Quick detection of failed tcp connection

I apologize for asking this question, sense I know variants of it are asked often, but none of the standard solutions I read about seem to apply to my situation.
I have an application acting as a server for a client application written by another organization. Most of our communication is done via UDP, but the client application insists on a TCP connection which usually hangs out unused. I need to be able to detect when this TCP connection goes down. Sense I am only writing the server I can't implement a heartbeat or similar method which requires server and client to work together. Likewise doing a read and waiting for a -1 doesn’t work, as the reads seem to time out and fail even when the network is not down due to the client not sending anything to be read across the TCP connection.
So far the best solution I have come up with is to intermittently write a 0 byte when I believe there is a network error (i.e. when our udp communication stops) and capture an exception when this fails. This method does work, but I have to wait for the exception which can take 2-3 minutes from when I kill the network to occur. I would prefer for the exception to occur sooner then that if possible. I've tried setting the SO_TIMOUT bit, but sense write is usually non-blocking this doesn’t have any affect. Is there some other method of controlling how long it takes for the tcp socket to fail if it doesn’t get an ack back?
I have also thought of other methods of doing this, including always killing the TCP socket the moment UDP fails, or have my serverSocket listen for and accept any reconnect attempts, then killing the old socket once the new one is established. However both methods seem like imperfect workarounds, I would rather be able to use the absence of ACKs to detect that the TCP has stopped working.
And allow me to offer a preemptive thank you for your help.

Is there some other method of controlling how long it takes for the tcp socket to fail if it doesn’t get an ack back?The traditional Berkeley socket API offers no way to adjust the timeout.
Some operating systems (perhaps even most major ones) have system-global settings for it - registry, /dev/somemagicname, ndd(1), etc. Google for something like windows adjust tcp timeout or solaris modify tcp retransmission or some such. Be aware that you would be setting a parameter that will affect all programs running on that system. Mostly I would just accept the 2-minute timeout; that's just the way things are.

Similar Messages

  • JMS detection of failed network connection

    I have a JMS topic that has a number of consumers, each of which is on a different machine. Messages are being sent on the topic at a low enough rate that the consumers are usually able to handle them immediately. If I look at the monitor screen (on admin console) for JMS, I see that I never have more than one or 2 messages on the server; they are consumed just about immediately, and the high water mark for the topic is 1 or 2.
    Part of our system robustness testing is disconnecting the network from one of the machines hosting a consumer. When I do that and monitor the number of JMS messages on the server, I see the number of messages climb. My assumption here is that the server keeps track of its consumers, and it is holding on to messages until it can deliver them to the consumer. At some point, usually, the number of consumers connected to the topic is reduced by 1 and the number of messages on the server is reduced down to a low number. I am assuming that the server has detected that the consumer is unreachable and it no longer holds onto the messages for delivery to that consumer.
    First, are my assumptions accurate?
    Second, if so, how can I configure how quickly the server concludes that the client is unreachable and stops holding messages? What I want to do is limit the number of messages in a topic using a quota, and I need to know how to set a reasonable size, given a message production rate. For instance, is there a way to say how long the server should try to deliver messages to a consumer before giving up on it?

    Hi,
    I'm assuming the subscribers are non-durable, in which case I think your assumptions are correct - it takes some time to detect a network disconnect.
    Its possible to tune how quickly WebLogic tears down stuck network connections, but this is generally not recommended (I think the configurables are on the "Network Channel").
    Some options:
    You can programmatically set a message expiration time using the standard JMS API (javax.jms.MessageProducer.setTimeToLive() are as a parameter to publish()), or, more conveniently, you can configure an expiration time override on the WebLogic topic itself.
    You can configure a quota on the destination, but this would cause new publish attempts to fail with a resource allocation exception once the quota condition is reached (rather than cause the oldest messages to be dropped). That said, it is recommended best practice to always configure quotas in order to prevent the possibility of out-of-memory errors, and there are some flow-control options to help (see the JMS section of the Performance & Tuning guide in the edocs). You might also wish to tune JMS paging.
    Regards,
    Tom

  • TCP connectivity check failed for subnet

    hi
    im trying to add a node to my 11.2 grid infrastructure and the cluster verification is returning error
    Check: TCP connectivity of subnet "152.15.123.0"
    Source Destination Connected?
    inode2:127.0.0.1 inode2:152.15.123.4 failed
    Result: TCP connectivity check failed for subnet "152.15.123.0"
    this happens when i run cluvfy with pre nodeadd option, there is no other failure ...
    any idea what it could be ?

    Hello Buddy,
    Please note that inode2:127.0.0.1 is using loopback IP, please check your network configuration and retry the cluvfy operation.
    Cheers,
    Rodrigo Mufalani
    www.mufalani.com.br/blog

  • RAC - Cluvfy - TCP connectivity check failed for subnet

    Hi ...this is Oracle RAC 10.2.0.4.0 .. has anyone witnessed this check failure or is able to comment on how I should debug the same
    ./runcluvfy.sh stage -post hwos -n all -verbose
    Check: TCP connectivity of subnet "172.30.182.0"
    Source Destination Connected?
    sekiazu0230:172.30.182.67 sekiazu0231:172.30.182.68 failed
    sekiazu0230:172.30.182.67 sekiazu0231:172.30.182.68 failed
    Result: TCP connectivity check failed for subnet "172.30.182.0"
    Interface information for node "sekiazu0230"
    Name IP Address Subnet Gateway Def. Gateway HW Address MTU
    en0 172.30.182.67 172.30.182.0 172.30.182.67 172.30.182.1 1E:40:3D:1C:96:02 1500
    en0 172.30.182.67 172.30.182.0 172.30.182.67 172.30.182.1 1E:40:3D:1C:96:02 1500 ===> Duplicated ?
    en1 172.30.190.48 172.30.190.0 172.30.190.48 172.30.182.1 1E:40:3D:1C:96:03 1500
    en2 10.252.34.9 10.252.34.0 10.252.34.9 172.30.182.1 1E:40:3D:1C:96:04 65390
    Thank you for all feedback
    Steve

    Hello Buddy,
    Please note that inode2:127.0.0.1 is using loopback IP, please check your network configuration and retry the cluvfy operation.
    Cheers,
    Rodrigo Mufalani
    www.mufalani.com.br/blog

  • Mail server: TCP connection failed

    Hi,
    I'm hosting my own mail server on my SnowLeopard server. I've got an Internet Domain Name (cinema-voiron.fr) and a fix IP address. The router which manages my internet connection redirects incoming smtp request to my server using NAT (port 25 opened on my server and on my public IP)
    I successfully receive mails from most of people excepts for those with an mail address which is [email protected] Looking in the mail log file, I did not find any mail sent from these addresses. Using tcpdump on my server, I discovered that it seems that the TCP connection between my mail server (passrlminisrv) and the remote smtp server fails.
    22:16:25.978773 IP smtp10.smtpout.orange.fr.41183 > passrlminisrv.cinema-voiron.fr.smtp: Flags [S], seq 105066692, win 5840, options [mss 1380,sackOK,TS val 2993558281 ecr 0,nop,wscale 8], length 0
    22:16:28.978262 IP smtp10.smtpout.orange.fr.41183 > passrlminisrv.cinema-voiron.fr.smtp: Flags [S], seq 105066692, win 5840, options [mss 1380,sackOK,TS val 2993561281 ecr 0,nop,wscale 8], length 0
    22:16:34.977258 IP smtp10.smtpout.orange.fr.41183 > passrlminisrv.cinema-voiron.fr.smtp: Flags [S], seq 105066692, win 5840, options [mss 1380,sackOK,TS val 2993567281 ecr 0,nop,wscale 8], length 0
    22:16:41.011109 IP passrlminisrv.cinema-voiron.fr.smtp > smtp10.smtpout.orange.fr.41183: Flags [S.], seq 1934215990, ack 105066693, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 537443811 ecr 2993567281,sackOK,eol], length 0
    22:16:41.051125 IP smtp10.smtpout.orange.fr.41183 > passrlminisrv.cinema-voiron.fr.smtp: Flags [R], seq 105066693, win 0, length 0
    Any idea of the root cause? Could it be an issue with my DNS configuration or is it related with my own smtp server?
    Thank you in advance for your help
    Xavier

    Fixed it. The root cause is the router layer of my internet modem which is not managing properly TCP windows scaling. I created a new virtual interface on my server on the same subnet of my modem to bypass the routing layer and it works.
    xavier

  • Gatherer\CSS connector failed to connect to CSS net.tcp

    Hi,
    Hope someone can help me out here. Have SharePoint 2013 running fine and has been for a while. Recently have been getting Event ID 1400 SharePoint server search 'Gatherer\CSS connector failed to connect to CSS net.tcp //servername/C7A30B. If I restart the
    server then all runs fine again but within a day it starts coming up with the same warning. The event ID is followed by Event id 2580 and 2581. Any help would be most appreciated.

    Hi alfatec,
    It should be related to the search service account permission issue, please try the following steps on your search servers which are running the "Search Host Controller Service", then check results again.
    1. "Start" -> "Administrative Tools" -> "Local Security Policy" (or run: Secpol.msc).
    2. Expand "Local Policies".
    3. Click on "User rights assignment".
    4. Make sure that the search service account has the following privileges.
    "Replace a process level token"
    "Adjust memory quotas for a process"
    "Impersonate a client after authentication"
    "Log on as a service"
    (5) Run gpupdate /force
    Thanks
    Daniel Yang
    TechNet Community Support

  • Windows XP doesnt  detect broken TCP connection

    Hi Guys,
    I have a client and a server. When they are both on a linux or both on a Windows machines there is no problem.
    When the server is on linux and the client is on Windows XP, when the server goes down, the client does not recieve a SocketException.Connection Reset like it should.
    It works fine otherwise, does anyone know why Windows cant see the TCP connection breaking if the server is on linux?

    Java's platform independence cannot shield you from all variations in the implementation of the TCP/IP stack in the underlying operating system.
    If you need to do special tricks for different operating systems chances are you are doing something in a non-optimal way. For the vast majority of programmers TCP/IP "Just Works". You open your sockets, do I/O on them, eventually close them.
    If you write into a socket whose peer has done receive shutdown you eventually get an IOException (I'll guesstimate within one or three minutes absolute worst case). If you don't get the IOException then likely your program has a bug, such as ignoring exceptions. Far lesser likelihood is OS bug.
    When you say "server goes down" do you mean the OS goes down (as in unplug the network connector), or the OS is shut down with a "shutdown" command, or the program is closed? TCP/IP will behave differently if the remote OS is forcefully brought down vs. the program exits and OS remains running. A "shutdown" command may exhibit either behaviour, depending on OS implementation and random timing effects.

  • Hyper-V Remote Admin on a Domain - Failed to connect to root\cimv2

    I'm trying to configure our Hyper-V server so that a user on our domain has administrative control.  Our Hyper-V server is on the domain running 2008 R2 (named SERVER85 below), and the client is on Win 7 Ent x64 (named DEV03 below, username accuraty\jkessel).
    In the output below you can see that it appears we might have a problem with this user's access to the WMI path root\CIMv2, but if I pull up the advanced security settings for that node in WMI, I see:
    Name: Justin Kessel ([email protected])
    Apply to: This namespace and subnamespaces
    Permissions allowed: "Enable Account" and "Remote Enable" (no others, no denies).
    IMHO, the server, the desktop, and user are all fairly "vanilla" with nothing unusual going on.  Maybe one thing worth noting: our Small Business Server 2008 (i.e. domain controller) is running as a VPS on SERVER85, so SERVER85 never boots with the
    domain controller on.  This hasn't ever caused problems except that the machine always thinks it's firewall should be in the "work" configuration instead of the "domain" configuration.  I tested running the HVRemote script while the SERVER85 firewall
    was turned off, and I get exactly the same results below.
    One more note: this user currently can logon through RDP to SERVER85 and administer Hyper-V just fine.  This user is *not* a domain admin or an admin on that server - I've simply provided him with the right permissions to be able to RDP and admin Hyper-V
    only.
    We used HVRemote and it output this info when run on the client:
    Microsoft (R) Windows Script Host Version 5.8
    Copyright (C) Microsoft Corporation. All rights reserved.
    Hyper-V Remote Management Configuration & Checkup Utility
    John Howard, Hyper-V Team, Microsoft Corporation.
    http://blogs.technet.com/jhoward
    Version 0.7 7th August 2009
    INFO: Computername is DEV03
    INFO: Computer is in domain accuraty.local
    INFO: Current user is ACCURATY\JKessel
    INFO: Assuming /mode:client as the Hyper-V role is not installed
    INFO: Build 7600.16617.amd64fre.win7_gdr.100618-1621
    INFO: Detected Windows 7/Windows Server 2008 R2 OS
    INFO: Remote Server Administration Tools are installed
    INFO: Hyper-V Tools Windows feature is enabled
    DACL for COM Security Access Permissions
    \Everyone    (S-1-1-0)
         Allow: LocalLaunch RemoteLaunch (7)
    NT AUTHORITY\ANONYMOUS LOGON    (S-1-5-7)
         Allow: LocalLaunch (3)
    BUILTIN\Distributed COM Users    (S-1-5-32-562)
         Allow: LocalLaunch RemoteLaunch (7)
    BUILTIN\Performance Log Users    (S-1-5-32-559)
         Allow: LocalLaunch RemoteLaunch (7)
    ANONYMOUS LOGON Machine DCOM Access
    ANONYMOUS LOGON does not have remote access
      This setting should only be enabled if required as security on this
      machine will be lowered. This computer is in a domain. It is not
      required if the server(s) being managed are in the same or trusted
      domains.
      Use hvremote /mode:client /anondcom:enable to turn on
    Firewall Settings for Hyper-V Management Clients
    Domain Firewall Profile is active
       Enabled:  Hyper-V Management Clients - WMI (Async-In)
       Enabled:  Hyper-V Management Clients - WMI (TCP-Out)
       Enabled:  Hyper-V Management Clients - WMI (TCP-In)
       Enabled:  Hyper-V Management Clients - WMI (DCOM-In)
    Windows Firewall exception rule(s) for mmc.exe
    Domain Firewall Profile is active
       Enabled:  Microsoft Management Console (UDP)
       Enabled:  Microsoft Management Console (TCP)
    Additional configuration may be necessary
      This computer is in a domain. If the target server is in a workgroup,
      you may need to set credentials for the server for Hyper-V Remote
      Management to operate correctly. This step should not be necssary if
      the target server is in the same or trusted domain as this computer.
      If necessary, from a *NON* elevated command prompt, enter:
         cmdkey /add:ServerComputerName /user:ServerComputerName\UserName /pass
      Note that you MUST enter ServerComputerName to BOTH parameters.
      You will be prompted for a password after entering the command.
    IP Configuration
    Windows IP Configuration
       Host Name . . . . . . . . . . . . : DEV03
       Primary Dns Suffix  . . . . . . . : accuraty.local
       Node Type . . . . . . . . . . . . : Hybrid
       IP Routing Enabled. . . . . . . . : No
       WINS Proxy Enabled. . . . . . . . : No
       DNS Suffix Search List. . . . . . : accuraty.local
    Ethernet adapter Local Area Connection:
       Connection-specific DNS Suffix  . : accuraty.local
       Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network Connection
       Physical Address. . . . . . . . . : 00-19-D1-05-57-01
       DHCP Enabled. . . . . . . . . . . : Yes
       Autoconfiguration Enabled . . . . : Yes
       Link-local IPv6 Address . . . . . : fe80::4406:b48c:dea3:de50%11(Preferred)
       IPv4 Address. . . . . . . . . . . : 172.16.48.185(Preferred)
       Subnet Mask . . . . . . . . . . . : 255.255.255.0
       Lease Obtained. . . . . . . . . . : Wednesday, November 10, 2010 3:19:23 AM
       Lease Expires . . . . . . . . . . : Monday, December 20, 2010 9:39:25 AM
       Default Gateway . . . . . . . . . : 172.16.48.1
       DHCP Server . . . . . . . . . . . : 172.16.48.210
       DHCPv6 IAID . . . . . . . . . . . : 234887633
       DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-13-62-35-81-00-19-D1-05-57-01
       DNS Servers . . . . . . . . . . . : 172.16.48.210
    66.209.192.5
    8.8.8.8
                                           66.209.192.15
    8.8.4.4
    4.2.2.1
       NetBIOS over Tcpip. . . . . . . . : Enabled
    Tunnel adapter isatap.accuraty.local:
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Microsoft ISATAP Adapter
       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
    Tunnel adapter Teredo Tunneling Pseudo-Interface:
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
    Stored Credentials
    Currently stored credentials:
        Target: WindowsLive:[email protected]
        Type: Generic
        User:
    [email protected]
        Local machine persistence
        Target: LegacyGeneric:target=WindowsLive:(token):[email protected];serviceuri=contacts.msn.com
        Type: Generic
        User:
    [email protected]
        Local machine persistence
        Target: Domain:target=TERMSRV/server85
        Type: Domain Password
        User: ACCURATY\jkessel
        Local machine persistence
        Target: WindowsLive:target=virtualapp/didlogical
        Type: Generic
        User: 02mybhosqazs
        Local machine persistence
    Testing connectivity to server:server85
    1: - nslookup for DNS verification.
         Note that failure is OK if you don't have a DNS infrastructure
    ~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~
    Server:  sbs01.accuraty.local
    Address:  172.16.48.210
    Name:    server85.accuraty.local
    Address:  172.16.48.201
    ~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~
    2: - ping attempt (ping -4 -n -1 server85)
         Note the ping may timeout - that is OK. However, if you get an
         error that server85 could not be found, you need to fix DNS
         or add an entry to the hosts file. Test 3 will fail and provide more
         guidance.
         This may take a second or two...
    ~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~
    Pinging server85.accuraty.local [172.16.48.201] with 32 bytes of data:
    Reply from 172.16.48.201: bytes=32 time<1ms TTL=128
    Ping statistics for 172.16.48.201:
        Packets: Sent = 1, Received = 1, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
        Minimum = 0ms, Maximum = 0ms, Average = 0ms
    ~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~
    3: - Connect to root\cimv2 WMI namespace
    ***** Failed to connect to root\cimv2
    ***** Error:     -2147024891 Access is denied.
    ***** Namespace: root\cimv2
         FAIL - Was unable to connect. Diagnosis steps:
         - Have you run hvremote /add:user or hvremote /add:domain\user
           on server85 to grant access?
         - Are you sure the server name 'server85' is correct?
         - Did you use cmdkey if needed? More information higher up.
         - Did you restart server85 after running hvremote /add for
           the very first time? (Subsequent adds, no restart needed.)
         - Is DNS operating correctly and was server85 found?
           Look at the output of tests 1 and 2 above to verify that the
           IPv4 address matches the output of 'ipconfig /all' when run on
           server85. If you do not have a DNS infrastructure,
           edit \windows\system32\drivers\etc on DEV03
           to add an entry for server85.
    INFO: Are running the latest version
    3 warning(s) or error(s) were found in the configuration. Review the
    detailed output above to determine whether you need to take further action.
    Summary is below.
    1: Anonymous Logon does not have remote access (may be ok)
    2: You *may* need to set credentials for access to the server
    3: Cannot connect to root\cimv2 on server85
    I'd greatly appreciate some help!
    Thanks!

    Hi,
    It seems that you were using Hyper-V Remote Management Configuration Utility from the link
    http://code.msdn.microsoft.com/HVRemote, if so, you can refer to the following link.
    Configure Hyper-V Remote Management in seconds
    http://blogs.technet.com/jhoward/archive/2008/11/14/configure-hyper-v-remote-management-in-seconds.aspx
    By the way, if you want to perform the further research about Hyper-V Remote Management Configuration Utility, it is recommend that you to get further
    support in the corresponding community so that you can get the most qualified pool of respondents. Thanks for your understanding.
    For your convenience, I have list the related link as followed.
    Discussions for Hyper-V Remote Management Configuration Utility
    http://code.msdn.microsoft.com/HVRemote/Thread/List.aspx
    Best Regards,
    Vincent Hu

  • ACE: VIP Out of service, Still accepts TCP connections

    Hi Guys. I am looking at a issue with an ACE. SW is 3.0(0)A3(2.6)
    We have a setup where most of it appears fine. It detect the loss of rservers, probes fail, the VIP stops responding to Pings, but it still accept TCP connections, even though there is nothing behind to accept them.
    The question is, is this correct behaviour? and if so is there any reference I can look at to confirm?
    While this behaviour is inconvenient for us. I can see why it may actually be correct.
    Thanks,
    Paul.

    Hello Paul,
    This is expected behaviour for L7 LB connections:
    The 'down' VIP will reply to SYN requests, but will then send a RST packet.
    This is because the ACE doesn't know what to do with the L7 connection until it has been build up. Only when the L7 connection is 'open' we notice that all the vserver which could serve this request are down.
    So it is correct and expected, but not exactly desired. It's just a side effect of the design. So far I do not known of any plans to change this behaviour. However similar limitations have been addressed in the past, like: CSCsq17137.
    Hope this helps, Peter

  • I have an epson xp600 and a mac book pro. Wireless printing is OK if I'm lucky for one time only then a 'failed to connect' message so I have to delete and re add the printer to get it working again (but just once!) then the same occurs. Why?

    I have an epson xp600 and a mac book pro. Wireless printing is OK if I'm lucky for one time only then a 'failed to connect' message so I have to delete and re add the printer to get it working again (but just once!) then the same occurs. Why?

    I am not certain this will fix your problem but I suggest you assign the printer a static IP address.
    Using the printer's front panel, select Menu > Network > WLAN > TCP/IP > Boot method, and change it to "static". Provide a static IP address that is on your LAN's subnet.
    For example, if you are using an AirPort Extreme, you might give it an IP address of 10.0.1.100. If you are using a Netgear or Linksys router that defaults to issuing 192.168.x.x addresses, you might give it an address of 192.168.1.100. That way, the printer will always "reside at the same address" on your network. If your router has the ability, you should reserve that address so that the router does not attempt to assign it to another DHCP device.
    Then, go to System Preferences > Print & Scan, and delete your existing printer with the "–" (minus) button. Add it again, using the "+" (plus) button. In the window that appears, select the IP pane, and from the Protocol menu select "Line Printer Daemon (LPD)". In the Address field type the IP address you gave your printer.
    If all goes well the "Pring Using" field will detect the printer at that address and automatically select the appropriate driver. You will see something similar to the following screenshot ("name" can be whatever you decide, and "location" is optional):
    Click Add, then you can close System Preferences.
    There are other possible reasons your printer is "not responding" which could include wireless interference from competing wireless networks, but try this "static IP" method first. It should mitigate the problem.

  • ASA 5505:Static Routing and Deny TCP connection because of bad flag

    Hi Everybody,
    I have a problem. I made a VPN site-2-site with 2 ASA 5505. The VPN works great. And I create a redondant link if the VPN failed.
    In fact, I use Dual ISP with route tracking. If the VPN fails, the default route change to an ISDN router, situated on the inside interface.
    When I simulated a VPN fail, the ASAs routes switch automatically on backup ISDN routers. If I ping elements, it works great. But when i try TCP connection like telnet, the ASAs deny connections:
    %PIX|ASA-6-106015: Deny TCP (no connection) from 172.16.10.57/35066 to 172.16.18.1/23 flags tcp_flags on interface interface_name.
    the security appliance discarded a TCP packet that has no associated connection in the security appliance connection table. The security appliance looks for a SYN flag in the packet, which indicates a request to establish a new connection. If the SYN flag is not set, and there is not an existing connection, the security appliance discards the packet.
    thanks!
    EDIT: On the schema, The interface of the main asa is 172.16.18.148...

    Check if the xlate timer is set greater than or equal to what the conn timer, so as not to have connections waiting on xlates that no longer exist. To minimize the number of attempts, enable "service resetinbound" . The PIX will reset the connection and make it go away. Without service resetinbound, the PIX Firewall drops packets that are denied and generates a syslog message stating that the SYN was a denied connection.

  • Opening and closing Multiple TCP connection​s issues

    Hi all I am having an issue with the TCP VI’s and wondering if anyone has experienced this issue.
    My application is required to scan 50-100 IP addresses (statically assigned) and discover if an Ethernet device is connect at that IP address. Currently I am able to achieve this by opening a TCP connection and testing the error cluster to determine if a timeout has occurred (no timeout error  means Ethernet device available at the IP address). I then ensure that the TCP connections are closed.
    The issue I am have is that I require a 1 second delay between the  TCP open and the TCP close which significantly slows down the process. Without the 1 second delay the vi successfully connects to the device once then fails to make any TCP connect regardless of the time delay until the PC is reset.  
    If anyone has any advice I would be very grateful
    David Barr
    P.S. I have attached a simplified section of code showing this issue
    Attachments:
    TCP Open close issue.vi ‏15 KB

    smercurio_fc wrote:
    If I understand you correctly you want the time delay to be 1 second if there's a successful connection....
    While I don't have a specific answer for this problem. I want to clarify for him. I believe the issue is, what if all connections ARE there? That means you keep returning a wait of 1 second 50-100 times so It takes 50-100 seconds just to initialize. I think the user is looking for a way to check for valid connections, but do so in such a way that eliminates the need for a wait which is greatly slowing things down.
    CLA, LabVIEW Versions 2010-2013

  • Fingerprint reader not working in IE and saying failed to connect to sensor

    Hi all,
    I bought a Qosmio x500 10t a couple of months back. For the first couple of weeks i had no probs using the fingerprint reader to log in to windows and to log in to websites in Internet exploer.
    All of a sudden it would not work on any website stored. The green banner showed accross the top of site and asked to swipe finger but nothing happened when I swiped. I rebooted and it worked again but not for long before failing. This time a reboot didnt work so i deleted my finger prints and websites and started from scratch. That worked for a couple of attempts before probs started again. And on trying to get into Fingerprint utility it says failure to connect to sensor. So, I did a system restore. It worked for a couple of times again and then same probs. So I found the updated utility software, uninstalled the old and put on the new. Same again, worked for a couple of times then failed.
    I could not find anything stuck in the registry but to be on the safe side i did a full system clean back to factory setup using backup discs. Hey presto i thought it had worked. Everything going ok for first 24hrs and then same problems start to occur. Only this time it is also prompting me to enroll fingerprints even though i already have. And when i try to get into the utilioty it says failed to read sensor again.
    The fingerprint log on to windows always works as long as i dont close the fingerprint utility down before shutting down. If i do exit the utilty i cant reopen it as it just says failed to connect to sensor. And then i have to unistall and reinstall the utility software. Aty the moment it occasionally works on websites stored but most of the time it doesnt do anything.
    Please help. Do I need to send laptop back to Toshiba??

    Hi,
    *I got a solution* for the problem that the fingerprint sensor "suddenly" does not work any more.
    When starting the Toshiba Fingerprint Utility, it says "failed to connect to fingerprint sensor".
    Is it possible that just before it stopped working there was a new firewall installed, or firewall settings had been changed?
    *In my case, the problem was solved by changing my firewall settings* (Windows 7 Firewall Control) to ALLOW all traffic for
    the Authentec Fingerprint Sensor Service (AFSS). It is the file "AtService.exe" in C:\Program files
    The reason is simple:
    The Toshiba Fingerprint utility communicates with the fingerprint sensor service via TCP/IP.
    Therefore, any firewall that blocks traffic on the local computer will block the communication.
    *After changing my firewall settings, fingerprint sensor works* on my R700 flawlessly now.

  • OVI fails to connect to Nokia N8-00 on "Checking t...

    Hi All,
    I'm having problems connecting OVI to a Nokia N8-00 handset via Bluetooth.
    The Add New Device wizard is able to detect the phone but when selecting it from the list and proceeding it stays on "Checking the Bluetooth capabilities of your device." for some 20 seconds after which it eventually fails with the error of "Failed to connect to your device. Problems occured while authorising the Bluetooth connection between your device and computer."
    I've verified that both devices are configured as authorised by their respective counterpart.
    Also tried to remove the pairing from both the laptop and phone and re-pair them again - same problem.
    I am able to sync the phone with OVI via USB no problem.
    I am also able to use my OVI with another Nokia phone (E72) via Bluetooth without any issues.
    This points me to a possible problem with Bluetooth on the N8 phone itself but I don't have any way to prove it.
    I wonder if anybody else has experienced the same issue?
    OVI version 3.0.0.290
    N8-00 version 013.016
    Thanks, Jan

    OVI is A BUG! I'm using PC suite with an old version 7.1.40.6 (still compatible with the N8) which wor'ks great with my N8 for more than a year. Time to time I update OVI to check if the known bugs are fixed but since new are coming it is a no end situation. I have had a N95 and a N97 before which never either worked properly with OVI and Outlook 97, 2003 & 2010.
    How CAN THAT BE Mr NOKIA?
    Because of this, I'm closed to give up with this good phone supplier offering a VERY WEAK software support to its clients!
    Good luck to all of you still patient ...

  • OVI fails to connect to Nokia N8 on "Checking the ...

    Hi All,
    I'm having problems connecting OVI to a Nokia N8-00 handset via Bluetooth.
    The Add New Device wizard is able to detect the phone but when selecting it from the list and proceeding it stays on "Checking the Bluetooth capabilities of your device." for some 20 seconds after which it eventually fails with the error of "Failed to connect to your device. Problems occured while authorising the Bluetooth connection between your device and computer."
    I've verified that both devices are configured as authorised by their respective counterpart.
    Also tried to remove the pairing from both the laptop and phone and re-pair them again - same problem.
    I am able to sync the phone with OVI via USB no problem.
    I am also able to use my OVI with another Nokia phone (E72) via Bluetooth without any issues.
    This points me to a possible problem with Bluetooth on the N8 phone itself but I don't have any way to prove it.
    I wonder if anybody else has experienced the same issue?
    OVI version 3.0.0.290
    N8-00 version 013.016
    Thanks, Jan

    All bluetooths stack versions, OVI versions, PC Suite versions are same as those of another laptop which connects well over bluetooth.
    By the way still, my Win7 Home Premium's OVI's system info tells that it is using Microsoft Bluetooth Stack Version 6.1.7600 build 16385 (Active & In Use).
    PLS DO HELP. OTHERWISE I'VE NO OPTION BUT TO LOOK FOR ANOTHER SYMBIAN 3 DEVICE. I DON'T WANT TO PART WITH MY N8 OR MY ACER ICONIA TABLET.
    Note: This problem seems only with N8 because I've tried other nokia models. They all connect well. But I've also tried another N8, that also DIDN'T CONNECT. What the heck problem is with N8.
    Wish#1: MP3 Tag Editor capable of editing ratings.
    Wish#2: Android type Video player, highly efficient player capable of playing all formats.
    Wish#3: Without Google Maps (and products), no gadget is worth keeping.
    Attachments:
    Ovi system info.png ‏19 KB

Maybe you are looking for

  • Reporting on Merged Records

    I would like to know if there is a way to report on records that have been merged through Portal?  It would be nice to be able to report which records have been merged over a time period (like within the last month), but if that is not possible, I am

  • URGENT - BLOB data transfer

    Hi: I have an Apex application that includes a couple of standard reports that display BLOB columns as images. I copied the blob table to the new database via a database link using insert into <remote table> select * from <local table>. The data was

  • This phone is **bleep**

    This phone is terrible. I have been a blackberry supporter for 6 years, I always defend their phones against IPhone people and I have always said I will stick with them but this Z10 is a piece of **bleep**. I have gone from being a net promoter to a

  • Why can't I sync my ringtones

    I am using iTunes 10.0.1.22 and have recently sync my iPhone. However although my custom ringtones appear in itunes they have disappeared from my phone and even though I've tried to syn the ringtones specifically they just won't appear on the phone.

  • Recover a deleted playlist in latest iTunes version

    Hi I accidentally deleted my burned MP3 playlist from iTunes and how do I recover it to burn some other MP3 CDs to give as a gift to my friends? I do not want to add songs again because there are very many songs in the playlist. Please help. Thank yo