Re: error 12560 causing webservices slowdown

Thank you Frank, that's very useful

NOTE: in all logs we just replaced real host names with XXXX
this is just paranoid me. I hope it doesn't offend you!

I am not getting it only from my ColdFusion environment, As you can see
below I am also getting the error from inetinfo.exe
------------------------------------------------------------------
Fatal NI connect error 12560, connecting to:

(DESCRIPTION=(ADDRESS=(PROTOCOL=BEQ)(PROGRAM=oracle)(ARGV0=oracleORCL)(ARGS='(DESCRIPTION=(LOCAL=YES)(ADDRESS=(PROTOCOL=beq)))'))(CONNECT_DATA=(SID=ORCL)(CID=(PROGRAM=C:\WINNT\System32\inetsrv\inetinfo.exe)(HOST=XXXXXX)(USER=SYSTEM))))

VERSION INFORMATION:
TNS for 32-bit Windows: Version 8.1.7.0.0 - Production
Oracle Bequeath NT Protocol Adapter for 32-bit Windows: Version
8.1.7.0.0 - Production
Windows NT TCP/IP NT Protocol Adapter for 32-bit Windows: Version
8.1.7.0.0 - Production
Time: 08-MAR-2006 13:34:09
.....
.....
-------------------------------------------------------------------------------------
if I understand correctly BEQ is meant to use locally, so any calls to
BEQ cannot be originated from our programs. there is no DB installed at
our web servers! so does it mean its a hack, spyware, etc. trying to
access the DB using def values? would that explain why the web server
"chokes" when it happens? also, why does it happen to most web servers
simultaneously?

do you have any knowledge on specific malware that works like that?

our IIS seettings declare the user to run our pages, so the SYSTEM does
not seem to be from our application either

is there any other direction we should be looking at?


thanks again,

Roy

.

Relevant Pages

  • Re: Off Topic: EWF files
    ... coffee didn't have a disclaimer saying coffee is hot? ... That may work for not corrupting my WMA files created under Windows. ... let's say someday I get Linux to create them, ... 45% of active web servers run Linux. ...
    (comp.sys.laptops)
  • Re: Deployment Best Practices
    ... > Does anyone have suggesstions for ASP.NET deployment best practices. ... > access to web servers. ... You said that the system admins don't have time to be running msi's. ... have the VD copied up to a new directory in production. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Working on a Web Server 2003
    ... There are a number of pages online that are helpful in securing web servers. ... Microsoft MVP - ASP/.Net ... > Microsoft Windows MVP - Windows Server - Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: Working on a Web Server 2003
    ... There are a number of pages online that are helpful in securing web servers. ... Microsoft MVP - ASP/.Net ... > Microsoft Windows MVP - Windows Server - Directory Services ...
    (microsoft.public.inetserver.iis)
  • RE: How to prevent QA and EM access to DB
    ... Create an application Windows account and only allow users access to the ... the execution of the procedure that envokes SQL Server Application Roles. ... there is little you can do once the system has gone into production. ... > using windows authentication. ...
    (microsoft.public.sqlserver.server)