ssh disconnect ??

[Lukas Grijander]

Hi all.

I'm having this problem:

The users connect from Win95 (teraterm with ssh extension) to the HP-UX box with ssh.

All these days before there were no problem, but yesterday the teraterm windows desapear !!

The processes in HP-UX were still running (sshd, ksh, and other programs), the connection was ESTABLISHED (netstat -a).

netstat -a in the client PC didn??t show any connection to the HP-UX, and as I've said the teraterm window was desapeared.

What's happening ??

Thank's in advance.
Rafa

[U.SivaKumar_2]

hi,
Have you Installed any application in the PC side recently , before the problem starts ?.
Any antivirus software or some other application ?.

regards,.
U.SivaKumar

[Steven Sim Kok Leong]

Hi,

Are you running a firewall between the client PC and the HP-UX server? If there is a firewall, what is the firewall's session timeout value? If your firewall timeouts the session, sends a RST to the client but somehow does not send a RST to the HP-UX server, the session will remain in the established state on the HP-UX server until the tcp_keepalive_interval expires on the server.

Hope this helps. Regards.

Steven Sim Kok Leong

[Brian Hackley]

Hi,

If the connections are showing up as "ESTABLISHED" on the HP-UX end, then normally must go looking in your network to find what exactly lies between the PC's and the HP-UX box. Also, check your HP-UX box to see if it is running any Firewall-1 or IPFilter software (e.g. swlist -l product).

At the HP-UX end, you can collect a nettl trace (see postings or ITRC Doc KBRC00001272. Start the nettl trace, reproduce the problem (yeah you may have to wait for the phone to ring...), and then stop the nettl trace ASAP. Find the IP address on the PC with the problem e.g. ipconfig (?winipcfg) and use a netfmt filter file:
filter ip_saddr ip.addr.of.pc
filter ip_daddr ip.addr.of.pc

If the problem lies in between the HP-UX box and the PC, you'll see some TCP data and/or ACK as the last packet traffic. In which case, you'd have to debug other parts of the net, or the PC's.
Win95 is old stuff, like HPUX 10.01 ;-)

Best of luck,

Brian Hackley

[Lukas Grijander]

Thank you all.

It was a hw problem ... (a hub).

Best regards.