LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Other *NIX Forums > Solaris / OpenSolaris
User Name
Password
Solaris / OpenSolaris This forum is for the discussion of Solaris and OpenSolaris.
General Sun, SunOS and Sparc related questions also go here.

Notices

Reply
 
Search this Thread
Old 06-25-2009, 05:05 PM   #1
czezz
Member
 
Registered: Nov 2004
Location: Poland/Warsaw
Distribution: Slackware/Solaris
Posts: 571

Rep: Reputation: 30
SSH: Connection Reset by Peer


On Solaris 10 SPARC I have NO problem with establishing SSH connections.
Here is proof:
Code:
# svcs -a | grep ssh 
online Jun_02 svc:/network/ssh:default
...but here is what can be found in /var/adm/messages

Code:
Jun 7 04:09:16 my_host sshd[11701]: [ID 800047 auth.crit] fatal: Read from socket failed: Connection reset by peer
THIS IS IMPORTANT!!!
This messages does not appear during I establish my ssh connection. It appears irregular.

Does anyone know whats going on ?
 
Old 06-25-2009, 08:45 PM   #2
choogendyk
Senior Member
 
Registered: Aug 2007
Location: Massachusetts, USA
Distribution: Solaris 9 & 10, Mac OS X, Ubuntu Server
Posts: 1,189

Rep: Reputation: 105Reputation: 105
First, the fact that the service is online is no proof that you can make connections. Making a connection is proof.

Is this a server? What is it doing? Is it just yours? Or are lots of people using it? Is there anything just before that in messages that relates to it? Can you correlate the times with your other logs? Auth log? How often does it happen? Have you got logging set high?

It's hard to tell with the little provided, but there have been numerous attacks on ssh. Some are intelligent enough to try not to overload your logs. You can configure your system to be much more restrictive about allowing attempts. You can use tcpwrappers to restrict access. You can use a firewall to block IP addresses that repeatedly try and fail on ssh connections. The connection reset by peer is suspicious. It usually occurs the other way around -- you try to ssh to a server and it drops your connection because tcpwrappers doesn't allow you in. This looks like the person or bot trying to ssh to your machine is then resetting the connection.
 
Old 06-26-2009, 07:37 AM   #3
AlucardZero
Senior Member
 
Registered: May 2006
Location: USA
Distribution: Debian
Posts: 4,634

Rep: Reputation: 519Reputation: 519Reputation: 519Reputation: 519Reputation: 519Reputation: 519
Network problems happen all the time. From what you provided we can't tell what connection was reset, but it's probably just because some part of the network broke for a moment.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] ssh Connection reset by peer -- Suggestions for getting debug messages? pcardout Linux - Networking 5 07-06-2012 02:51 AM
ssh - connection reset by peer laucian Linux - Newbie 4 05-10-2008 02:41 AM
ssh: Connection reset by peer Lotharster Linux - Security 6 01-29-2007 04:54 PM
ssh connection reset by peer Brain Drop Linux - Software 4 07-30-2004 09:18 PM
ssh connection reset by peer bubsgt95 Linux - General 6 06-27-2003 10:24 PM


All times are GMT -5. The time now is 11:50 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration