Hi,
I installed netxms agent on Win Server 2008 R2 (netxms version - 1.2.14) and this message is appearing in event viewer occasionally:
Communication session broken: A request to send or receive data was disallowed because the socket had already been shut down in that direction with a previous shutdown call
Here is server log (you can also see processing of this event from event log - I setup event log monitoring), it looks like it happen after poll status:
[16-Jun-2014 16:27:02.589] [DEBUG] Node 236 "eesk-app-02" queued for status poll
[16-Jun-2014 16:27:02.589] [DEBUG] Starting status poll for node eesk-app-02 (ID: 236)
[16-Jun-2014 16:27:02.589] [DEBUG] StatusPoll(eesk-app-02): checking agent
[16-Jun-2014 16:27:02.591] [DEBUG] StatusPoll(eesk-app-02): bAllDown=false, dynFlags=0x00001001
[16-Jun-2014 16:27:02.591] [DEBUG] StatusPoll(eesk-app-02 [236]): unable to get system uptime
[16-Jun-2014 16:27:02.592] [DEBUG] Finished status poll for node eesk-app-02 (ID: 236)
[16-Jun-2014 16:27:03.452] [DEBUG] AgentConnectionEx::onTrap(): Received trap message from agent at 172.16.44.115, node ID 236
[16-Jun-2014 16:27:03.452] [DEBUG] AgentConnectionEx::onTrap(): trapID is valid
[16-Jun-2014 16:27:03.452] [DEBUG] Event from trap: 100000
[16-Jun-2014 16:27:03.452] [DEBUG] CorrelateEvent: event EVENTLOG_ERROR id 7117 source eesk-app-02 [236]
[16-Jun-2014 16:27:03.452] [DEBUG] CorrelateEvent: finished, rootId=0
[16-Jun-2014 16:27:03.452] [DEBUG] EVENT 100000 (ID:7117 F:0x0001 S:0 TAG:"") FROM eesk-app-02: ERROR: Communication session broken: A request to send or receive data was disallowed because the socket had already been shut down in that direction with a previous shutdown call.
[16-Jun-2014 16:27:03.452] [DEBUG] [CLSN-1] Sending message CMD_EVENTLOG_RECORDS
[16-Jun-2014 16:27:03.452] [DEBUG] Event 7117 match EPP rule 1
[16-Jun-2014 16:27:03.452] [DEBUG] *actions* Executing action 1 (email) of type SEND EMAIL
[16-Jun-2014 16:27:03.452] [DEBUG] *actions* Sending mail to [email protected]: "[Normal] eesk-app-02: ERROR: Communication session broken: A request to send or receive data was disallowed because the socket had already been shut down in that direction with a previous shutdown call."
[16-Jun-2014 16:27:03.452] [DEBUG] SMTP(00000000097A8540): new envelope, [email protected]
If it is not important I can ignore it but is there any option how to filter this event - send all warnings / event except this one ?
Thanks and regards,
MK
				
			I installed netxms agent on Win Server 2008 R2 (netxms version - 1.2.14) and this message is appearing in event viewer occasionally:
Communication session broken: A request to send or receive data was disallowed because the socket had already been shut down in that direction with a previous shutdown call
Here is server log (you can also see processing of this event from event log - I setup event log monitoring), it looks like it happen after poll status:
[16-Jun-2014 16:27:02.589] [DEBUG] Node 236 "eesk-app-02" queued for status poll
[16-Jun-2014 16:27:02.589] [DEBUG] Starting status poll for node eesk-app-02 (ID: 236)
[16-Jun-2014 16:27:02.589] [DEBUG] StatusPoll(eesk-app-02): checking agent
[16-Jun-2014 16:27:02.591] [DEBUG] StatusPoll(eesk-app-02): bAllDown=false, dynFlags=0x00001001
[16-Jun-2014 16:27:02.591] [DEBUG] StatusPoll(eesk-app-02 [236]): unable to get system uptime
[16-Jun-2014 16:27:02.592] [DEBUG] Finished status poll for node eesk-app-02 (ID: 236)
[16-Jun-2014 16:27:03.452] [DEBUG] AgentConnectionEx::onTrap(): Received trap message from agent at 172.16.44.115, node ID 236
[16-Jun-2014 16:27:03.452] [DEBUG] AgentConnectionEx::onTrap(): trapID is valid
[16-Jun-2014 16:27:03.452] [DEBUG] Event from trap: 100000
[16-Jun-2014 16:27:03.452] [DEBUG] CorrelateEvent: event EVENTLOG_ERROR id 7117 source eesk-app-02 [236]
[16-Jun-2014 16:27:03.452] [DEBUG] CorrelateEvent: finished, rootId=0
[16-Jun-2014 16:27:03.452] [DEBUG] EVENT 100000 (ID:7117 F:0x0001 S:0 TAG:"") FROM eesk-app-02: ERROR: Communication session broken: A request to send or receive data was disallowed because the socket had already been shut down in that direction with a previous shutdown call.
[16-Jun-2014 16:27:03.452] [DEBUG] [CLSN-1] Sending message CMD_EVENTLOG_RECORDS
[16-Jun-2014 16:27:03.452] [DEBUG] Event 7117 match EPP rule 1
[16-Jun-2014 16:27:03.452] [DEBUG] *actions* Executing action 1 (email) of type SEND EMAIL
[16-Jun-2014 16:27:03.452] [DEBUG] *actions* Sending mail to [email protected]: "[Normal] eesk-app-02: ERROR: Communication session broken: A request to send or receive data was disallowed because the socket had already been shut down in that direction with a previous shutdown call."
[16-Jun-2014 16:27:03.452] [DEBUG] SMTP(00000000097A8540): new envelope, [email protected]
If it is not important I can ignore it but is there any option how to filter this event - send all warnings / event except this one ?
Thanks and regards,
MK