telnetd error: "getpid : peer died: Bad file number"

[OLIVA_1]

Hello,

I have a lot of errors as below in /var/adm/syslog/syslog.log file :

Oct 19 11:15:11 xxxxx telnetd[2993]: getpid : peer died: Bad file number

Where xxxxx is the hostname

I have already incresed npty, nstrpty kernel parameters from 60 to 120 and maxuprc from 75 to 150, without success...

Someone can help me to supress this kind of error ?

Thanks,

[OLIVA_1]

The OS is HPUX 10.20

[Peter Godron]

Hi,
I am sure you have seen:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=511833

Have you looked into the 10.20 patches mentioned, which are available at:
ftp://ftp.itrc.hp.com/archived_patches/hp-ux_patches/s700_800/10.X

[Rita C Workman]

Here's some thoughts:

Make sure your ARPA patches are current. Your on 10.2, so that is an issue, cause that version is basically...gone.

You increased npty, and maxuprc, but you might want to consider nfile,nproc and maybe maxfiles. {Wondering if there is anything in your syslog about these parms...}

The last thing to check might be your tmout, time out settings. Because if your resolution is taking too long it could just be dropping them.
On resolution it follows the nsswitch settings. Example: hosts, dns
Would try hostfile, fail and then go to dns. If you don't have dns set up internally it has to hit the 'world' to resolve and that could take too long....if your tmout is set low, then you get failures.

Just a couple thoughts to try...and rule out things...

Rgrds,
Rita

[OLIVA_1]

Thanks to all.

Rita where can I find tmout value ?

Thanks,

[rariasn]

# echo $TMOUT

View TMOUT variable in /etc/profile or $HOME/.profile files.

rgs

[Bill Hassell]

These messages are VERY common in 10.20 and they are due to network disconnects. Are most of your users connecting over consumer grade networks like DSL or cable modem (or worse, plain old modems)? There isn't much you can do except to finish patching your system(s). The pty parameters won't help -- when these are undersized, you get a very different error message and new users will be unable to connect.

If you are lucky and have the Dec 2001 Support Plus CDROM, you'll want to load all the HWE and QPK patches. Because 10.20 has been unsupported for so long, the only way you can go over the patches individually, is to go to the obsolete patch server:

ftp://ftp.itrc.hp.com/archived_patches/hp-ux_patches

then click on the patch name on the left to read the description. Repeat about 1850 times to see which patches you need. You'll have a lot of dependencies which you can read in the text file.

Or you can just ignore the errors and filter them out when you rotate your syslog file.