I have several servers that receive many connections from other servers on the network but recently the logs are showing lots of the error message 'ERROR TcpInputProc - Error encountered for connection from src=(ip address:port). Broken pipe.
I am pretty sure I know it is our AV causing the issue however it's logs are useless so I wanted to know how can I see exactly what files, sockets, etc the AV is accessing or how is it causing broken pipes. Any diagnostic steps I can use would be welcome.
AV causing broken pipes
Re: AV causing broken pipes
As a guess, I'd look at the ulimits of the running processes.
You can trace a program using strace (not for the faint of heart).
strace -p <PID_OF_PROCESS>
I think that will show you all that you've asked for (including a whole bunch of stuff you didn't ask for!)
You can trace a program using strace (not for the faint of heart).
strace -p <PID_OF_PROCESS>
I think that will show you all that you've asked for (including a whole bunch of stuff you didn't ask for!)
Re: AV causing broken pipes
Thanks for the reply aks, I'll give that a go.