I am seeing blocking errors in the window security logs that are blocking communication attempts from tomcat6.exe to the SQL server. Anyone seen this? I am not aware of a reason why tomcat would be attempting to contact the SQL server.
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 12/11/2009 11:28:11 AM
Event ID: 5157
Task Category: Filtering Platform Connection
Level: Information
Keywords: Audit Failure
User: N/A
Computer: vcserver.COM
Description:
The Windows Filtering Platform has blocked a connection.
Application Information:
Process ID: 3920
Application Name: \device\harddiskvolume1\program files (x86)\vmware\infrastructure\tomcat\bin\tomcat6.exe
Network Information:
Direction: Inbound
Source Address: vc ip
Source Port: 60089
Destination Address: sql ip
Destination Port: 1434
Protocol: 17
Filter Information:
Filter Run-Time ID: 0
Layer Name: Receive/Accept
Layer Run-Time ID: 44
I have not specifically seen errors like this, however the plugins in tomcat (performance overview, Storage Management, vCenter Server Status) display data from the database, so this is what I would expect it to be.
I have not specifically seen errors like this, however the plugins in tomcat (performance overview, Storage Management, vCenter Server Status) display data from the database, so this is what I would expect it to be.
yep, we are running vCenters in w2k8, so firewall and UAC are something we have to pay attention to now. For this issue fyi:
This program needs an inbound rule in the vCenter to allow for the correct functioning of performance charts overviews.
%ProgramFiles% (x86)\VMware\Infrastructure\tomcat\bin\tomcat6.exe
I was seeing block entries in windows security log before entry was added as well as error message on performance chart overview pane in vCenter.
was this actually blocking the traffic? or was it just filling up the logs?