Weird scp messages in webspeed BROKER log

Posted by Paul Koufalis on 01-Jul-2019 16:55

11.6.3 on RHEL

In a webspeed broker log, I see the following. Anyone ever see this before? Not the server log, the broker log. 

Message from server : stty: standard input: Invalid argument
Warning: Permanently added ''myServerName,10.1.1.22'' (RSA) to the list of known hosts.
scp: /tmp/n006_42632.pdf: No such file or directory
(8113)

Message from server : Warning: Permanently added ''someOtherServer,10.1.1.33'' (RSA) to the list of known hosts.
-------------
W A R N I N G
-------------

THIS IS A PRIVATE COMPUTER SYSTEM.

This computer system including all related equipment, network devices
(specifically including Internet access), are provided only for authorized
use. All computer systems may be monitored for all lawful purposes, including
to ensure that their use is authorized, for management of the system, to
facilitate protection against unauthorized access, and to verify security
procedures, survivability and operational security. Monitoring includes
active attacks by authorized personnel and their entities to test or verify
the security of the system. During monitoring, information may be examined,
recorded, copied and used for authorized purposes. All information including
personal information, placed on or sent over this system may be monitored.
Uses of this system, authorized or unauthorized, constitutes consent to
monitoring of this system. Unauthorized use may subject you to criminal
prosecution. Evidence of any such unauthorized use collected during monitoring
may be used for administrative, criminal or other adverse action. Use of this
system constitutes consent to monitoring for these purposes.

/tmp/n642632.pdf: No such file or directory
stty: standard input: Invalid argument
Warning: Permanently added ''yetOnetherServer,10.1.1.44'' (RSA) to the list of known hosts.

 

In case it could be useful:

brkrLogEntryTypes(*)=UBroker.Basic
brkrLogThreshold=0
brkrLoggingLevel(*)=3 (0x3)

 

All Replies

Posted by Paul Koufalis on 01-Jul-2019 17:33

More information: It looks like all this is within the context of an 8113 "Message from server". The webspeed agent must be spitting these errors out to the broker rather than to the server.log file.

Does anyone know if webspeed agents send STDERR back to the broker and STDOUT to the server.log file ?

Posted by Roy Ellis on 01-Jul-2019 19:13

Hi Paul,

can't answer for sure, but...

I assume the customer is making a SYSTEM call (OS-COMMAND) to secure-copy a file to another system?

If a SYSTEM call has errors, I am never sure where those errors will be written, if they are actually written at all.

So it is conceivable the error would be written to the broker log and not the server log.

I will check around and see what others think.

Roy

This thread is closed