we encounter webform performance issues with the following actions..
After login, the first form you open it is
always slow. After this you can switch from one form to another without a
delay.
Then once you change any data – the next time
you access a form it gets delayed.
The point to be noted is, it doesnt have any performance issues in the UAT environment and the configuration settings,essbase cache settings are all the same. We did try to move the EPM system to a new server to see if this is a hardware issue but no luck, the performance issues still exist. The consumption of the CPU/memory has been checked and it is proved that the form opening delay has nothing to do with lack of memory.
The JVM head settings is set up at 4GB which is infact higher than that of the UAT environment(2GB).
runs on Windows server2008,11.1.2.1.600 EPM serve, has planning,reporting,foundation on one server (32GB ram) and essbase on another server (32GB ram). Any help is appreciated.
Please find attached the planning logs below and there is nothing mentioned in the hyperionplanning error logs.-----------------------------------------------------------------------------------------------------------------------------------------------------------------
<Nov 5, 2013 8:05:43 PM CET> <Info> <Security> <BEA-090905> <Disabling CryptoJ JCE Provider self-integrity check for better startup performance. To enable this check, specify -Dweblogic.security.allowCryptoJDefaultJCEVerification=true>
<Nov 5, 2013 8:05:43 PM CET> <Info> <Security> <BEA-090906> <Changing the default Random Number Generator in RSA CryptoJ from ECDRBG to FIPS186PRNG. To disable this change, specify -Dweblogic.security.allowCryptoJDefaultPRNG=true>
<Nov 5, 2013 8:05:44 PM CET> <Info> <WebLogicServer> <BEA-000377> <Starting WebLogic Server with Oracle JRockit(R) Version R28.0.2-11-135406-1.6.0_20-20100624-2119-windows-x86_64 from Oracle Corporation>
<Nov 5, 2013 8:05:46 PM CET> <Info> <Management> <BEA-141107> <Version: WebLogic Server 10.3.4.0 Fri Dec 17 20:47:33 PST 2010 1384255 >
<Nov 5, 2013 8:05:48 PM CET> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING>
<Nov 5, 2013 8:05:48 PM CET> <Info> <WorkManager> <BEA-002900> <Initializing self-tuning thread pool>
<Nov 5, 2013 8:05:48 PM CET> <Notice> <Log Management> <BEA-170019> <The server log file C:\Oracle\Middleware\user_projects\domains\EPMSystem\servers\Planning0\logs\Planning0.log is opened. All server side log events will be written to this file.>
<Nov 5, 2013 8:06:22 PM CET> <Notice> <Security> <BEA-090082> <Security initializing using security realm myrealm.>
<Nov 5, 2013 8:06:28 PM CET> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STANDBY>
<Nov 5, 2013 8:06:28 PM CET> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING>
Calling getConnection()
return weblogic.management.jmx.mbeanserver.WLSMBeanServer@327b36fb
Calling getDomainConfiguration()
Calling getConnection()
return weblogic.management.jmx.mbeanserver.WLSMBeanServer@327b36fb
Calling getRuntimeService()
Calling getConnection()
return weblogic.management.jmx.mbeanserver.WLSMBeanServer@327b36fb
return com.bea:Name=RuntimeService,Type=weblogic.management.mbeanservers.runtime.RuntimeServiceMBean
return com.bea:Name=EPMSystem,Type=Domain
Calling getConnection()
return weblogic.management.jmx.mbeanserver.WLSMBeanServer@327b36fb
Domain location is 'C:\Oracle\Middleware\user_projects\domains\EPMSystem'
Calling getRuntimeService()
return com.bea:Name=RuntimeService,Type=weblogic.management.mbeanservers.runtime.RuntimeServiceMBean
Calling getConnection()
return weblogic.management.jmx.mbeanserver.WLSMBeanServer@327b36fb
Calling getConnection()
return weblogic.management.jmx.mbeanserver.WLSMBeanServer@327b36fb
Calling getConnection()
return weblogic.management.jmx.mbeanserver.WLSMBeanServer@327b36fb
Calling getConnection()
return weblogic.management.jmx.mbeanserver.WLSMBeanServer@327b36fb
Checking C:\Oracle\Middleware\user_projects\domains\EPMSystem\servers\Planning0\registry_update.xml file
EPM_ORACLE_HOME: C:\Oracle\Middleware\EPMSystem11R1
Template for PLANNING#11.1.2.0: C:\Oracle\Middleware\EPMSystem11R1\common\templates\applications\epm_planning_11.1.2.1.jar
Dependencies for C:\Oracle\Middleware\EPMSystem11R1\common\templates\applications\epm_planning_11.1.2.1.jar: []
BPMUI shared webapp not referenced from PLANNING#11.1.2.0
Application name: PLANNING#11.1.2.0
Application source: HyperionPlanning.ear
Server name: Planning0
Server port: 8300
Server SSL port: 8343
Application context: HyperionPlanning
Registry product type: PLANNING_PRODUCT
Registry physical web application type: PLANNING_WEBAPP
weblogic.Name property is 'Planning0', seems to be WebLogic mode
registry.isRegistryDatabaseCreated()true
Registry was initialized sucessfully
Executing pre custom update for PLANNING#11.1.2.0
EPM_ORACLE_INSTANCE: C:\Oracle\Middleware\user_projects\epmsystem1
Physical Web App found
Web app already linked to some application server: false
The registry was not modifyed because it already containse all sturctures
Web app is already linked to the logical web app
No needs to run custom updater for PLANNING#11.1.2.0
loggingUpdatePLANNING.block file exist or the system is running in the Fusion mode, skipping logging.xml configuration
Planning locale: en_US
<Nov 5, 2013 8:06:39 PM CET> <Notice> <Log Management> <BEA-170027> <The Server has established connection with the Domain level Diagnostic Service successfully.>
<Nov 5, 2013 8:06:39 PM CET> <Notice> <Cluster> <BEA-000197> <Listening for announcements from cluster using unicast cluster messaging>
<Nov 5, 2013 8:06:39 PM CET> <Notice> <Cluster> <BEA-000133> <Waiting to synchronize with other running members of Planning.>
<Nov 5, 2013 8:07:09 PM CET> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to ADMIN>
<Nov 5, 2013 8:07:09 PM CET> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RESUMING>
<Nov 5, 2013 8:07:09 PM CET> <Notice> <Cluster> <BEA-000162> <Starting "async" replication service with remote cluster address "null">
<Nov 5, 2013 8:07:10 PM CET> <Notice> <Security> <BEA-090171> <Loading the identity certificate and private key stored under the alias DemoIdentity from the jks keystore file C:\Oracle\MIDDLE~1\WLSERV~1.3\server\lib\DemoIdentity.jks.>
<Nov 5, 2013 8:07:10 PM CET> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file C:\Oracle\MIDDLE~1\WLSERV~1.3\server\lib\DemoTrust.jks.>
<Nov 5, 2013 8:07:10 PM CET> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file C:\Oracle\Middleware\jrockit_160_20\jre\lib\security\cacerts.>
<Nov 5, 2013 8:07:10 PM CET> <Alert> <Security> <BEA-090152> <Demo trusted CA certificate is being used in production mode: [
Version: V3
Subject: CN=CACERT, OU=FOR TESTING ONLY, O=MyOrganization, L=MyTown, ST=MyState, C=US
Signature Algorithm: MD5withRSA, OID = 1.2.840.113549.1.1.4
Key: Sun RSA public key, 512 bits
modulus: 9550192877869244258838480703390456015046425375252278279190673063544122510925482179963329236052146047356415957587628011282484772458983977898996276815440753
public exponent: 65537
Validity: [From: Thu Mar 21 21:12:27 CET 2002,
To: Tue Mar 22 21:12:27 CET 2022]
Issuer: CN=CACERT, OU=FOR TESTING ONLY, O=MyOrganization, L=MyTown, ST=MyState, C=US
SerialNumber: [ 33f10648 fcde0deb 4199921f d64537f4]
Certificate Extensions: 1
[1]: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
Key_CertSign
Algorithm: [MD5withRSA]
Signature:
0000: 9D 26 4C 29 C8 91 C3 A7 06 C3 24 6F AE B4 F8 82 .&L)......$o....
0010: 80 4D AA CB 7C 79 46 84 81 C4 66 95 F4 1E D8 C4 .M...yF...f.....
0020: E9 B7 D9 7C E2 23 33 A4 B7 21 E0 AA 54 2B 4A FF .....#3..!..T+J.
0030: CB 21 20 88 81 21 DB AC 90 54 D8 7D 79 63 23 3C .! ..!...T..yc#<
] The system is vulnerable to security attacks, since it trusts certificates signed by the demo trusted CA.>
<Nov 5, 2013 8:07:10 PM CET> <Notice> <Security> <BEA-090898> <Ignoring the trusted CA certificate "CN=thawte Primary Root CA - G3,OU=(c) 2008 thawte\, Inc. - For authorized use only,OU=Certification Services Division,O=thawte\, Inc.,C=US". The loading of the trusted certificate list raised a certificate parsing exception PKIX: Unsupported OID in the AlgorithmIdentifier object: 1.2.840.113549.1.1.11.>
<Nov 5, 2013 8:07:10 PM CET> <Notice> <Security> <BEA-090898> <Ignoring the trusted CA certificate "CN=T-TeleSec GlobalRoot Class 3,OU=T-Systems Trust Center,O=T-Systems Enterprise Services GmbH,C=DE". The loading of the trusted certificate list raised a certificate parsing exception PKIX: Unsupported OID in the AlgorithmIdentifier object: 1.2.840.113549.1.1.11.>
<Nov 5, 2013 8:07:10 PM CET> <Notice> <Security> <BEA-090898> <Ignoring the trusted CA certificate "CN=T-TeleSec GlobalRoot Class 2,OU=T-Systems Trust Center,O=T-Systems Enterprise Services GmbH,C=DE". The loading of the trusted certificate list raised a certificate parsing exception PKIX: Unsupported OID in the AlgorithmIdentifier object: 1.2.840.113549.1.1.11.>
<Nov 5, 2013 8:07:10 PM CET> <Notice> <Security> <BEA-090898> <Ignoring the trusted CA certificate "CN=GlobalSign,O=GlobalSign,OU=GlobalSign Root CA - R3". The loading of the trusted certificate list raised a certificate parsing exception PKIX: Unsupported OID in the AlgorithmIdentifier object: 1.2.840.113549.1.1.11.>
<Nov 5, 2013 8:07:10 PM CET> <Notice> <Security> <BEA-090898> <Ignoring the trusted CA certificate "OU=Security Communication RootCA2,O=SECOM Trust Systems CO.\,LTD.,C=JP". The loading of the trusted certificate list raised a certificate parsing exception PKIX: Unsupported OID in the AlgorithmIdentifier object: 1.2.840.113549.1.1.11.>
<Nov 5, 2013 8:07:10 PM CET> <Notice> <Security> <BEA-090898> <Ignoring the trusted CA certificate "CN=VeriSign Universal Root Certification Authority,OU=(c) 2008 VeriSign\, Inc. - For authorized use only,OU=VeriSign Trust Network,O=VeriSign\, Inc.,C=US". The loading of the trusted certificate list raised a certificate parsing exception PKIX: Unsupported OID in the AlgorithmIdentifier object: 1.2.840.113549.1.1.11.>
<Nov 5, 2013 8:07:10 PM CET> <Notice> <Security> <BEA-090898> <Ignoring the trusted CA certificate "CN=KEYNECTIS ROOT CA,OU=ROOT,O=KEYNECTIS,C=FR". The loading of the trusted certificate list raised a certificate parsing exception PKIX: Unsupported OID in the AlgorithmIdentifier object: 1.2.840.113549.1.1.11.>
<Nov 5, 2013 8:07:10 PM CET> <Notice> <Security> <BEA-090898> <Ignoring the trusted CA certificate "CN=GeoTrust Primary Certification Authority - G3,OU=(c) 2008 GeoTrust Inc. - For authorized use only,O=GeoTrust Inc.,C=US". The loading of the trusted certificate list raised a certificate parsing exception PKIX: Unsupported OID in the AlgorithmIdentifier object: 1.2.840.113549.1.1.11.>
<Nov 5, 2013 8:07:10 PM CET> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[3]" is now listening on 127.0.0.1:8343 for protocols iiops, t3s, CLUSTER-BROADCAST-SECURE, ldaps, https.>
<Nov 5, 2013 8:07:10 PM CET> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[1]" is now listening on fe80:0:0:0:0:5efe:a53:4816:8343 for protocols iiops, t3s, CLUSTER-BROADCAST-SECURE, ldaps, https.>
<Nov 5, 2013 8:07:10 PM CET> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[4]" is now listening on 0:0:0:0:0:0:0:1:8343 for protocols iiops, t3s, CLUSTER-BROADCAST-SECURE, ldaps, https.>
<Nov 5, 2013 8:07:10 PM CET> <Notice> <Server> <BEA-002613> <Channel "Default" is now listening on 10.83.72.22:8300 for protocols iiop, t3, CLUSTER-BROADCAST, ldap, snmp, http.>
<Nov 5, 2013 8:07:10 PM CET> <Notice> <Server> <BEA-002613> <Channel "Default[3]" is now listening on 127.0.0.1:8300 for protocols iiop, t3, CLUSTER-BROADCAST, ldap, snmp, http.>
<Nov 5, 2013 8:07:10 PM CET> <Notice> <Server> <BEA-002613> <Channel "Default[4]" is now listening on 0:0:0:0:0:0:0:1:8300 for protocols iiop, t3, CLUSTER-BROADCAST, ldap, snmp, http.>
<Nov 5, 2013 8:07:10 PM CET> <Notice> <Server> <BEA-002613> <Channel "Default[2]" is now listening on fe80:0:0:0:0:ffff:ffff:fffe:8300 for protocols iiop, t3, CLUSTER-BROADCAST, ldap, snmp, http.>
<Nov 5, 2013 8:07:10 PM CET> <Notice> <Server> <BEA-002613> <Channel "Default[1]" is now listening on fe80:0:0:0:0:5efe:a53:4816:8300 for protocols iiop, t3, CLUSTER-BROADCAST, ldap, snmp, http.>
<Nov 5, 2013 8:07:10 PM CET> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[2]" is now listening on fe80:0:0:0:0:ffff:ffff:fffe:8343 for protocols iiops, t3s, CLUSTER-BROADCAST-SECURE, ldaps, https.>
<Nov 5, 2013 8:07:10 PM CET> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure" is now listening on 10.83.72.22:8343 for protocols iiops, t3s, CLUSTER-BROADCAST-SECURE, ldaps, https.>
<Nov 5, 2013 8:07:10 PM CET> <Warning> <Server> <BEA-002611> <Hostname "WIPLPRD01.svc.unicc.org", maps to multiple IP addresses: 10.83.72.22, 0:0:0:0:0:0:0:1>
<Nov 5, 2013 8:07:10 PM CET> <Notice> <WebLogicServer> <BEA-000330> <Started WebLogic Managed Server "Planning0" for domain "EPMSystem" running in Production Mode>
<Nov 5, 2013 8:07:12 PM CET> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RUNNING>
<Nov 5, 2013 8:07:12 PM CET> <Notice> <WebLogicServer> <BEA-000360> <Server started in RUNNING mode>
using java.library.path: C:\Oracle\Middleware\EPMSystem11R1/products/Planning/lib64;C:\Oracle\Middleware\EPMSystem11R1/bin;C:\Oracle\Middleware\EPMSystem11R1/common/EssbaseRTC-64/11.1.2.0/bin;C:\Oracle\MIDDLE~1\patch_wls1034\profiles\default\native;C:\Oracle\MIDDLE~1\WLSERV~1.3\server\native\win\x64;C:\Oracle\MIDDLE~1\WLSERV~1.3\server\bin;C:\Oracle\MIDDLE~1\modules\ORGAPA~1.1\bin;C:\Oracle\MIDDLE~1\JROCKI~1\jre\bin;C:\Oracle\MIDDLE~1\JROCKI~1\bin;C:\Oracle\MIDDLE~1\WLSERV~1.3\server\native\win\x64\oci920_8
EPM_ORACLE_HOME (C:\Oracle\Middleware\EPMSystem11R1) is set from JVM property "EPM_ORACLE_HOME".
using Java property for Hyperion Home C:\Oracle\Middleware\EPMSystem11R1
EPM_ORACLE_INSTANCE (C:\Oracle\Middleware\user_projects\epmsystem1) is set from JVM property[EPM_ORACLE_INSTANCE].
Reaquired task list lease: Tue Nov 05 20:11:49 CET 2013: 1383678709156
Seeking ESAPI.properties
Found in 'org.owasp.esapi.resources' directory: C:\Oracle\Middleware\EPMSystem11R1\products\Planning\config\esapi\ESAPI.properties
Loaded 'ESAPI.properties' properties file
Seeking validation.properties
Found in 'org.owasp.esapi.resources' directory: C:\Oracle\Middleware\EPMSystem11R1\products\Planning\config\esapi\validation.properties
Loaded 'validation.properties' properties file
Seeking antisamy-esapi.xml
Found in 'org.owasp.esapi.resources' directory: C:\Oracle\Middleware\EPMSystem11R1\products\Planning\config\esapi\antisamy-esapi.xml
EnterData_Inner Processing Time:424
2013-11-05 20:14:47,454 INFO Thread-51 calcmgr.launch - Date/Time Started: 2013/11/05:20:14:47.452 CET Server/Application/Database: localhost/1415_WP/AWP Business Rule Name: WPA_Count By Planning user: wipoadmin Values entered for run-time prompts: [Variable] Wrk_Scenario:"Work_Plan_2014"[Variable] Funds:"Regular"[Variable] Units:"0001"
- Date/Time Started: 2013/11/05:20:14:47.452 CET Server/Application/Database: localhost/1415_WP/AWP Business Rule Name: WPA_Count By Planning user: wipoadmin Values entered for run-time prompts: [Variable] Wrk_Scenario:"Work_Plan_2014"[Variable] Funds:"Regular"[Variable] Units:"0001"
2013-11-05 20:14:54,066 INFO Thread-51 calcmgr.launch - Date/Time Ended: 2013/11/05:20:14:54.066 CET Server/Application/Database: localhost/1415_WP/AWP Business Rule Name: WPA_Count By Planning user: wipoadmin.
- Date/Time Ended: 2013/11/05:20:14:54.066 CET Server/Application/Database: localhost/1415_WP/AWP Business Rule Name: WPA_Count By Planning user: wipoadmin.
EnterData_Inner Processing Time:64
EnterData_Inner Processing Time:15
EnterData_Inner Processing Time:359
EnterData_Inner Processing Time:2
EnterData_Inner Processing Time:53
EnterData_Inner Processing Time:4
EnterData_Inner Processing Time:7
EPM_ORACLE_INSTANCE (C:\Oracle\Middleware\user_projects\epmsystem1) is set from JVM property[EPM_ORACLE_INSTANCE].
EPM_ORACLE_INSTANCE (C:\Oracle\Middleware\user_projects\epmsystem1) is set from JVM property[EPM_ORACLE_INSTANCE].
EPM_ORACLE_INSTANCE (C:\Oracle\Middleware\user_projects\epmsystem1) is set from JVM property[EPM_ORACLE_INSTANCE].
Setting HBR Mode to: 2
In lookupBRLWA()
Found HBR product = ESSBASE_PRODUCT
Found HBR product = ESSBASE_PRODUCT
Found HBR product = ESSBASE_PRODUCT
HBR LWA Component = Default
Default HBR = http://WIPLPRD01.svc.unicc.org:19000/eas
In getDBDetails()
Found HBR product = ESSBASE_PRODUCT
In lookupBRLWA()
Found HBR product = ESSBASE_PRODUCT
Found HBR product = ESSBASE_PRODUCT
=2013-11-05 20:35:08,234 WARN [ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Error retrieving user by identity
- Error retrieving user by identity
Embedded HBR initialized.
EnterData_Inner Processing Time:6
EnterData_Inner Processing Time:867
[Tue Nov 05 20:35:33 CET 2013] Planning successfully notified HBR repository.
EnterData_Inner Processing Time:7
2013-11-05 20:40:38,613 INFO Thread-67 calcmgr.launch - Date/Time Started: 2013/11/05:20:40:38.606 CET Server/Application/Database: localhost/1415_WP/AWP Business Rule Name: NonPersonnel_Calc By Planning user: wipoadmin Values entered for run-time prompts: [Variable] Funds:"Regular"[Variable] Units:"0001"[Variable] Wrk_Scenario:"Work_Plan_2014"
- Date/Time Started: 2013/11/05:20:40:38.606 CET Server/Application/Database: localhost/1415_WP/AWP Business Rule Name: NonPersonnel_Calc By Planning user: wipoadmin Values entered for run-time prompts: [Variable] Funds:"Regular"[Variable] Units:"0001"[Variable] Wrk_Scenario:"Work_Plan_2014"
2013-11-05 20:40:47,241 INFO Thread-67 calcmgr.launch - Date/Time Ended: 2013/11/05:20:40:47.241 CET Server/Application/Database: localhost/1415_WP/AWP Business Rule Name: NonPersonnel_Calc By Planning user: wipoadmin.
- Date/Time Ended: 2013/11/05:20:40:47.241 CET Server/Application/Database: localhost/1415_WP/AWP Business Rule Name: NonPersonnel_Calc By Planning user: wipoadmin.
EnterData_Inner Processing Time:44
EnterData_Inner Processing Time:2
EnterData_Inner Processing Time:525
EnterData_Inner Processing Time:1
Reaquired task list lease: Tue Nov 05 20:41:49 CET 2013: 1383680509246I already replied there but it seems no moderator is willing to approve my reply so it never shows up.
So I'll try replying in here instead:
I never thought it could be an emulator issue, I thought I had done something wrong to begin with. So I take having performance issues with tiled layer is not a common problem I suppose?
I'm using MOTODEV SDK platform, A1200 model (motorola). -
An issue with authentication and authorization on ISE 1.2
Hi, I'm new to ISE.
I have an issue with authentication and authorization.
I have ISE 1.2 plus patch 6 installed on VMware.
I have built-in Windows XP supplicant and 2960 cisco switch with IOS c2960-lanbasek9-mz.150-2.SE5.bin
On supplicant I use EAP(PEAP) with EAP-MSCHAP v2.
I created authentication and authorization rules with Active Directory as External Identity Source. Also I applied authorization profile with DACL.I login on Windows XP machine under different Active Directory accounts. Everything works fine (authentication, authorization ), but only for several hours. After several hours passed , authentication and authorization stop working . I can see that ISE trying authenticate and authorize users, but ISE always use only one account for authentication and authorization . Even if I login under different accounts ISE continue to use only one last account.
I traied to reboot switch and PC,but it didn’t help. Only rebooting of ISE helps. After ISE rebooting, authentication and authorization start to work properly for several hours.
I don’t understand is it a glitch or I misconfigured ISE or switch, supplicant?
What should I do to resolve this issue?
Switch configuration:
testISE#sh runn
Building configuration...
Current configuration : 7103 bytes
! Last configuration change at 12:20:15Tue Apr 15 2014
! NVRAM config last updated at 10:35:02 Tue Apr 15 2014
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname testISE
boot-start-marker
boot-end-marker
no logging console
logging monitor informational
enable secret 5 ************
enable password ********
username radius-test password 0 ********
username admin privilege 15 secret 5 ******************
aaa new-model
aaa authentication dot1x default group radius
aaa authorization network default group radius
aaa authorization auth-proxy default group radius
aaa accounting update periodic 5
aaa accounting dot1x default start-stop group radius
aaa server radius dynamic-author
client 172.16.0.90 server-key ********
aaa session-id common
clock timezone 4 0
system mtu routing 1500
authentication mac-move permit
ip dhcp snooping vlan 1,22
ip dhcp snooping
ip domain-name elauloks
ip device tracking probe use-svi
ip device tracking
epm logging
crypto pki trustpoint TP-self-signed-1888913408
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1888913408
revocation-check none
rsakeypair TP-self-signed-1888913408
crypto pki certificate chain TP-self-signed-1888913408
dot1x system-auth-control
spanning-tree mode pvst
spanning-tree extend system-id
vlan internal allocation policy ascending
ip ssh version 2
interface FastEthernet0/5
switchport mode access
ip access-group ACL-ALLOW in
authentication event fail action next-method
authentication event server dead action reinitialize vlan 1
authentication event server alive action reinitialize
authentication host-mode multi-auth
authentication open
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
authentication violation restrict
mab
dot1x pae authenticator
dot1x timeout tx-period 10
spanning-tree portfast
interface FastEthernet0/6
switchport mode access
ip access-group ACL-ALLOW in
authentication event fail action next-method
authentication event server dead action reinitialize vlan 1
authentication event server alive action reinitialize
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
authentication violation restrict
mab
dot1x pae authenticator
dot1x timeout tx-period 10
spanning-tree portfast
interface FastEthernet0/7
interface Vlan1
ip address 172.16.0.204 255.255.240.0
no ip route-cache
ip default-gateway 172.16.0.1
ip http server
ip http secure-server
ip access-list extended ACL-ALLOW
deny icmp any host 172.16.0.1
permit ip any any
ip radius source-interface Vlan1
logging origin-id ip
logging source-interface Vlan1
logging host 172.16.0.90 transport udp port 20514
snmp-server community public RO
snmp-server community ciscoro RO
snmp-server trap-source Vlan1
snmp-server source-interface informs Vlan1
snmp-server enable traps snmp linkdown linkup
snmp-server enable traps mac-notification change move
snmp-server host 172.16.0.90 ciscoro
radius-server attribute 6 on-for-login-auth
radius-server attribute 6 support-multiple
radius-server attribute 8 include-in-access-req
radius-server attribute 25 access-request include
radius-server dead-criteria time 5 tries 3
radius-server vsa send accounting
radius-server vsa send authentication
radius server ISE-Alex
address ipv4 172.16.0.90 auth-port 1812 acct-port 1813
automate-tester username radius-test idle-time 15
key ******
ntp server 172.16.0.1
ntp server 172.16.0.5
endYes. Tried that (several times) didn't work. 5 people in my office, all with vers. 6.0.1 couldn't access their gmail accounts. Kept getting error message that username and password invalid. Finally solved the issue by using Microsoft Exchange and "m.google.com" as server and domain and that the trick. Think there is an issue with imap.gmail.com and IOS 6.0.1. I'm sure the 5 of us suddently experiencing this issue aren't the only ones. Apple will figure it out. Thanks.
-
Routing Issue with 3550 Switch
I am having an issue with routing with one of my Cisco 3550 switches. I know the 3550s are EoL but some of us have to work with what we have.
I am using a 3550 on either side of a Layer 2 link. The Layer 2 link is 2 Extreme Summit X-440 switches with Microwave between the switches. I have a VLAN configured on both switches and tagged on the ports connected to the Microwave. The 3550 switch on each end is configured for IP routing but I cannot pass traffic between the switches. If I unplug the switch on the local end and plug in a laptop, I can ping the switch on the remote end and access devices at the remote end.
I know this should work because I am doing the same thing over another Microwave link and Layer 2 link using another 3550 and a HP ProCurve at the remote end.
Here are the configs for each 3550:
Local end; Port Fa0/23 goes to the Remote Side. Port Fa0/24 goes to the rest of the network
Current configuration : 5417 bytes
! No configuration change since last restart
version 12.2
no service pad
service timestamps debug datetime localtime show-timezone
service timestamps log datetime localtime show-timezone
no service password-encryption
service sequence-numbers
hostname Brindley3550
enable secret 5 $1$3A.n$lzBUQg.fn4hJ7f0jEOqe71
no aaa new-model
clock timezone UTC -6
clock summer-time UTC recurring 1 Sun Apr 2:00 1 Sun Nov 2:00
mls qos map cos-dscp 0 8 16 26 32 46 48 56
mls qos min-reserve 5 170
mls qos min-reserve 6 10
mls qos min-reserve 7 65
mls qos min-reserve 8 26
mls qos
ip subnet-zero
ip routing
ip domain-name morgan911.net
ip name-server 1.2.150.11
ip name-server 1.2.150.5
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
vlan internal allocation policy ascending
interface FastEthernet0/1
switchport access vlan 18
switchport mode dynamic desirable
spanning-tree portfast
{Removed for Brevity}
|
interface FastEthernet0/7
switchport access vlan 13
switchport mode dynamic desirable
spanning-tree portfast
interface FastEthernet0/8
switchport access vlan 13
switchport mode dynamic desirable
spanning-tree portfast
{Removed for Brevity}
interface FastEthernet0/23
description To Gum Springs via Extreme P10
no switchport
ip address 1.2.147.1 255.255.255.252
speed 100
duplex full
interface FastEthernet0/24
description To Flint via Ceragon Eth 2
switchport trunk encapsulation dot1q
switchport mode trunk
speed 100
duplex full
mls qos trust cos
auto qos voip trust
wrr-queue bandwidth 20 1 80 1
wrr-queue min-reserve 1 5
wrr-queue min-reserve 2 6
wrr-queue min-reserve 3 7
wrr-queue min-reserve 4 8
wrr-queue cos-map 1 0 1 2 4
wrr-queue cos-map 3 3 6 7
wrr-queue cos-map 4 5
priority-queue out
spanning-tree link-type point-to-point
interface GigabitEthernet0/1
switchport trunk encapsulation dot1q
switchport mode trunk
interface GigabitEthernet0/2
switchport access vlan 10
switchport trunk native vlan 50
switchport mode dynamic desirable
spanning-tree portfast trunk
interface Vlan1
ip address 1.2.145.2 255.255.255.0
ip default-gateway 1.2.145.1
ip classless
ip route 0.0.0.0 0.0.0.0 1.2.145.1
ip route 1.2.165.0 255.255.255.240 1.2.147.2
ip route 1.2.166.0 255.255.255.240 1.2.147.2
ip http server
snmp-server community public RO
snmp-server community public/RO RO
snmp-server location Brindlee Mountain Tower Site
snmp-server contact Jamey Wright
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps cluster
snmp-server enable traps entity
snmp-server enable traps envmon fan shutdown supply temperature
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps flash insertion removal
snmp-server enable traps port-security
snmp-server enable traps config
snmp-server enable traps syslog
snmp-server enable traps mac-notification
snmp-server enable traps vlan-membership
snmp-server host 1.2.150.100 public tty envmon syslog snmp
control-plane
ntp clock-period 17180143
ntp server 1.2.150.21
end
And this is the config for the remote end. Port Fa0/24 is the port for the link back to the local end.
Current configuration : 5058 bytes
version 12.2
no service pad
service timestamps debug datetime localtime show-timezone
service timestamps log datetime localtime show-timezone
no service password-encryption
service sequence-numbers
hostname GS3550
enable secret 5 $1$3A.n$lzBUQg.fn4hJ7f0jEOqe71
no aaa new-model
clock timezone UTC -6
clock summer-time UTC recurring
mls qos map cos-dscp 0 8 16 24 32 46 46 56
udld aggressive
ip subnet-zero
ip routing
ip domain-name morgan911.net
ip name-server 1.2.150.11
spanning-tree mode pvst
spanning-tree extend system-id
vlan internal allocation policy ascending
interface FastEthernet0/1
switchport access vlan 21
switchport mode dynamic desirable
spanning-tree portfast
interface FastEthernet0/2
switchport access vlan 21
switchport mode dynamic desirable
power inline delay shutdown 20 initial 300
spanning-tree portfast
{Removed for Brevity}
interface FastEthernet0/23
switchport access vlan 22
switchport trunk encapsulation dot1q
switchport mode trunk
speed 100
duplex full
spanning-tree portfast
interface FastEthernet0/24
description To Brindlee via Extreme P10
switchport mode dynamic desirable
(Is a member of VLAN 1)
speed 100
spanning-tree portfast
interface GigabitEthernet0/1
switchport trunk encapsulation dot1q
switchport mode trunk
interface GigabitEthernet0/2
switchport mode dynamic desirable
spanning-tree portfast
interface Vlan1
ip address 1.2.147.2 255.255.255.252
interface Vlan21
ip address 1.2.165.1 255.255.255.240
ip helper-address 1.2.150.11
ip helper-address 1.2.150.5
interface Vlan22
ip address 1.2.166.1 255.255.255.240
ip helper-address 1.2.150.5
ip helper-address 1.2.150.11
ip default-gateway 1.2.147.1
ip classless
ip route 0.0.0.0 0.0.0.0 1.2.147.1 10
ip http server
snmp-server community public RO
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps cluster
snmp-server enable traps entity
snmp-server enable traps envmon fan shutdown supply temperature
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps flash insertion removal
snmp-server enable traps port-security
snmp-server enable traps config
snmp-server enable traps hsrp
snmp-server enable traps bridge newroot topologychange
snmp-server enable traps syslog
snmp-server enable traps mac-notification
snmp-server enable traps vlan-membership
snmp-server host 1.2.150.100 public envmon syslog snmp
control-plane
ntp clock-period 17180192
ntp server 1.2.150.21 key 0 prefer
Ideas? Anything stand out as grossly wrong? I have worked on this for 2 days and am at a loss.
Thanks
JameySorry for the delay in replying. Other items at the office took priority over this project. I tried that and no change. I pulled the switch from the remote site and took it back to the local end and connected the switches with a crossover cable and everything works fine. I have pretty much determined that it is an issue with the config in one of the Extreme switches. The config in those look pretty normal but there are a few things I am unsure of. Guess I'll see if there is a similar site for Extreme gear.
Thanks
Jamey -
Issue with Integrated Weblogic Server in JDeveloper
Hi
I'm using JDeveloper version: 11.1.1.7
I'm facing issue with the Integrated Weblogic server in JDeveloper.
When I run the server, the log says as follows:
*** Using port 7101 ***
D:\fmwps6\jdeveloper\system11.1.1.7.40.64.93\DefaultDomain\bin\startWebLogic.cmd
[waiting for the server to complete its initialization...]
JAVA Memory arguments: -Xms768m -Xmx768m -XX:CompileThreshold=8000 -XX:PermSize=128m -XX:MaxPermSize=512m
WLS Start Mode=Development
CLASSPATH=D:\fmwps6\JDEVEL~1\SYSTEM~1.93\DEFAUL~1\UIM\lib\sdoapi.jar;D:\fmwps6\ORACLE~1\modules\oracle.jdbc_11.1.1\ojdbc6dms.jar;D:\fmwps6\patch_wls1035\profiles\default\sys_manifest_classpath\weblogic_patch.jar;D:\fmwps6\patch_jdev1111\profiles\default\sys_manifest_classpath\weblogic_patch.jar;D:\Java\JDK16~1.0_5\lib\tools.jar;D:\fmwps6\WLSERV~1.3\server\lib\weblogic_sp.jar;D:\fmwps6\WLSERV~1.3\server\lib\weblogic.jar;D:\fmwps6\modules\features\weblogic.server.modules_10.3.5.0.jar;D:\fmwps6\WLSERV~1.3\server\lib\webservices.jar;D:\fmwps6\modules\ORGAPA~1.1/lib/ant-all.jar;D:\fmwps6\modules\NETSFA~1.0_1/lib/ant-contrib.jar;D:\fmwps6\ORACLE~1\modules\oracle.jrf_11.1.1\jrf.jar;D:\fmwps6\WLSERV~1.3\common\derby\lib\derbyclient.jar;D:\fmwps6\WLSERV~1.3\server\lib\xqrl.jar;;D:\fmwps6\JDEVEL~1\SYSTEM~1.93\DEFAUL~1\UIM\config;D:\fmwps6\JDEVEL~1\SYSTEM~1.93\DEFAUL~1\UIM\lib\stringtemplate-2.3b6.jar
PATH=D:\fmwps6\patch_wls1035\profiles\default\native;D:\fmwps6\patch_jdev1111\profiles\default\native;D:\fmwps6\WLSERV~1.3\server\native\win\x64;D:\fmwps6\WLSERV~1.3\server\bin;D:\fmwps6\modules\ORGAPA~1.1\bin;D:\Java\JDK16~1.0_5\jre\bin;D:\Java\JDK16~1.0_5\bin;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\oraclexe\app\oracle\product\11.2.0\server\bin;;D:\ADE\bin;C:\windows\system32;C:\windows;C:\windows\System32\Wbem;C:\windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\WIDCOMM\Bluetooth Software\;C:\Program Files\WIDCOMM\Bluetooth Software\syswow64;D:\Java\jdk1.6.0_51\bin;D:\Softwares\apache-ant-1.7.1\bin;C:\Program Files (x86)\Windows Live\Shared;D:\fmwps6\WLSERV~1.3\server\native\win\x64\oci920_8
* To start WebLogic Server, use a username and *
* password assigned to an admin-level user. For *
* server administration, use the WebLogic Server *
* console at http:\\hostname:port\console *
starting weblogic with Java version:
java version "1.6.0_51"
Java(TM) SE Runtime Environment (build 1.6.0_51-b31)
Java HotSpot(TM) 64-Bit Server VM (build 20.51-b02, mixed mode)
Starting WLS with line:
D:\Java\JDK16~1.0_5\bin\java -client -Xms768m -Xmx768m -XX:CompileThreshold=8000 -XX:PermSize=128m -XX:MaxPermSize=512m -Dweblogic.Name=DefaultServer -Djava.security.policy=D:\fmwps6\WLSERV~1.3\server\lib\weblogic.policy -agentlib:jdwp=transport=dt_socket,server=y,address=49879 -Djavax.net.ssl.trustStore=D:\fmwps6\wlserver_10.3\server\lib\DemoTrust.jks -Dhttp.proxyHost=www-proxy.idc.oracle.com -Dhttp.proxyPort=80 "-Dhttp.nonProxyHosts=localhost|127.0.0.1|rnaguban-in" -Dhttps.proxyHost=www-proxy.idc.oracle.com -Dhttps.proxyPort=80 "-Dhttps.nonProxyHosts=localhost|127.0.0.1|rnaguban-in" -Doracle.jdeveloper.adrs=true -Dweblogic.nodemanager.ServiceEnabled=true -Duim.home=D:\fmwps6\JDEVEL~1\SYSTEM~1.93\DEFAUL~1\UIM -Dweblogic.log.Log4jLoggingEnabled_uim=true -Dlog4j.configuration_uim=loggingconfig.xml -Duim.logging.watchdog.timer=5000 -Djava.io.tmpdir=D:\fmwps6\JDEVEL~1\SYSTEM~1.93\DEFAUL~1\UIM\tmp -Dweblogic.management.discover.retries=6 -DtestConfig.home=D:\fmwps6\JDEVEL~1\SYSTEM~1.93\DEFAUL~1\UIM\testConfig -Dsun.lang.ClassLoader.allowArraySyntax=true -XX:-UseSSE42Intrinsics -DUSE_JAAS=false -Djps.policystore.hybrid.mode=false -Djps.combiner.optimize.lazyeval=true -Djps.combiner.optimize=true -Djps.authz=ACC -Xverify:none -da -Dplatform.home=D:\fmwps6\WLSERV~1.3 -Dwls.home=D:\fmwps6\WLSERV~1.3\server -Dweblogic.home=D:\fmwps6\WLSERV~1.3\server -Djps.app.credential.overwrite.allowed=true -Dcommon.components.home=D:\fmwps6\ORACLE~1 -Djrf.version=11.1.1 -Dorg.apache.commons.logging.Log=org.apache.commons.logging.impl.Jdk14Logger -Ddomain.home=D:\fmwps6\JDEVEL~1\SYSTEM~1.93\DEFAUL~1 -Djrockit.optfile=D:\fmwps6\ORACLE~1\modules\oracle.jrf_11.1.1\jrocket_optfile.txt -Doracle.server.config.dir=D:\fmwps6\JDEVEL~1\SYSTEM~1.93\DEFAUL~1\config\FMWCON~1\servers\DefaultServer -Doracle.domain.config.dir=D:\fmwps6\JDEVEL~1\SYSTEM~1.93\DEFAUL~1\config\FMWCON~1 -Digf.arisidbeans.carmlloc=D:\fmwps6\JDEVEL~1\SYSTEM~1.93\DEFAUL~1\config\FMWCON~1\carml -Digf.arisidstack.home=D:\fmwps6\JDEVEL~1\SYSTEM~1.93\DEFAUL~1\config\FMWCON~1\arisidprovider -Doracle.security.jps.config=D:\fmwps6\JDEVEL~1\SYSTEM~1.93\DEFAUL~1\config\fmwconfig\jps-config.xml -Doracle.deployed.app.dir=D:\fmwps6\JDEVEL~1\SYSTEM~1.93\DEFAUL~1\servers\DefaultServer\tmp\_WL_user -Doracle.deployed.app.ext=\- -Dweblogic.alternateTypesDirectory=D:\fmwps6\ORACLE~1\modules\oracle.ossoiap_11.1.1,D:\fmwps6\ORACLE~1\modules\oracle.oamprovider_11.1.1,D:\fmwps6\ORACLE~1\modules\oracle.jps_11.1.1 -Djava.protocol.handler.pkgs=oracle.mds.net.protocol -Dweblogic.jdbc.remoteEnabled=false -Dwsm.repository.path=D:\fmwps6\JDEVEL~1\SYSTEM~1.93\DEFAUL~1\oracle\store\gmds -Dweblogic.management.discover=true -Dwlw.iterativeDev= -Dwlw.testConsole= -Dwlw.logErrorsToConsole= -Dweblogic.ext.dirs=D:\fmwps6\patch_wls1035\profiles\default\sysext_manifest_classpath;D:\fmwps6\patch_jdev1111\profiles\default\sysext_manifest_classpath weblogic.Server
Listening for transport dt_socket at address: 49879
Debugger connected to local process.
<Aug 16, 2013 7:19:43 PM IST> <Info> <Security> <BEA-090905> <Disabling CryptoJ JCE Provider self-integrity check for better startup performance. To enable this check, specify -Dweblogic.security.allowCryptoJDefaultJCEVerification=true>
<Aug 16, 2013 7:19:43 PM IST> <Info> <Security> <BEA-090906> <Changing the default Random Number Generator in RSA CryptoJ from ECDRBG to FIPS186PRNG. To disable this change, specify -Dweblogic.security.allowCryptoJDefaultPRNG=true>
<Aug 16, 2013 7:19:44 PM IST> <Info> <WebLogicServer> <BEA-000377> <Starting WebLogic Server with Java HotSpot(TM) 64-Bit Server VM Version 20.51-b02 from Sun Microsystems Inc.>
<Aug 16, 2013 7:19:44 PM IST> <Info> <Management> <BEA-141107> <Version: WebLogic Server Temporary Patch for BUG13114768 Sat Jan 21 16:14:44 IST 2012
WebLogic Server 10.3.5.0 Fri Apr 1 20:20:06 PDT 2011 1398638 >
<Aug 16, 2013 7:19:47 PM IST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING>
<Aug 16, 2013 7:19:47 PM IST> <Info> <WorkManager> <BEA-002900> <Initializing self-tuning thread pool>
<Aug 16, 2013 7:19:47 PM IST> <Notice> <LoggingService> <BEA-320400> <The log file D:\fmwps6\jdeveloper\system11.1.1.7.40.64.93\DefaultDomain\servers\DefaultServer\logs\DefaultServer.log will be rotated. Reopen the log file if tailing has stopped. This can happen on some platforms like Windows.>
<Aug 16, 2013 7:19:47 PM IST> <Notice> <LoggingService> <BEA-320401> <The log file has been rotated to D:\fmwps6\jdeveloper\system11.1.1.7.40.64.93\DefaultDomain\servers\DefaultServer\logs\DefaultServer.log00115. Log messages will continue to be logged in D:\fmwps6\jdeveloper\system11.1.1.7.40.64.93\DefaultDomain\servers\DefaultServer\logs\DefaultServer.log.>
<Aug 16, 2013 7:19:47 PM IST> <Notice> <Log Management> <BEA-170019> <The server log file D:\fmwps6\jdeveloper\system11.1.1.7.40.64.93\DefaultDomain\servers\DefaultServer\logs\DefaultServer.log is opened. All server side log events will be written to this file.>
<Aug 16, 2013 7:19:56 PM IST> <Notice> <Security> <BEA-090082> <Security initializing using security realm myrealm.>
<Aug 16, 2013 7:20:00 PM IST> <Notice> <LoggingService> <BEA-320400> <The log file D:\fmwps6\jdeveloper\system11.1.1.7.40.64.93\DefaultDomain\servers\DefaultServer\logs\access.log will be rotated. Reopen the log file if tailing has stopped. This can happen on some platforms like Windows.>
<Aug 16, 2013 7:20:00 PM IST> <Notice> <LoggingService> <BEA-320401> <The log file has been rotated to D:\fmwps6\jdeveloper\system11.1.1.7.40.64.93\DefaultDomain\servers\DefaultServer\logs\access.log00066. Log messages will continue to be logged in D:\fmwps6\jdeveloper\system11.1.1.7.40.64.93\DefaultDomain\servers\DefaultServer\logs\access.log.>
Aug 16, 2013 7:20:05 PM oracle.ods.virtualization.engine.util.VDELogger info
INFO: Notification sent for Mapping config object reloaded
Aug 16, 2013 7:20:05 PM oracle.ods.virtualization.engine.util.VDELogger info
INFO: Notification sent for Mapping config object reloaded
<Aug 16, 2013 7:20:18 PM IST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STANDBY>
<Aug 16, 2013 7:20:18 PM IST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING>
<Aug 16, 2013 7:20:20 PM IST> <Warning> <JDBC> <BEA-001552> <The Logging Last Resource (LLR) data source InventoryTxDataSource will not function when it is a participant in a global transaction that spans multiple WebLogic Server instances because remote JDBC support is disabled. LLR will function in single-server configurations.>
<Aug 16, 2013 7:20:22 PM IST> <Warning> <JDBC> <BEA-001110> <No test table set up for pool "mds-commsRepository". Connections will not be tested.>
<Aug 16, 2013 7:20:39 PM IST> <Warning> <Security> <BEA-090668> <Ignored deployment of role "Admin" for resource "type=<url>, application=DMS Application#11.1.1.1.0, contextPath=/dms, uri=/">
<Aug 16, 2013 7:20:58 PM IST> <Warning> <J2EE> <BEA-160195> <The application version lifecycle event listener oracle.security.jps.wls.listeners.JpsAppVersionLifecycleListener is ignored because the application UIMCMWSAdapter is not versioned.>
<Aug 16, 2013 7:21:11 PM IST> <Warning> <J2EE> <BEA-160195> <The application version lifecycle event listener oracle.security.jps.wls.listeners.JpsAppVersionLifecycleListener is ignored because the application oracle.communications.inventory is not versioned.>
<TableBuilder> <_buildSchema> Metric table "webcache:request_filter_denied_stats" has no key column. It will not be collected.
<TableBuilder> <_buildSchema> Metric table "reports:Reports_Server_Information" has no key column. It will not be collected.
<TableBuilder> <_buildSchema> Metric table "reports:Reports_Server_Performance" has no key column. It will not be collected.
<TableBuilder> <_buildSchema> Metric table "reports:Reports_Server_Response" has no key column. It will not be collected.
<TableBuilder> <_buildSchema> Metric table "reports:Reports_Servlet_Response" has no key column. It will not be collected.
<TableBuilder> <_buildSchema> Metric table "reports:Remote_Bridge_Elements" has no key column. It will not be collected.
<ConfigurationUtil> <getProperties> Could not load runtime-poms.properties
<Aug 16, 2013 7:21:52 PM IST> <Error> <Net> <BEA-000903> <Failed to communicate with proxy: www-proxy.idc.oracle.com/80. Will try connection www.terracotta.org/80 now.
java.net.UnknownHostException: www-proxy.idc.oracle.com
at java.net.Inet6AddressImpl.lookupAllHostAddr(Native Method)
at java.net.InetAddress$1.lookupAllHostAddr(InetAddress.java:876)
at java.net.InetAddress.getAddressFromNameService(InetAddress.java:1229)
at java.net.InetAddress.getAllByName0(InetAddress.java:1180)
at java.net.InetAddress.getAllByName(InetAddress.java:1110)
Truncated. see log file for complete stacktrace
>
<Aug 16, 2013 7:21:53 PM IST> <Error> <Net> <BEA-000903> <Failed to communicate with proxy: www-proxy.idc.oracle.com/80. Will try connection svn.terracotta.org/80 now.
java.net.UnknownHostException: www-proxy.idc.oracle.com
at java.net.InetAddress.getAllByName0(InetAddress.java:1184)
at java.net.InetAddress.getAllByName(InetAddress.java:1110)
at java.net.InetAddress.getAllByName(InetAddress.java:1046)
at weblogic.net.http.HttpClient.openServer(HttpClient.java:309)
at weblogic.net.http.HttpClient.openServer(HttpClient.java:414)
Truncated. see log file for complete stacktrace
>
<LoggerHelper> <log> Cannot map nonserializable type "interface oracle.adf.mbean.share.config.runtime.resourcebundle.BundleListType" to Open MBean Type for mbean interface oracle.adf.mbean.share.config.runtime.resourcebundle.AdfResourceBundleConfigMXBean, attribute BundleList.
<AdfDiagnosticsJarsVersionDumpImpl> <dumpVersionInfo> Path of the jars version dump :D:\fmwps6\jdeveloper\system11.1.1.7.40.64.93\DefaultDomain\servers\DefaultServer\logs\oracle.communications.inventory-Versions.csv
<FeatureUtils> <_resolveFeatures> Ignoring feature-dependency on feature "AdfDvtCommon". No such feature exists.
Warning: Starting ADF Library jar post-deployment on WebLogic Server. Is "provider-lazy-inited" init-param missing from LibraryFilter? Ignore this warning if the ADFJspResourceProvider is not being used.
Started: ADF Library non-ADFJspResourceProvider post-deployment
Finished: ADF Library non-ADFJspResourceProvider post-deployment (millis): 223
<Aug 16, 2013 7:22:08 PM IST> <Notice> <LoggingService> <BEA-320400> <The log file D:\fmwps6\jdeveloper\system11.1.1.7.40.64.93\DefaultDomain\servers\DefaultServer\logs\DefaultDomain.log will be rotated. Reopen the log file if tailing has stopped. This can happen on some platforms like Windows.>
<Aug 16, 2013 7:22:08 PM IST> <Notice> <LoggingService> <BEA-320401> <The log file has been rotated to D:\fmwps6\jdeveloper\system11.1.1.7.40.64.93\DefaultDomain\servers\DefaultServer\logs\DefaultDomain.log00118. Log messages will continue to be logged in D:\fmwps6\jdeveloper\system11.1.1.7.40.64.93\DefaultDomain\servers\DefaultServer\logs\DefaultDomain.log.>
<Aug 16, 2013 7:22:08 PM IST> <Notice> <Log Management> <BEA-170027> <The Server has established connection with the Domain level Diagnostic Service successfully.>
<Aug 16, 2013 7:22:09 PM IST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to ADMIN>
<Aug 16, 2013 7:22:09 PM IST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RESUMING>
<Aug 16, 2013 7:22:09 PM IST> <Notice> <Server> <BEA-002613> <Channel "Default" is now listening on 14.96.8.250:7101 for protocols iiop, t3, ldap, snmp, http.>
<Aug 16, 2013 7:22:09 PM IST> <Notice> <WebLogicServer> <BEA-000331> <Started WebLogic Admin Server "DefaultServer" for domain "DefaultDomain" running in Development Mode>
<Aug 16, 2013 7:22:09 PM IST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RUNNING>
<Aug 16, 2013 7:22:09 PM IST> <Notice> <WebLogicServer> <BEA-000360> <Server started in RUNNING mode>
But it doesn't list the server while deploying the application.
I don't see the issue in my office network. But I encounter this problem when I work at my home.
Ideally it should show the following lines after server is started:
DefaultServer startup time: 195467 ms.
DefaultServer started.
This is not happening if i run the server without network.
How can I fix this problem?
Thanks
RaviI see some message about a proxy. Have you checked that you can use the proxy from you network?
If not you should turn the proxy off.
Timo -
Open port issues with Direct Print functionality
Hi, I have been fighting with HP call support about the Photosmart 7525 printer.
Originally I setup and had performed all the functions to enable both web support and WIFI.
Within an hour the printer would not respond to wireless communication, though it had its wireless indecator showing it was connected.
I was told by HP support that the issue will be resolved in March, as there will be a firmware update to fix the issue.
Now that I had the printer install the new firmware I still get the issue.
Though I found through some sniffing, that there are a number of ports enabled and open that are over and beyond print requirements.
Funny thing I can send my printer into instant lockup with all lights flashing with a simple UDP ping sniff. I would think I can do this with other new HP printers using Eprint functions. I will find HP web based printers that are open for public printing and test my theory that HP Eprinters are open to hacking and denyal of service attempts. My Hp print app on andriod list three in my area, and one is at my local Walmart. This would be cool to find this, as I am usually not the first to point such matters out.
I assume some are for Apple devices to print.
Here is my sniffing report:
Starting Nmap 6.40 ( http://nmap.org ) at 2014-03-21 07:57 Central Daylight TimeNSE: Loaded 110 scripts for scanning.NSE: Script Pre-scanning.Initiating ARP Ping Scan at 07:57Scanning 192.168.223.1 [1 port]Completed ARP Ping Scan at 07:57, 0.23s elapsed (1 total hosts)Initiating Parallel DNS resolution of 1 host. at 07:57Completed Parallel DNS resolution of 1 host. at 07:58, 16.50s elapsedInitiating SYN Stealth Scan at 07:58Scanning 192.168.223.1 [1000 ports]Discovered open port 445/tcp on 192.168.223.1Discovered open port 139/tcp on 192.168.223.1Discovered open port 80/tcp on 192.168.223.1Discovered open port 443/tcp on 192.168.223.1Discovered open port 8080/tcp on 192.168.223.1Discovered open port 9220/tcp on 192.168.223.1Discovered open port 6839/tcp on 192.168.223.1Discovered open port 631/tcp on 192.168.223.1Discovered open port 7435/tcp on 192.168.223.1Discovered open port 8089/tcp on 192.168.223.1Discovered open port 9100/tcp on 192.168.223.1Completed SYN Stealth Scan at 07:58, 1.71s elapsed (1000 total ports)Initiating UDP Scan at 07:58Scanning 192.168.223.1 [1000 ports]Discovered open port 5353/udp on 192.168.223.1Completed UDP Scan at 07:58, 1.82s elapsed (1000 total ports)Initiating Service scan at 07:58Scanning 20 services on 192.168.223.1Discovered open port 161/udp on 192.168.223.1Discovered open|filtered port 161/udp on 192.168.223.1 is actually open
Starting Nmap 6.40 ( http://nmap.org ) at 2014-03-21 07:51 Central Daylight TimeNmap scan report for 192.168.223.1Host is up (0.0025s latency).Not shown: 93 closed portsPORT STATE SERVICE VERSION80/tcp open http HP Photosmart 7520 series printer http config (Serial TH3AS711XZ05YZ)139/tcp open tcpwrapped443/tcp open ssl/http HP Photosmart 7520 series printer http config (Serial TH3AS711XZ05YZ)445/tcp open netbios-ssn631/tcp open http HP Photosmart 7520 series printer http config (Serial TH3AS711XZ05YZ)8080/tcp open http HP Photosmart 7520 series printer http config (Serial TH3AS711XZ05YZ)9100/tcp open jetdirect?MAC Address: A03:C1:BD:C8:34 (Unknown)Device type: printer|general purposeRunning: HP embedded, Wind River VxWorksOS CPE: cpe:/h:hp:laserjet_cm1415fnw cpe:/h:hp:laserjet_cp1525nw cpe:/h:hp:laserjet_1536dnf cpe:/o:windriver:vxworksOS details: HP LaserJet CM1415fnw, CP1525nw, or 1536dnf printer, VxWorksNetwork Distance: 1 hopService Info: Device: printer; CPE: cpe:/h:hphotosmart_7520OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .Nmap done: 1 IP address (1 host up) scanned in 34.11 secondsOK now I am able to run a full scan on TCP ports without causing a lock up of the printer.
I found that having the printer connect to a router that has been setup to use channel 5, 6 or 7 will cause port scanning issues with the printer.
It is obvious that there are 18 ports that are seen as open, whether they are used or not. Two of which are active but have no service connected to them. Some are just dead like port 25, but over half are active enough to recieve data and lock network connectivity within the printer.
As the firmware states some other laser jets may be affected depending on how the configuration can be set.
I moved my routers channel to channel 1 as it is the only other option I have in a highly congested location. It is not as good as channel 6, but the printer seems to have channel 6 locked in for direct printing.
Here is the latest full scan with UDP enabled, it is the furthest and most complete scan I am able to complete, with UDP ports enabled. The TCP port scan has a bit more and I have placed a simple list below the information given here:
Starting Nmap 6.40 ( http://nmap.org ) at 2014-03-21 13:27 Central Daylight Time
NSE: Loaded 110 scripts for scanning.
NSE: Script Pre-scanning.
Initiating ARP Ping Scan at 13:27
Scanning 192.168.1.211 [1 port]
Completed ARP Ping Scan at 13:27, 0.44s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 13:27
Completed Parallel DNS resolution of 1 host. at 13:27, 0.03s elapsed
Initiating SYN Stealth Scan at 13:27
Scanning 192.168.1.211 [1000 ports]
Discovered open port 443/tcp on 192.168.1.211
Discovered open port 80/tcp on 192.168.1.211
Discovered open port 139/tcp on 192.168.1.211
Discovered open port 8080/tcp on 192.168.1.211
Discovered open port 445/tcp on 192.168.1.211
Discovered open port 631/tcp on 192.168.1.211
Discovered open port 9100/tcp on 192.168.1.211
Discovered open port 7435/tcp on 192.168.1.211
Discovered open port 9220/tcp on 192.168.1.211
Discovered open port 6839/tcp on 192.168.1.211
Completed SYN Stealth Scan at 13:27, 5.25s elapsed (1000 total ports)
Initiating UDP Scan at 13:27
Scanning 192.168.1.211 [1000 ports]
Discovered open port 137/udp on 192.168.1.211
Completed UDP Scan at 13:27, 4.46s elapsed (1000 total ports)
Initiating Service scan at 13:27
Scanning 16 services on 192.168.1.211
Discovered open port 161/udp on 192.168.1.211
Discovered open|filtered port 161/udp on 192.168.1.211 is actually open
Completed Service scan at 13:29, 82.51s elapsed (17 services on 1 host)
Initiating OS detection (try #1) against 192.168.1.211
NSE: Script scanning 192.168.1.211.
Initiating NSE at 13:29
Completed NSE at 13:30, 82.29s elapsed
Nmap scan report for 192.168.1.211
Host is up (0.023s latency).
Not shown: 1983 closed ports
PORT STATE SERVICE VERSION
80/tcp open http HP Photosmart 7520 series printer http config (Serial TH3AS711XZ05YZ)
|_http-favicon: Unknown favicon MD5: 76C6E492CB8CC73A2A50D62176F205C9
| http-methods: GET POST PUT DELETE
| Potentially risky methods: PUT DELETE
|_See http://nmap.org/nsedoc/scripts/http-methods.html
|_http-title: Site doesn't have a title (text/html).
139/tcp open tcpwrapped
443/tcp open ssl/http HP Photosmart 7520 series printer http config (Serial TH3AS711XZ05YZ)
|_http-favicon: Unknown favicon MD5: 76C6E492CB8CC73A2A50D62176F205C9
| http-methods: GET POST PUT DELETE
| Potentially risky methods: PUT DELETE
|_See http://nmap.org/nsedoc/scripts/http-methods.html
|_http-title: Site doesn't have a title (text/html).
| ssl-cert: Subject: commonName=HPPS7525/organizationName=HP/stateOrProvinceName=Washington/countryName=US
| Issuer: commonName=HPPS7525/organizationName=HP/stateOrProvinceName=Washington/countryName=US
| Public Key type: rsa
| Public Key bits: 1024
| Not valid before: 2014-02-25T10:12:24+00:00
| Not valid after: 2034-02-20T10:12:24+00:00
| MD5: 9144 ca3b 557e 09cc aba0 8387 2732 2375
|_SHA-1: a6b2 95c0 b72a 7201 578c 32de 662a e6fe b082 48ca
|_ssl-date: 2014-03-21T13:30:09+00:00; -4h59m12s from local time.
445/tcp open netbios-ssn
631/tcp open http HP Photosmart 7520 series printer http config (Serial TH3AS711XZ05YZ)
| http-methods: GET POST PUT DELETE
| Potentially risky methods: PUT DELETE
|_See http://nmap.org/nsedoc/scripts/http-methods.html
6839/tcp open tcpwrapped
7435/tcp open tcpwrapped
8080/tcp open http HP Photosmart 7520 series printer http config (Serial TH3AS711XZ05YZ)
|_http-favicon: Unknown favicon MD5: 76C6E492CB8CC73A2A50D62176F205C9
| http-methods: GET POST PUT DELETE
| Potentially risky methods: PUT DELETE
|_See http://nmap.org/nsedoc/scripts/http-methods.html
|_http-title: Site doesn't have a title (text/html).
9100/tcp open jetdirect?
9220/tcp open hp-gsg HP Generic Scan Gateway 1.0
137/udp open netbios-ns Samba nmbd (workgroup: HPPS7525)
138/udp open|filtered netbios-dgm
161/udp open snmp SNMPv1 server (public)
| snmp-hh3c-logins:
|_ baseoid: 1.3.6.1.4.1.25506.2.12.1.1.1
| snmp-interfaces:
| Wifi0
| IP address: 192.168.1.211 Netmask: 255.255.255.0
| MAC address: a0:d3:c1:bd:c8:32 (Unknown)
| Type: ethernetCsmacd Speed: 10 Mbps
| Status: up
|_ Traffic stats: 6.16 Mb sent, 3.43 Mb received
| snmp-netstat:
| TCP 0.0.0.0:7435 0.0.0.0:0
| TCP 192.168.1.211:56076 15.201.145.52:5222
| UDP 0.0.0.0:3702 *:*
| UDP 127.0.0.1:666 *:*
|_ UDP 192.168.223.1:67 *:*
| snmp-sysdescr: HP ETHERNET MULTI-ENVIRONMENT
|_ System uptime: 0 days, 3:34:23.28 (1286328 timeticks)
| snmp-win32-shares:
|_ baseoid: 1.3.6.1.4.1.77.1.2.27
1022/udp open|filtered exp2
1023/udp open|filtered unknown
3702/udp open|filtered ws-discovery
5355/udp open|filtered llmnr
MAC Address: A03:C1:BD:C8:32 (Unknown)
Device type: general purpose
Running: Wind River VxWorks
OS CPE: cpe:/o:windriver:vxworks
OS details: VxWorks
Uptime guess: 0.150 days (since Fri Mar 21 09:55:04 2014)
Network Distance: 1 hop
TCP Sequence Prediction: Difficulty=255 (Good luck!)
IP ID Sequence Generation: Busy server or unknown class
Service Info: Hosts: HPA0D3C1BDC832, HPPS7525; Device: printer; CPE: cpe:/h:hphotosmart_7520
Host script results:
| nbstat:
| NetBIOS name: HPA0D3C1BDC832, NetBIOS user: <unknown>, NetBIOS MAC: <unknown>
| Names
| HPA0D3C1BDC832<00> Flags: <unique><active><permanent>
| MSHOME<00> Flags: <group><active><permanent>
| HPA0D3C1BDC832<20> Flags: <unique><active><permanent>
| HPPS7525<00> Flags: <unique><active><permanent>
|_ HPPS7525<20> Flags: <unique><active><permanent>
| smb-security-mode:
| Account that was used for smb scripts: guest
| User-level authentication
| SMB Security: Challenge/response passwords supported
|_ Message signing disabled (dangerous, but default)
TRACEROUTE
HOP RTT ADDRESS
1 23.26 ms 192.168.1.211
NSE: Script Post-scanning.
Read data files from: F:\Progs\Nmap
OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 180.90 seconds
Raw packets sent: 2030 (74.829KB) | Rcvd: 2921 (149.377KB)
+++++++++++++++++++++++++++++++++++++++++++++++++++++===
Full TCP port scan without UDP scanning of all ports, showing up as open... * designates open and active.
192.168.223.1Discovered open port 25/tcp on
*192.168.223.1Discovered open port 80/tcp on
*192.168.223.1Discovered open port 110/tcp on
*192.168.223.1Discovered open port 119/tcp on
*192.168.223.1Discovered open port 139/tcp on
192.168.223.1Discovered open port 143/tcp on
*192.168.223.1Discovered open port 443/tcp on
*192.168.223.1Discovered open port 445/tcp on
192.168.223.1Discovered open port 465/tcp on
192.168.223.1Discovered open port 563/tcp on
192.168.223.1Discovered open port 587/tcp on
*192.168.223.1Discovered open port 631/tcp on
192.168.223.1Discovered open port 993/tcp on
192.168.223.1Discovered open port 995/tcp on
*192.168.223.1Discovered open port 7435/tcp on
*192.168.223.1Discovered open port 6839/tcp on
*192.168.223.1Discovered open port 8080/tcp on
192.168.223.1Discovered open port 8089/tcp on
*192.168.223.1Discovered open port 9100/tcp on
*192.168.223.1Discovered open port 9220/tcp on -
Discovering Network Devices with SNMP not working
I have implemented SCOM 2012 SP1 CU5 on Server 2008 R2 with SQL 2008 R2 all installed on the same VM running side by side with SCOM 2007 R2 v 6.1.7221.0. I have almost fully decommissioned SCOM 2007 and all that remains on it is 2 network devices that
I cannot discover with SCOM 2012 using SNMP, no matter what I try. If I just use ICMP the discovery works. I have checked both the devices and SNMP is enabled and if I run this snmpwalk command on both devices I get a response;
c:\Support\SNMP Walk>SnmpWalk.exe -r:10.X.X.XX -v:1 -c:"public" -os:.1.3.6.1.
2.1.1 -op:.1.3.6.1.2.1.2
SnmpWalk v1.01 - Copyright (C) 2009 SnmpSoft Company
[ More useful network tools on http://www.snmpsoft.com ]
OID=.1.3.6.1.2.1.1.1.0, Type=OctetString, Value=NetMan 100 plus
OID=.1.3.6.1.2.1.1.2.0, Type=OID, Value=1.3.6.1.4.1.5491.6
OID=.1.3.6.1.2.1.1.3.0, Type=TimeTicks, Value=5 days, 1:58:58.04
OID=.1.3.6.1.2.1.1.4.0, Type=OctetString, Value=SystemsEngineer
OID=.1.3.6.1.2.1.1.5.0, Type=OctetString, Value=MARMUPS
OID=.1.3.6.1.2.1.1.6.0, Type=OctetString, Value=FXXXXX
OID=.1.3.6.1.2.1.1.7.0, Type=Integer, Value=0
Total: 7
c:\Support\SNMP Walk>SnmpWalk.exe -r:10.X.X.1 -v:1 -c:"scom05" -os:.1.3.6.1.2.1
.1 -op:.1.3.6.1.2.1.2
SnmpWalk v1.01 - Copyright (C) 2009 SnmpSoft Company
[ More useful network tools on http://www.snmpsoft.com ]
OID=.1.3.6.1.2.1.1.1.0, Type=OctetString, Value=SSG-140 version 6.3.0r2.0 (SN: 0
185112006000325, Firewall+VPN)
OID=.1.3.6.1.2.1.1.2.0, Type=OID, Value=1.3.6.1.4.1.3224.1.52
OID=.1.3.6.1.2.1.1.3.0, Type=TimeTicks, Value=359 days, 2:20:16.00
OID=.1.3.6.1.2.1.1.4.0, Type=OctetString, Value=Network
OID=.1.3.6.1.2.1.1.5.0, Type=OctetString, Value=XXXXXX
OID=.1.3.6.1.2.1.1.6.0, Type=OctetString, Value=FXXXXX
OID=.1.3.6.1.2.1.1.7.0, Type=Integer, Value=72
Total: 7
The first device is a Marms UPS which has had its firmware upgraded, which was discovered using SNMP in SCOM 2007 and the second device is a Juniper SSG-140 Firewall, again this is discovered using SNMP in SCOM 2007.
I believe that I have setup SNMP correctly on SCOM 2012 because I have 28 other networks devices discovered using SNMP using an explicit discovery, some of these being newer Marms UPS's, emerson air conditioners, netapp SAN etc.
I have added any and all accepted community names in the SNMP service properties on SCOM 2012 and enabled accept SNMP packets from any host.
Does anyone have any information that they could forward to me or point in the right direction to troubleshoot this issue for eg run some snmp get commands and capture / filter traffic with wireshark, what do I look for? Any other logs to check besides the
obvious ones? Any known issues with SCOM 2012 SP1 and SNMP, should I upgrade to R2? It just seems that some network devices get discovered with ease and others do not and I am running out of ideas. Thank you all in advance.Patrick, thank you for your reply.
Yes the snmpwalk command is run from the new SCOM 2012 server which has the discovery rule on it.
I don't have any pending network devices, its blank.
Could there be an issue with my discovery rule? I have noticed that each time I make a change to, for eg, the access mode and change this from ICMP to ICMP/SNMP, save it, run it, it doesn't seem to update the said network devices access mode's in network
devices, it just stays on ICMP. Do I have to manually remove the network devices which have been discovered before making any changes to the discovery rule and running it which I have done? They don't seem to appear in network devices pending management either? -
Experiencing Issue with Beasvc.exe and Win2K on WLS6.0SP2
I'm running into an issue with my cluster when I run my nodes as a background service
on Win2K Advanced Server. Nodes are dropping out of the cluster left and right.
There is no trace even in verbose mode that is telling me why my nodes are failing.
All I can see is a reference in the event viewer are the messages below...
"The WebWORKS1 service terminated unexpectedly. It has done this 1 time(s).
The following corrective action will be taken in 0 milliseconds: No action. "
"Compaq Foundation Agent: The Compaq Management Agents have detected a process
exception: PID: 2344 - DESC: beasvc
[SNMP TRAP: 11004 in CPQHOST.MIB]"
Any idea as to what is going on? Please note that I am running JRE 1.3.0 (hotspot
client).
SteveYes we all are. If you bring up the task manager you can kill
appleMobileDevicehelper.exe
appleMobileDeviceService.exe
APSDaemon.exe
when you do not have your ipad/pod connected. this will reduce some of whaqt I think is a memory leak in 10.5
when you connect an ipad and restart itunes those services will re load and you will be stuck with th eissue. I would go into the ipad/pod and turn off auto synching this will help a little as well.
we just need a new release that will address these issues -
Would like to monitor teaming with snmp
Hello,
I would like to use snmp to monitor the state of teaming/vibe. I can't seem to find much information on the subject in general and none specifically to do with teaming/vibe. Does teaming/vibe have an OID? If not, is there some way I can give it one? It is a java process and I can monitor a process such as java with snmp but I can't differentiate between different java processes such as indexServer and icecore. Any information or links would be appreciated.
Thanks!
Toney.toneyc,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://forums.novell.com/ -
Issue with cisco ONS 15310. Slot with Ethernet ports, designed for bridging.
Hi, guys. I’ve got an issue with cisco ONS 15310 sdh optical network. I’ve got a special slot with Ethernet ports, designed for bridging. Assume, we’ve got to multiplexers, named A and B with ports A0 and B0 respectively. The ios console of these slots says, the configuration is as follows:
no ip address set on these ports
Ports are administratively up
Auto mdix
Bridge groups are the same on these ports.
Dot1q tunnel.
I’m trying to monitor a device with an ip-address connected to port B0. It answers ping if I connect the notebook directly to a device. But if I connect the notebook to port A0 and ping the device pluged in port B0 through the optical network, it doesn’t answer. I tried connections with straight and cross cable.
Guys, who set the network said, it should work as a point to point bridge with no extra configuration. But it doesn’t. I used wireshark sniffer to lookup what’s happening on port A0. All I see is cdp-s from port A0 and self-announcements of the notebook.
Any suggestions? Thank you in advance.B
Building configuration...
Current configuration : 3712 bytes
! Last configuration change at
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
hostname B
boot-start-marker
boot-end-marker
enable password -
clock timezone -
ip subnet-zero
no ip domain-lookup
no mpls traffic-eng auto-bw timers frequency 0
bridge 100 protocol ieee
bridge 140 protocol ieee
bridge 141 protocol ieee
bridge 142 protocol ieee
bridge 143 protocol ieee
bridge 144 protocol ieee
interface Loopback0
ip address 192.x.0.x 255.255.255.255
interface FastEthernet0
description -
no ip address
mode dot1q-tunnel
bridge-group 140
bridge-group 140 spanning-disabled
interface FastEthernet1
description --- B0 ---
no ip address
mode dot1q-tunnel
bridge-group 141
bridge-group 141 spanning-disabled
interface FastEthernet2
description -
no ip address
mode dot1q-tunnel
bridge-group 142
bridge-group 142 spanning-disabled
interface FastEthernet3
description -
no ip address
mode dot1q-tunnel
bridge-group 143
bridge-group 143 spanning-disabled
interface FastEthernet4
description -
no ip address
mode dot1q-tunnel
bridge-group 144
bridge-group 144 spanning-disabled
interface FastEthernet5
no ip address
shutdown
interface FastEthernet6
no ip address
shutdown
interface FastEthernet7
description -
no ip address
shutdown
mode dot1q-tunnel
bridge-group 100
bridge-group 100 spanning-disabled
interface POS0
description -
no ip address
crc 32
interface POS0.1
encapsulation dot1Q 141
no snmp trap link-status
bridge-group 141
interface POS0.2
encapsulation dot1Q 142
no snmp trap link-status
bridge-group 142
interface POS0.3
encapsulation dot1Q 143
no snmp trap link-status
bridge-group 143
interface POS0.4
encapsulation dot1Q 144
no snmp trap link-status
bridge-group 144
interface POS0.5
description -
encapsulation dot1Q 140
no snmp trap link-status
bridge-group 140
interface POS1
no ip address
crc 32
interface POS1.1
encapsulation dot1Q 100
no snmp trap link-status
bridge-group 100
router ospf 100
log-adjacency-changes
network 192.x.0.x 0.0.0.0 area 0
ip default-gateway [x.x.x.x]
ip classless
no ip http server
snmp-server community public RO
snmp-server ifindex persist
snmp-server trap link ietf
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps cpu threshold
snmp-server enable traps entity
snmp-server enable traps syslog
snmp-server enable traps hsrp
snmp-server enable traps config-copy
snmp-server enable traps bridge
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps ospf retransmit
snmp-server enable traps ospf lsa
snmp-server enable traps ospf cisco-specific state-change
snmp-server enable traps ospf cisco-specific errors
snmp-server enable traps ospf cisco-specific retransmit
snmp-server enable traps ospf cisco-specific lsa
snmp-server enable traps bgp
snmp-server enable traps pim neighbor-change rp-mapping-change invalid-pim-message
snmp-server enable traps ipmulticast
snmp-server enable traps rtr
snmp-server enable traps mpls traffic-eng
snmp-server enable traps mpls ldp
snmp-server enable traps rsvp
snmp-server enable traps l2tun session
snmp-server enable traps mpls vpn
snmp-server host x.x.x.x public
control-plane
line con 0
line vty 0 4
password -
logging synchronous level 4
login
end -
Mysqlnd issues with php5, compile questions...
So, I am getting an error of "Not connected : mysqlnd cannot connect to MySQL 4.1+ using old authentication" when I try to connect Wordpress, locally, to a remote server because of php5 and snow leopard. I as told by my host to recompile php on my Macbook and running into all sorts of issues (config errors)... does anyone have a configure script I can use that will not run mysql though mysqlnd?
I fixed the bug per http://bugs.php.net/bug.php?id=49267
and
I complied php-5.3.1RC1 with
./configure '--prefix=/usr' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--disable-dependency-tracking' '--sysconfdir=/private/etc' '--with-apxs2=/usr/sbin/apxs' '--enable-cli' '--with-config-file-path=/etc' '--with-libxml-dir=/usr' '--with-openssl=/usr' '--with-kerberos=/usr' '--with-zlib=/usr' '--enable-bcmath' '--with-bz2=/usr' '--enable-calendar' '--with-curl=/usr' '--enable-exif' '--enable-ftp' '--with-ldap=/usr' '--with-ldap-sasl=/usr' '--enable-mbstring' '--enable-mbregex' '--with-mysql=/usr/local/mysql' '--with-mysql-sock=/var/mysql' '--with-mysqli=/usr/local/mysql/bin/mysql_config' '--with-iodbc=/usr' '--enable-shmop' '--with-snmp=/usr' '--enable-soap' '--enable-sockets' '--enable-sysvmsg' '--enable-sysvsem' '--enable-sysvshm' '--with-xmlrpc' '--with-iconv-dir=/usr' '--with-xsl=/usr' -
Issue with applying Event Action filters
Dear friends,
A general question on Event Action filters. There is a signature with sig ID 6257.
The following is the event action filter configuration:
service event-action-rules rules0
filters edit DHCP
signature-id-range 6257
subsignature-id-range 0
attacker-address-range 172.20.20.10,172.20.20.11
actions-to-remove produce-alert
filter-item-status Enabled
stop-on-match True
os-relevance not-relevant
exit
Even though a valid DHCP offer is being given by the DHCP server, this alert is getting fired.
We have even excluded the IP's of the DHCP Servers - 172.20.20.10 and 172.20.20.11 from the Attacker Address range parameter in the signature but still this alert gets fired.
evIdsAlert: eventId=1204853641442197329 vendor=Cisco severity=low
originator:
hostId: IDSM2Core1
appName: sensorApp
appInstanceId: 592
time: April 7, 2008 5:46:48 AM UTC offset=180 timeZone=1
signature: description=DHCP Client DoS id=6257 version=S316
subsigId: 0
sigDetails: Server Offered a Malicious IP Address
marsCategory: DoS/Host
interfaceGroup: vs0
vlan: 200
participants:
attacker:
addr: 172.20.20.10 locality=OUT
port: 0
target:
addr: 10.1.1.78 locality=OUT
port: 0
os: idSource=unknown type=unknown relevance=unknown
summary: 4 final=true initialAlert=1204853641442197267 summaryType=Regular
alertDetails: Regular Summary: 4 events this interval ;
riskRatingValue: 25 targetValueRating=medium
threatRatingValue: 25
interface: ge0_7
protocol: udp
Looking forward to your kind help and advise on this.
Thanks a lot
GautamSome things to check:
1) Is the filter in the active list? Filters can be enabled or disabled, but they can also be active ro inactive. You've only show a part of your configuration so I can't tell if the filter is part of the active list.
2) Are there actions other than produce-alert for the signature? Or is an event action override adding other actions?
Produce-alert is not the only action that can cause an alert to be generated. The produce-verbose-alert, request-snmp-trap, log-attacker-packets, log-victim-packet, and log-pair-packets will also cause alerts to be generated. Modify the filter to also remove these actions.
3) The alert you've shown is a Summary Alert. There may be an issue with Summarization and the Filters. Try modifying the signature to set it to FireAll with no summarization.
4) If you have multiple filters then check the order of the filters. If the event is matching an earlier filter where the stop-on-match is set to True, then it will not check the event against this filter. Either move this filter up higher in the filter list, or change earlier filters to be "stop-on-match false".
5) Also check to see if you are running the latest 5.1(7) or 6.0(4) Service pack. If running earlier 5.1 or 6.0 versions you might be hitting a bug that could have already been fixed.
If none of the above help, then contact the TAC. It could be that you may have foung a bug that the sensor development team is unaware of.
To help in identifying the problem take a packet capture of the packets from 172.20.20.10 for several minutes around the time when the sensor is generating these alerts.
This way the team can both check if the signature is firing correctly, and if the filters are working correctly for that signature.
Maybe you are looking for
-
Problems to create data control in JDeveloper 11g
Hi everybody , I´m having problems to use Data Control in Jdev 11 , I create an jpa , and with my entities I create the data control component , but when I try to create a JSF page I can´t use data control, where is data control component palette ?
-
HT1551 No HDMI picture Unless I power Apple TV off/on
Just bought Apple TV and it works fine, however if I switch my TV over to a differnt HDMI channel, say my PVR on HDMI1 and then switch back to Apple TV on HDMI2 I get a "No Signal" message. The only was I can get Apple TV to display again is to power
-
Rename State Service Database in SharePoint 2010
As the title says, I want to rename/change database for State Service Application. I did some experiments wit it as suggested by others but I think I somehow managed to broken my service. I can SharePoint Products Configuration again and I got anothe
-
Has anyone here tried Pandora One?
http://www.pcmag.com/article2/0,2817,2347419,00.asp First of all: does it work on the Touch? Even though I love how the free version of Pandora sounds via wifi, on my Touch, I suspect that it might be audibly better for the One service. If any of you
-
Setting PMF parameters with JCA
Hi, I am trying to use Kodo with JCA (in Jboss 3.2/WebSphere 5), but I don't see how to communicate properties to the PMF. For instance, how do I tell it which database driver to use? How do I ask for non-transactional reads or set other options? I d