HP3000-L Archives

November 2006, Week 3

HP3000-L@RAVEN.UTC.EDU

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Chris Bartram <[log in to unmask]>
Reply To:
Date:
Wed, 15 Nov 2006 21:33:00 -0500
Content-Type:
text/plain
Parts/Attachments:
text/plain (35 lines)
HP-3000 Systems Discussion wrote:
> Gentle listers,
> 
> Our security guy was running a security scan using Qualys on
> our 918RX with 10/100 baseT NIC, and it caused a system
> abort. All this of course is behind our firewall. Here are
> some of the entries off the console:

[snip]

I just had to reboot two HPe3000s (a 929KS and a 918LX both running MPE/iX
6.5) due to a security scan by nessus. The systems are inside a secure
(firewalled off) network, and the scan was run from a workstation inside the
network.

It's the first time I've had to do anything on these 3000s (at customer
site) in over a year. Both were hung up; nettool showed one table with a :(
on one system, two with :( on the other (buffer related tables - I don't
recall which). Systems were still running, but network connections were
failing... And (bizarre - never seen this before) on one of the boxes
nothing could log OFF. Jobs that had finished 2 days earlier were hung at
the "!EOJ". Sessions typed :BYE and nothing happened. Couldn't =SHUTDOWN
that box either; had to ctrl-B RS that guy.

I didn't spend a lot of time trying to figure it out. The nessus scan also
locked up a Solaris 2.7 box, three HP OpenView servers (two running Win2k3
SP1 and one on Win2000 SP4 - all with latest patches), Oracle listener
processes on another server, and several other servers and processes. It's
(nessus) apparently quite the scanning tool! ;-)

 -Chris B

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

ATOM RSS1 RSS2