Troubleshooting the sensor

The generic server sensor does not discover open sockets

Problem

The generic server sensor fails to discover open sockets. You might find the following message in the error logs:

CTJTD2522E Sensor is not able to discover processes pids for open sockets.

Solution

See the DEBUG-level logs of the sensor to find a detailed reason of this failure. Depending on the reason, complete the following tasks:

• If a command timeout occurred, increase the timeout by setting the value of the com.collation.discover.agent.command.pidsInfoTimeout property. This property can be scoped to a specific IP. For example, the com.collation.discover.agent.command.pidsInfoTimeout.192.168.2.1=1800000 property specifies a 30-minute timeout for the IP 192.168.2.1. Remember to increase timeout values for the Generic server sensor and the IBM AIX computer system sensor as well.
• If the logs contain either of the following messages:
  • os.AixOs - Unable to get pids for open sockets com.collation.platform.os.OsException: Unable to find <sctp_pcb_hash_table> (for a regular discovery),
  • sensor.GenericServerScriptSensor - Unable to find <sctp_pcb_hash_table> (for a script-based discovery),
  apply a fix for APAR IZ98746, IZ98842, IV04783, or IV05965 on a discovered AIX host.
• If the logs contain a message similar to the following one:

  for i in `netstat -Aan| grep tcp|awk '{print $1}'`;do echo \"sockinfo $itcpcb\"|kdb|grep ACTIVE; echo $i$'\n####';done
  open: Permission denied
  f100020000060bb0
  ####
  open: Permission denied
  f10002000004ebb0
  ####
  ...

  complete one of the following procedures:
  • Install the netstat, sockinfo, and kdb commands. Grant the Agile Service Manager user the execution permissions to run them.
  • If you have the kdb command installed, define sudo for it by setting the following property:

    com.collation.discover.agent.command.kdb = sudo kdb

  • Set the com.collation.netstatoverlsof.AIX property to false to enable the lsof command to collect the process information instead of the netstat command.