telnetd[pid]: getpid: peer died: Error 0

[Brad Marks]

System: rp5470 HP-UX 11.i
All of a sudden the above error is occuring. This is only effecting connections via DTCs. But, unfortunately, we have 23 DTCs on the system!
The rest of network connectivity is fine. I can telnet from my PC fine.

/usr/sbin/rpcbind is running.

I don't want to reboot to make this go away, but users are screaming. I'll wait as long as I can.
Help!

[Sundar_7]

Enable inetd logging (inetd -l) and analyze the messages logged in /var/adm/syslog/syslog.log.

Clear out the utmp and utmpx files in /etc

If these two things wont help you out, take an tusc output and see where it is exactly failing.

You can download tusc from the HP-UX porting center.

[Muthukumar_5]

It is discussed as "may be a memory leak problem".

Check this thread for this,
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=122921

What did you get the contents on log enabled inetd informations on syslog file.?

[Brad Marks]

Winds up we had a virus that was flooding the network with ARP packets. The DTCs were the most suseptable to this, as the rest of the network equipment is very high speed. Once we shutdown the infected PCs all is well.

Thanks for your help, nontheless.
Brad

[Brad Marks]

By using 'Ethereal' (a network protocol analyzer) we were able to locate and shut down PCs that were flooding the network with ARP multicast packets.

We suspect that 'winmplyer.exe' is the cause of this virus.

If anyone has these symptoms, try removing it from disk and registry entries for it.

If anyone has had this problem and has any adivice (it keeps reoccuring) I'de appreciate.

Thanks, Brad

[Dave Olker]

Hi Brad,

In your last post, you said:
_____________________

If anyone has had this problem and has any adivice (it keeps reoccuring) I'de appreciate.
_____________________

Which problem specifically are you asking for advice with, the telnetd problem or the virus problem? Which of these problem keeps reoccuring in your environment?

Regards,

Dave

[Brad Marks]

Dave,
I was refering to the virus. I haven't found anything on any of the anti-virus websites and was curious if anyone in the forums has seen this virus.
Thanks,
Brad

[Brad Marks]

problem was caused by virus. Norton anti-virus finally caught and isolated it.