Posted: Wed Dec 22, 2004 6:09 am Post subject: Persistent AMQ9207 error
Voyager
Joined: 07 Jan 2002 Posts: 85
Happens every evening at 11:00 when our nessus security scanner runs. This is the ONLY server this happens on. Running the same service pack on each MQ box.
WebSphere MQ First Failure Symptom Report |
| ========================================= |
| |
| Date/Time :- Saturday October 30 23:12:56 EDT 2004 |
| Host Name :- hsysiebel03 (SunOS 5. |
| PIDS :- 5724B4103 |
| LVLS :- 530.6 CSD06 |
| Product Long Name :- WebSphere MQ for Sun Solaris |
| Vendor :- IBM |
| Probe Id :- CO052000 |
| Application Name :- MQM |
| Component :- cciTcpReceive |
| Build Date :- Feb 11 2004 |
| CMVC level :- p530-06-L040211 |
| Build Type :- IKAP - (Production) |
| UserID :- 00003598 (mqm) |
| Program Name :- amqcrsta_nd |
| Process :- 00029984 |
| Thread :- 00000001 |
| Major Errorcode :- rrcE_BAD_DATA_RECEIVED |
| Minor Errorcode :- OK |
| Probe Type :- MSGAMQ9207 |
| Probe Severity :- 2 |
| Probe Description :- AMQ9207: The data received from host 'hsysmon01 |
| (xxx.xxx.x.xxx)' is not valid. |
| FDCSequenceNumber :- 0 |
| Comment1 :- xxxxxx01 (xxx.xxx.x.xxx) |
| |
| Comment2 :- TCP/IP |
| |
12/16/04 23:10:59
AMQ9207: The data received from host 'xxxxxxx01 (xxx.xxx.x.xxx)' is not valid.
EXPLANATION:
Incorrect data format received from host 'xxxxxxx01 (xxx.xxx.x.xxx)' over
TCP/IP. It may be that an unknown host is attempting to send data. An FFST file
has been generated containing the invalid data received.
ACTION:
Tell the systems administrator.
----- amqxfdcx.c : 673 --------------------------------------------------------
12/16/04 23:10:59
AMQ6183: An internal WebSphere MQ error has occurred.
EXPLANATION:
An error has been detected, and the WebSphere MQ error recording routine has
been called. The failing process is process 22125.
ACTION:
Use the standard facilities supplied with your system to record the problem
identifier, and to save the generated output files. Contact your IBM support
center. Do not discard these files until the problem has been resolved.
----- amqxfdcx.c : 713 -------------------------------------------------------- _________________ Bob Perry
MQ Administrator
It is strange you would only see this on one server, unless it is the only one with an active listener. You get this FDC when any non-mq app connects to the listener port and sends a packet of data. You can recreate this yourself by doing a telnet to the host on port 1414 ( or whaterver port mq listens on).
I did the telnet and created the same FDC as the port scan software. I'm going to ask that the scanning software be turned off. Thanks for your help. _________________ Bob Perry
MQ Administrator
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum