What is this -408 error coming from and why?

Posted in 2012

Topics: Stored Procedures & SPL, Server Administration, Platform-Specific Issues

Knox, Ernest — Wed, 20 Jun 2012 12:46:54 — source: IIUG Forums & Mailing Lists

What is this -408 error coming from and why? IDS: 11.50.FC5 OS: AIX 6.1.3.0 DRDA Gateway: 7.31UC1X1 Error messages: 2012-06-20 01:45:04.958160 daemon err = -408: oserr = 0: errstr = : Invalid message type received from the sqlexec process. 2012-06-20 01:45:10.459373 daemon err = -408: oserr = 0: errstr = : Invalid message type received from the sqlexec process. 2012-06-20 01:45:15.958159 daemon err = -408: oserr = 0: errstr = : Thanks, ******************************************************************* Ernie Knox IT Database Administrator Specialist Sears Holdings - BU: I & T Group 3333 Beverly Rd. Hoffman Estates, IL. 60179 Office: (847) 286-5735 Email: Ernest.Knox@searshc.com<mailto:Ernest.Knox@searshc.com> Blackberry: 2244650553@messaging.sprintpcs.com<mailto:2244650553@messaging.sprintpcs.com> Informix Email: ifmxdba@searshc.com<mailto:ifmxdba@searshc.com> and Team: InformixDBA@searshc.com<mailto:InformixDBA@searshc.com> Informix Primary: INFORMIXDBAPrimaryPager@searshc.com<mailto:INFORMIXDBAPrimaryPager@searshc.com> Informix Secondary: INFORMIXDBASecondaryPager@searshc.com<mailto:INFORMIXDBASecondaryPager@searshc.c om> MySQL Email: MYSQLDBAe@searshc.com<mailto:MYSQLDBAe@searshc.com> and Team: MySQLDBA2@searshc.com<mailto:MySQLDBA2@searshc.com> MySQL Primary: MYSQLDBAPrimaryPager@searshc.com<mailto:MYSQLDBAPrimaryPager@searshc.com> MySQL Secondary: MYSQLDBASecondaryPager@searshc.com<mailto:MYSQLDBASecondaryPager@searshc.com> For more information, use our DBA Wiki page link below: http://wiki.intra.sears.com/confluence/display/TechStrag/Database+Management#Dat abaseManagement<http://wiki.intra.sears.com/confluence/display/TechStrag/Databas e+Management> " Yes we can make a Change! " " It's always a great day to watch Sports: " GSU ******************************************************************* This message, including any attachments, is the property of Sears Holdings Corporation and/or one of its subsidiaries. It is confidential and may contain proprietary or legally privileged information. If you are not the intended recipient, please delete it without reading the contents. Thank you.

↪ replying to Knox, Ernest

Paul Watson — Wed, 20 Jun 2012 14:04:22 — source: IIUG Forums & Mailing Lists

If someone telnets your port you will see this message. Actually it's a neat trick for testing very basic connectivity Cheers Paul -----Original Message----- From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of Knox, Ernest Sent: Wednesday, June 20, 2012 7:47 AM To: ids@iiug.org Subject: What is this -408 error coming from and why? [27402] What is this -408 error coming from and why? IDS: 11.50.FC5 OS: AIX 6.1.3.0 DRDA Gateway: 7.31UC1X1 Error messages: 2012-06-20 01:45:04.958160 daemon err = -408: oserr = 0: errstr = : Invalid message type received from the sqlexec process. 2012-06-20 01:45:10.459373 daemon err = -408: oserr = 0: errstr = : Invalid message type received from the sqlexec process. 2012-06-20 01:45:15.958159 daemon err = -408: oserr = 0: errstr = : Thanks, ******************************************************************* Ernie Knox IT Database Administrator Specialist Sears Holdings - BU: I & T Group 3333 Beverly Rd. Hoffman Estates, IL. 60179 Office: (847) 286-5735 Email: Ernest.Knox@searshc.com<mailto:Ernest.Knox@searshc.com> Blackberry: 2244650553@messaging.sprintpcs.com<mailto:2244650553@messaging.sprintpcs.com > Informix Email: ifmxdba@searshc.com<mailto:ifmxdba@searshc.com> and Team: InformixDBA@searshc.com<mailto:InformixDBA@searshc.com> Informix Primary: INFORMIXDBAPrimaryPager@searshc.com<mailto:INFORMIXDBAPrimaryPager@searshc.c om> Informix Secondary: INFORMIXDBASecondaryPager@searshc.com<mailto:INFORMIXDBASecondaryPager@sears hc.com> MySQL Email: MYSQLDBAe@searshc.com<mailto:MYSQLDBAe@searshc.com> and Team: MySQLDBA2@searshc.com<mailto:MySQLDBA2@searshc.com> MySQL Primary: MYSQLDBAPrimaryPager@searshc.com<mailto:MYSQLDBAPrimaryPager@searshc.com> MySQL Secondary: MYSQLDBASecondaryPager@searshc.com<mailto:MYSQLDBASecondaryPager@searshc.com > For more information, use our DBA Wiki page link below: http://wiki.intra.sears.com/confluence/display/TechStrag/Database+Management #DatabaseManagement<http://wiki.intra.sears.com/confluence/display/TechStrag /Database+Management> " Yes we can make a Change! " " It's always a great day to watch Sports: " GSU ******************************************************************* This message, including any attachments, is the property of Sears Holdings Corporation and/or one of its subsidiaries. It is confidential and may contain proprietary or legally privileged information. If you are not the intended recipient, please delete it without reading the contents. Thank you. **************************************************************************** *** Forum Note: Use "Reply" to post a response in the discussion forum.

↪ replying to Paul Watson

Knox, Ernest — Wed, 20 Jun 2012 14:07:30 — source: IIUG Forums & Mailing Lists

Is this from an attack hacker, just an app server process misusing the .net= rc function, or both? Thanks, ******************************************************************* Ernie Knox IT Database=A0Administrator Specialist Sears Holdings - BU: I & T Group 3333 Beverly Rd. Hoffman Estates, IL. 60179 Office: (847) 286-5735 Email: Ernest.Knox@searshc.com Blackberry:=A02244650553@messaging.sprintpcs.com Informix Email: ifmxdba@searshc.com and Team: InformixDBA@searshc.com Informix Primary: INFORMIXDBAPrimaryPager@searshc.com Informix Secondary: INFORMIXDBASecondaryPager@searshc.com MySQL Email: MYSQLDBAe@searshc.com and Team: MySQLDBA2@searshc.com MySQL Primary: MYSQLDBAPrimaryPager@searshc.com MySQL Secondary: MYSQLDBASecondaryPager@searshc.com For more information, use our DBA Wiki page link below: http://wiki.intra.sears.com/confluence/display/TechStrag/Database+Managemen= t#DatabaseManagement " Yes we can make a Change! " " It's always a great day to watch=A0Sports: " GSU ******************************************************************* -----Original Message----- From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of Paul = Watson Sent: Wednesday, June 20, 2012 10:04 AM To: ids@iiug.org Subject: RE: What is this -408 error coming from and why? [27406] If someone telnets your port you will see this message. Actually it's a nea= t trick for testing very basic connectivity=20 Cheers Paul=20 -----Original Message----- From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of Knox,= Ernest Sent: Wednesday, June 20, 2012 7:47 AM To: ids@iiug.org Subject: What is this -408 error coming from and why? [27402]=20 What is this -408 error coming from and why?=20 IDS: 11.50.FC5 OS: AIX 6.1.3.0 DRDA Gateway: 7.31UC1X1=20 Error messages:=20 2012-06-20 01:45:04.958160 daemon err =3D -408: oserr =3D 0: errstr =3D : I= nvalid message type received from the sqlexec process. 2012-06-20 01:45:10.= 459373 daemon err =3D -408: oserr =3D 0: errstr =3D : Invalid message type = received from the sqlexec process. 2012-06-20 01:45:15.958159 daemon err = =3D -408: oserr =3D 0:=20 errstr =3D :=20 Thanks, ******************************************************************* Ernie Knox IT Database Administrator Specialist Sears Holdings - BU: I & T Group 3333 Beverly Rd.=20 Hoffman Estates, IL. 60179 Office: (847) 286-5735 Email: Ernest.Knox@searshc.com<mailto:Ernest.Knox@searshc.com> Blackberry:=20 2244650553@messaging.sprintpcs.com<mailto:2244650553@messaging.sprintpcs.co= m=20 >=20 Informix Email: ifmxdba@searshc.com<mailto:ifmxdba@searshc.com> and Team:= =20 InformixDBA@searshc.com<mailto:InformixDBA@searshc.com> Informix Primary:=20 INFORMIXDBAPrimaryPager@searshc.com<mailto:INFORMIXDBAPrimaryPager@searshc.= c=20 om>=20 Informix Secondary:=20 INFORMIXDBASecondaryPager@searshc.com<mailto:INFORMIXDBASecondaryPager@sears hc.com> MySQL Email: MYSQLDBAe@searshc.com<mailto:MYSQLDBAe@searshc.com> and Team:= =20 MySQLDBA2@searshc.com<mailto:MySQLDBA2@searshc.com> MySQL Primary:=20 MYSQLDBAPrimaryPager@searshc.com<mailto:MYSQLDBAPrimaryPager@searshc.com> MySQL Secondary:=20 MYSQLDBASecondaryPager@searshc.com<mailto:MYSQLDBASecondaryPager@searshc.co= m=20 >=20 For more information, use our DBA Wiki page link below:=20 http://wiki.intra.sears.com/confluence/display/TechStrag/Database+Management #DatabaseManagement<http://wiki.intra.sears.com/confluence/display/TechStrag /Database+Management>=20 " Yes we can make a Change! "=20 " It's always a great day to watch Sports: "=20 GSU *******************************************************************=20 This message, including any attachments, is the property of Sears Holdings = Corporation and/or one of its subsidiaries. It is confidential and may cont= ain proprietary or legally privileged information. If you are not the inten= ded recipient, please delete it without reading the contents. Thank you.=20 **************************************************************************** *** Forum Note: Use "Reply" to post a response in the discussion forum.=20 ***************************************************************************= **** Forum Note: Use "Reply" to post a response in the discussion forum.=20 This message, including any attachments, is the property of Sears Holdings = Corporation and/or one of its subsidiaries. It is confidential and may cont= ain proprietary or legally privileged information. If you are not the inten= ded recipient, please delete it without reading the contents. Thank you.

↪ replying to Knox, Ernest

Alberto Romeu — Wed, 20 Jun 2012 15:15:42 — source: IIUG Forums & Mailing Lists

Hi Paul!!! Try to execute a telnet connection at the hostname + informix port. When I do that to test if IDS is listening, online.log show this error. This also could be monitoring tools, such as What's U por Nagios. Regards, Alberto Pessonio. -----Mensagem original----- De: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] Em nome de Knox, Ernest Enviada em: quarta-feira, 20 de junho de 2012 11:08 Para: ids@iiug.org Assunto: RE: What is this -408 error coming from and why? [27407] Is this from an attack hacker, just an app server process misusing the .net= rc function, or both? Thanks, ******************************************************************* Ernie Knox IT Database=A0Administrator Specialist Sears Holdings - BU: I & T Group 3333 Beverly Rd. Hoffman Estates, IL. 60179 Office: (847) 286-5735 Email: Ernest.Knox@searshc.com Blackberry:=A02244650553@messaging.sprintpcs.com Informix Email: ifmxdba@searshc.com and Team: InformixDBA@searshc.com Informix Primary: INFORMIXDBAPrimaryPager@searshc.com Informix Secondary: INFORMIXDBASecondaryPager@searshc.com MySQL Email: MYSQLDBAe@searshc.com and Team: MySQLDBA2@searshc.com MySQL Primary: MYSQLDBAPrimaryPager@searshc.com MySQL Secondary: MYSQLDBASecondaryPager@searshc.com For more information, use our DBA Wiki page link below: http://wiki.intra.sears.com/confluence/display/TechStrag/Database+Manage men= t#DatabaseManagement " Yes we can make a Change! " " It's always a great day to watch=A0Sports: " GSU ******************************************************************* -----Original Message----- From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of Paul = Watson Sent: Wednesday, June 20, 2012 10:04 AM To: ids@iiug.org Subject: RE: What is this -408 error coming from and why? [27406] If someone telnets your port you will see this message. Actually it's a nea= t trick for testing very basic connectivity=20 Cheers Paul=20 -----Original Message----- From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of Knox,= Ernest Sent: Wednesday, June 20, 2012 7:47 AM To: ids@iiug.org Subject: What is this -408 error coming from and why? [27402]=20 What is this -408 error coming from and why?=20 IDS: 11.50.FC5 OS: AIX 6.1.3.0 DRDA Gateway: 7.31UC1X1=20 Error messages:=20 2012-06-20 01:45:04.958160 daemon err =3D -408: oserr =3D 0: errstr =3D : I= nvalid message type received from the sqlexec process. 2012-06-20 01:45:10.= 459373 daemon err =3D -408: oserr =3D 0: errstr =3D : Invalid message type = received from the sqlexec process. 2012-06-20 01:45:15.958159 daemon err = =3D -408: oserr =3D 0:=20 errstr =3D :=20 Thanks, ******************************************************************* Ernie Knox IT Database Administrator Specialist Sears Holdings - BU: I & T Group 3333 Beverly Rd.=20 Hoffman Estates, IL. 60179 Office: (847) 286-5735 Email: Ernest.Knox@searshc.com<mailto:Ernest.Knox@searshc.com> Blackberry:=20 2244650553@messaging.sprintpcs.com<mailto:2244650553@messaging.sprintpcs .co= m=20 >=20 Informix Email: ifmxdba@searshc.com<mailto:ifmxdba@searshc.com> and Team:= =20 InformixDBA@searshc.com<mailto:InformixDBA@searshc.com> Informix Primary:=20 INFORMIXDBAPrimaryPager@searshc.com<mailto:INFORMIXDBAPrimaryPager@sears hc.= c=20 om>=20 Informix Secondary:=20 INFORMIXDBASecondaryPager@searshc.com<mailto:INFORMIXDBASecondaryPager@s ears hc.com> MySQL Email: MYSQLDBAe@searshc.com<mailto:MYSQLDBAe@searshc.com> and Team:= =20 MySQLDBA2@searshc.com<mailto:MySQLDBA2@searshc.com> MySQL Primary:=20 MYSQLDBAPrimaryPager@searshc.com<mailto:MYSQLDBAPrimaryPager@searshc.com > MySQL Secondary:=20 MYSQLDBASecondaryPager@searshc.com<mailto:MYSQLDBASecondaryPager@searshc .co= m=20 >=20 For more information, use our DBA Wiki page link below:=20 http://wiki.intra.sears.com/confluence/display/TechStrag/Database+Manage ment #DatabaseManagement<http://wiki.intra.sears.com/confluence/display/TechS trag /Database+Management>=20 " Yes we can make a Change! "=20 " It's always a great day to watch Sports: "=20 GSU *******************************************************************=20 This message, including any attachments, is the property of Sears Holdings = Corporation and/or one of its subsidiaries. It is confidential and may cont= ain proprietary or legally privileged information. If you are not the inten= ded recipient, please delete it without reading the contents. Thank you.=20 ************************************************************************ **** *** Forum Note: Use "Reply" to post a response in the discussion forum.=20 ************************************************************************ ***= **** Forum Note: Use "Reply" to post a response in the discussion forum.=20 This message, including any attachments, is the property of Sears Holdings = Corporation and/or one of its subsidiaries. It is confidential and may cont= ain proprietary or legally privileged information. If you are not the inten= ded recipient, please delete it without reading the contents. Thank you. ************************************************************************ ******* Forum Note: Use "Reply" to post a response in the discussion forum.