HP SIM 5 w/SP4 Caused DoS

[Patrick Tse]

Hi,

I have SIM running for about 3 months now and it worked great until we had a major issue with SIM today:

Out of the blue, SIM send out alerts that all the server it's monitoring are unreachable - all within the same minute. Soon we're having connection issue with our server where we can't ping it. We thought this was a virus or DoS. We view our AV server's logs and we're not hit with a virus or worm. It turned out that the SIM server was broadcasting to all the servers and causing a DoS attack over hte network.

I turned off the SIM server and disconnected it from the network. When I relaunched the SIM it got event logs stating it can't connect to the DB and essentially everything's gone except for security authentication settings.
The SIM server is running everything with local accounts.

I'm think the SIM DB corrupted which led to this behavior.

Anybody experienced this issue before? Any info would of great help! thanks!