|
Hey gang, here's a question regarding KWM that has reared
it's head to me.
Earlier we had a user of ours call that web messaging was
down, sure enough, it was. This is the 2nd time this summer it's just quit, you
can stop/start the service and it's fine, what we do is just reboot the server,
and all is fine as well. mail still works just fine, so it's a KWM
issue However, going through the not-so-helpful weblogs to try to figure
out what went wrong where, I noticed these lines in the W1030804.log
file:
20030804 092609 Auth Logon evac21hb 63.160.179.158
Xa6c99b9299929fcb9992950a1934 81 0.
20030804 132601 Auth Error @mail.2khiway.com 199.91.39.254 0 - Failed authentication. 20030804 132620 Auth Logon roach3 199.91.39.254 X810f9bcccccb926df18d54 81 0. (I've already corrected the 2khiway.com issue,
seems our link from our website had a .com instead of a .net... dang web
designers....)
So am I reading this right, and that it went belly
up soon after 9:26, and 13:26 is roughly the time we reset the server. except it
doesn't give any further details. Now, if I look at W2030804.log, there is time
stamps for the entire time it was "down". they were spread a greater distance in
time however, and end with these 2 lines:
20030804 132145 Info - Normal TCP listener
exiting .
20030804 132150 Info - SSL TCP listener exiting . To which it resumes logging as it had before 9:25 or so.
Any ideas what this points at? Are these lines meaning KWM is/was listening? Or
someone else, which I hope is NOT the case....
This has led me to take a closer look at the weblogs, to
try to get SOME understanding to how they log events. I have seen the following
line a few times,
20030804 093113 Socket Error - 63.160.179.69 Error
while writing sockect due to error 10054 or malicious connection
type.
and
20030804 140229 Request processed with no referer
and user agent 207.144.40.233.
What do these mean? I've tried looking on Ipswitches site
to no avail. I figured I'd ask the list before calling Ipswitch. Last question I
had about KWM they gave me a "It just does that" when I asked about the "Not in
table" errors I keep seeing. Any info appreciated. I'm not TOO worried about it,
wether I should be or not....
Paul |
