OpenSSH strange behaviour



Hello everyone, I seem to be having some strange behavior with OpenSSH
and was hoping someone can offer me some insight.

Dell Poweredge 2950 Rack Mount Server
Red Hat Linux Enterprise AS 4.0
All updates, kernel and security patches have been applied
I have about 50 Red Hat machines on my network, all are configured the
same and this machine is the only one with an issue.

In a nutshell, if you SSH to the machine sometimes it works, and
sometimes it doesn't.
Usually, if you can't SSH to the machine you just keep trying and
eventually it seems to allow you to connect and once it does it will
allow others to connect, for a while, before it dies again. Here is
an example of what I mean:

amanda@backup6 90 % ssh thera df -lk
ssh_exchange_identification: read: Connection reset by peer
amanda@backup6 91 % ssh thera df -lk
ssh: connect to host thera port 22: Connection refused
amanda@backup6 92 % ssh thera df -lk
ssh: connect to host thera port 22: Connection refused
amanda@backup6 93 % ssh thera df -lk
ssh: connect to host thera port 22: Connection refused
amanda@backup6 94 % ssh thera df -lk
ssh: connect to host thera port 22: Connection refused
amanda@backup6 95 % ssh thera df -lk
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/sda1 20641788 7711284 11881864 40% /
none 2020772 0 2020772 0% /dev/shm
/dev/sda3 113534884 32996808 74770744 31% /export/home0
/dev/sda2 113534884 44551504 63216048 42% /export/home1
/dev/sda5 103210940 33640452 64327680 35% /export/home2
/dev/sda8 10317828 146812 9646900 2% /opt
/dev/sda7 20641788 78760 19514388 1% /tmp
/dev/sda6 20641788 174688 19418460 1% /usr/local
/dev/sda9 10317828 299140 9494572 4% var


As you can see, it failed 5 times, then it allowed the connection.
I've changed network cables and ports and that didn't help, I ran
"mtr" but it didn't report any packet loss to the machine. I changed
the logging level to DEBUG3 but nothhing is being reported other than
"Connection Closed" and "Failed none" messages.

Does anyone have any ideas? If you need further information just let me know.

Thank you in advance,

mike



Relevant Pages

  • RE: OpenSSH strange behaviour
    ... I have about 50 Red Hat machines on my network, ... if you can't SSH to the machine you just keep trying and ... ssh: connect to host thera port 22: Connection refused ... "mtr" but it didn't report any packet loss to the machine. ...
    (SSH)
  • Re: 2.6.26-rc6-git2: Reported regressions from 2.6.25
    ... not likely to match the revert. ... So if we have a report that client outgoing SSH ... connections hang with the current kernel, ...
    (Linux-Kernel)
  • Re: -current lockup (how to diagnose?)
    ... >> and usually be up to date kernel. ... >> o KDE's virtual screen switching is working. ... >> o ssh from this box is still working. ... I think I have a weekly run report somewhere, ...
    (freebsd-current)
  • Re: Is my home computer at risk knowing that nmap says...
    ... I want ssh for administration, lpd because there is a shared ... I will try to find a friend ... country that can run a nmap scan for me and report the results to see ...
    (comp.os.linux.security)
  • Re: Monitor disconnects (?) in F13
    ... On Fri, Jun 4, 2010 at 10:33 PM, Patrick O'Callaghan ... I haven't yet tried ssh from another ... Killing kdm, killing X and doing 'init 3' all had no ... I'm going to report it to BZ. ...
    (Fedora)