Closed Tom-Willemsen closed 5 years ago
I am wondering who is sending these - I looked at the IOC code and it checks all message characters sent with isascii(c) && (isprint(c) || isspace(c)) so unless there is some corruption in transit, its not coming from an IOC.
I had a look in my logs at the relevant time, and found this in the blockserver log:
[Sat Feb 18 00:55:15 2017] ----------------------------------------
[Sat Feb 18 00:55:15 2017] Exception happened during processing of request from ('130.246.132.163', 33444)
[Sat Feb 18 00:55:15 2017] Traceback (most recent call last):
[Sat Feb 18 00:55:15 2017] File "C:\Instrument\Apps\Python\lib\SocketServer.py", line 295, in _handle_request_noblock
[Sat Feb 18 00:55:15 2017] self.process_request(request, client_address)
[Sat Feb 18 00:55:15 2017] File "C:\Instrument\Apps\Python\lib\SocketServer.py", line 321, in process_request
[Sat Feb 18 00:55:15 2017] self.finish_request(request, client_address)
[Sat Feb 18 00:55:15 2017] File "C:\Instrument\Apps\Python\lib\SocketServer.py", line 334, in finish_request
[Sat Feb 18 00:55:15 2017] self.RequestHandlerClass(request, client_address, self)
[Sat Feb 18 00:55:15 2017] File "C:\Instrument\Apps\Python\lib\SocketServer.py", line 651, in __init__
[Sat Feb 18 00:55:15 2017] self.handle()
[Sat Feb 18 00:55:15 2017] File "C:\Instrument\Apps\Python\lib\BaseHTTPServer.py", line 340, in handle
[Sat Feb 18 00:55:15 2017] self.handle_one_request()
[Sat Feb 18 00:55:15 2017] File "C:\Instrument\Apps\Python\lib\BaseHTTPServer.py", line 310, in handle_one_request
[Sat Feb 18 00:55:15 2017] self.raw_requestline = self.rfile.readline(65537)
[Sat Feb 18 00:55:15 2017] File "C:\Instrument\Apps\Python\lib\socket.py", line 476, in readline
[Sat Feb 18 00:55:15 2017] data = self._sock.recv(self._rbufsize)
[Sat Feb 18 00:55:15 2017] error: [Errno 10054] An existing connection was forcibly closed by the remote host
[Sat Feb 18 00:55:15 2017] ----------------------------------------
And this was the IOC log:
[Sat Feb 18 00:55:31 2017] IOC Client 130.246.132.163:40718 connected
[Sat Feb 18 00:55:31 2017] Lost connection with client at 130.246.132.163:40718
[Sat Feb 18 00:55:31 2017] IOC Client 130.246.132.163:40718 disconnected
[Sat Feb 18 00:55:39 2017] IOC Client 130.246.132.163:48622 connected
[Sat Feb 18 00:55:39 2017] Lost connection with client at 130.246.132.163:48622
[Sat Feb 18 00:55:39 2017] IOC Client 130.246.132.163:48622 disconnected
[Sat Feb 18 00:55:53 2017] IOC Client 130.246.132.163:42848 connected
[Sat Feb 18 00:55:53 2017] Database error, error: 'Message Type "-" not recognised' Will retry.
[Sat Feb 18 00:55:54 2017] Database error, error: 'Message Type "-" not recognised' Will retry.
[Sat Feb 18 00:55:55 2017] Database error, error: 'Message Type "-" not recognised' Will retry.
[Sat Feb 18 00:55:56 2017] Database error, error: 'Message Type "-" not recognised' Will retry.
[continues for thousands of lines]
And before you ask, no I wasn't doing anything to IBEX at 1am on a Saturday ;)
130.246.132.163 is vssscan1.rl.ac.uk so you were being scanned!
Thanks for clearing that up then Freddie, that's where the mystery messages are coming from!
Automated scans ~probably~ definitely shouldn't be breaking IBEX though...
Similar message to #3240 but probably not related?
Found when I left IBEX running over a weekend. Potentially related to #2090
XML parser errors should be caught and handled gracefully rather than coming up as
[FATAL]
.Note: The Ibex GUI didn't actually crash because of these errors.