戻る
-
タイトル
TPAM Alert Severe Error Notification "EventID:0 Source:TPAMCONSOLE Description:sshd,sshd: PID 16231: fatal: ssh_dispatch_run_fatal: Connection from ..." -
説明
What does an alert similar to this indicate:
TPAM Alert[Appliance Health and Welfare] - Severe Error NotificationA Windows Application Error occurred. EventID:0 Source:TPAMCONSOLE Description:sshd,sshd: PID 16231: fatal: ssh_dispatch_run_fatal: Connection from xxx.xxx.xxx.xxx port xxxxx: Broken pipe [preauth]This alert was generated at 11/11/2016 12:10:10 AM -
対策
This alert indicates that the IP in the alert has tried to connect to TPAM via ssh and failed.
This alert will help you identify issues with connectivity or unexpected connection attempts.
-Is the IP known? Should it be trying to connect to TPAM? If so, review why it may be failing.
-Is the IP not expected to be trying to connect to TPAM via ssh? If this is not expected, review the IP (if the resource is local) and correct the issue or perhaps block the IP via a firewall if it should not be connecting to TPAM.
Note the source port reported for the connection will likely be random, as will the Process ID (PID).