Share your knowledge at the LQ Wiki.
Go Back > Forums > Other *NIX Forums > Solaris / OpenSolaris
User Name
Solaris / OpenSolaris This forum is for the discussion of Solaris, OpenSolaris, OpenIndiana, and illumos.
General Sun, SunOS and Sparc related questions also go here. Any Solaris fork or distribution is welcome.


  Search this Thread
Old 06-25-2009, 06:05 PM   #1
Registered: Nov 2004
Distribution: Slackware/Solaris
Posts: 721

Rep: Reputation: 39
SSH: Connection Reset by Peer

On Solaris 10 SPARC I have NO problem with establishing SSH connections.
Here is proof:
# svcs -a | grep ssh 
online Jun_02 svc:/network/ssh:default
...but here is what can be found in /var/adm/messages

Jun 7 04:09:16 my_host sshd[11701]: [ID 800047 auth.crit] fatal: Read from socket failed: Connection reset by peer
This messages does not appear during I establish my ssh connection. It appears irregular.

Does anyone know whats going on ?
Old 06-25-2009, 09:45 PM   #2
Senior Member
Registered: Aug 2007
Location: Massachusetts, USA
Distribution: Solaris 9 & 10, Mac OS X, Ubuntu Server
Posts: 1,194

Rep: Reputation: 105Reputation: 105
First, the fact that the service is online is no proof that you can make connections. Making a connection is proof.

Is this a server? What is it doing? Is it just yours? Or are lots of people using it? Is there anything just before that in messages that relates to it? Can you correlate the times with your other logs? Auth log? How often does it happen? Have you got logging set high?

It's hard to tell with the little provided, but there have been numerous attacks on ssh. Some are intelligent enough to try not to overload your logs. You can configure your system to be much more restrictive about allowing attempts. You can use tcpwrappers to restrict access. You can use a firewall to block IP addresses that repeatedly try and fail on ssh connections. The connection reset by peer is suspicious. It usually occurs the other way around -- you try to ssh to a server and it drops your connection because tcpwrappers doesn't allow you in. This looks like the person or bot trying to ssh to your machine is then resetting the connection.
Old 06-26-2009, 08:37 AM   #3
Senior Member
Registered: May 2006
Location: USA
Distribution: Debian
Posts: 4,824

Rep: Reputation: 613Reputation: 613Reputation: 613Reputation: 613Reputation: 613Reputation: 613
Network problems happen all the time. From what you provided we can't tell what connection was reset, but it's probably just because some part of the network broke for a moment.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] ssh Connection reset by peer -- Suggestions for getting debug messages? pcardout Linux - Networking 5 07-06-2012 03:51 AM
ssh - connection reset by peer laucian Linux - Newbie 4 05-10-2008 03:41 AM
ssh: Connection reset by peer Lotharster Linux - Security 6 01-29-2007 05:54 PM
ssh connection reset by peer Brain Drop Linux - Software 4 07-30-2004 10:18 PM
ssh connection reset by peer bubsgt95 Linux - General 6 06-27-2003 11:24 PM > Forums > Other *NIX Forums > Solaris / OpenSolaris

All times are GMT -5. The time now is 04:52 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration