KpyM Telnet/SSH Server - Forum
Difficulty logging on after prolonged use
Frank Quinn Difficulty logging on after prolonged use
 
I have real difficulty logging onto the machine when the machine has been up for a few days - you usually get onto it, but it takes lots of attempts...


Kroum Grigorov
 
Could you check OS resources before the problem begins and when the problem appears.
- CPU usage
- memory usage
- handles
- number of term.exe/term-ssh.exe processes

Could you also check the files in "KTS\log" directory.

Kroum


Frank Quinn Difficulty Logging On
 
Hi,

Sorry for the delay in getting back to you - I have this set in the config file:


allowed_login_list = ":username:"

And the username corresponds to a proper user under windows as well as in the config file, but kts-log reveals:

1016 : 1028 2007- 1- 8 8:25:39 920 : 0: KTS connected to <ip address>:32819

1352 : 620 2007- 1- 8 8:25:40 185 : 0: term-ssh.exe started

1352 : 620 2007- 1- 8 8:25:40 201 : 0: connected to <ip address>:32819

1352 : 620 2007- 1- 8 8:25:40 701 : 0: ssh initialized

1352 : 652 2007- 1- 8 8:25:41 764 : 0: login refused: [ username ] - Logon failure: unknown user name or bad password.



1352 : 652 2007- 1- 8 8:25:41 764 : 0: login refused: [ username ] - Logon failure: unknown user name or bad password.



1352 : 652 2007- 1- 8 8:25:41 764 : 0: login refused: [ username ] - Logon failure: unknown user name or bad password.



1352 : 620 2007- 1- 8 8:25:41 780 : 0: max login attempts

1352 : 620 2007- 1- 8 8:25:46 797 : 0: term-ssh.exe end


... But I have set it up so user "username" doesn't need a password - It used to work but now it doesn't work at all. I'm running kpym as a service. Doesn't work even when I use putty to connect to 127.0.0.1. This is after a reboot as well.


Frank Quinn Not the same problem
 
Sorry - not the same problem - somebody just changed the password when I was away - next time I catch it, i'll send u the log.


Frank Quinn Got the error
 
3668 : 1500 2007- 1- 9 18:43:58 828 : 0: KTS connected to <ip address>:36196

3512 : 2888 2007- 1- 9 18:43:58 922 : 0: term-ssh.exe started

3512 : 2888 2007- 1- 9 18:43:58 922 : 0: connected to <ip address>:36196

3512 : 2888 2007- 1- 9 18:43:59 328 : 0: ssh initialized

3512 : 2924 2007- 1- 9 18:44: 0 406 : 0: login accepted: [ username ]

3512 : 2888 2007- 1- 9 18:44: 0 422 : 0: shell is dead

3512 : 2888 2007- 1- 9 18:44: 5 421 : 0: term-ssh.exe end


Kroum Grigorov
 
The log says that KTS has started cmd.exe (%comspec%) and then cmd.exe has died immediately.
Saying that it hapens after prolonged use, I assume this problem is due to exhaust of some of the system resources.
Can you give me some more info, how long(days) does it take for the problem to happen and how many connections do you normaly have per day?
Could you also check the windows event log for suspicios messages?
If possible, could you run the pslist.exe utility from Windows Sysinternals, when you have this problem, and send me the output.
pslist.exe is part of the PsTools package, you can get it from this page.

If you prefer we can discuss this off the forum, just mail me at support@kpym.com

Kroum


Frank Quinn
 
Hi,

Finally got to get back to you, pslist returns this:

C:\Documents and Settings\wauto\Local Settings\Temp\PsTools>pslist | grep cmd

pslist v1.28 - Sysinternals PsList
Copyright ⌐ 2000-2004 Mark Russinovich
Sysinternals

cmd 3948 8 1 34 2048 0:00:00.078 66:58:19.619
cmd 2968 8 1 64 2160 0:00:00.250 0:25:51.552
cmd 892 8 1 34 2036 0:00:00.140 0:00:43.780
cmd 524 8 1 33 2028 0:00:00.046 0:00:40.468

And the machine was practically idle otherwise. When you hammer it for a while, it lets you in, but if not, it fails.

This is the full report:

Name Pid Pri Thd Hnd Priv CPU Time Elapsed Time
Idle 0 0 4 0 0 268:23:07.593 0:00:00.000
System 4 8 87 1223 0 0:04:28.421 0:00:00.000
smss 1204 11 4 28 192 0:00:00.046 67:54:46.659
csrss 1288 13 15 563 2356 0:04:26.906 67:54:42.753
winlogon 1316 13 23 689 9788 0:00:03.453 67:54:41.269
services 1360 9 16 309 2040 0:00:04.484 67:54:41.128
lsass 1372 9 18 441 2812 0:04:25.171 67:54:41.113
ati2evxx 1552 8 4 63 572 0:00:00.031 67:54:40.566
svchost 1568 8 21 223 2752 0:00:00.796 67:54:40.550
svchost 1628 8 10 288 1776 0:00:00.781 67:54:40.300
svchost 1980 8 77 1599 20704 0:10:27.031 67:54:40.238
svchost 448 8 6 97 1284 0:00:00.187 67:54:40.191
svchost 552 8 14 206 1756 0:00:00.125 67:54:40.113
spoolsv 796 8 11 120 3088 0:00:00.093 67:54:39.441
nfsclnt 968 8 7 73 708 0:00:00.046 67:54:37.300
telnetd 1156 8 3 103 2520 0:00:00.328 67:54:35.613
mdm 1184 8 5 93 868 0:00:00.031 67:54:35.534
sqlservr 1236 8 28 307 36040 1:11:33.656 67:54:35.503
rvntsctl 1440 8 2 22 280 0:00:00.031 67:54:35.394
rvd 180 8 10 93 736 0:00:00.109 67:54:35.363
WinVNC 1676 8 4 119 1808 0:00:03.343 67:54:35.206
PSXRUN 1760 8 3 41 352 0:00:00.031 67:54:35.128
PSXSS 1788 13 16 842 2000 0:00:02.984 67:54:35.097
init 404 8 2 8 632 0:00:00.015 67:54:34.441
inetd 876 8 2 6 1588 0:00:00.015 67:54:34.300
zzInterix 396 8 2 10 580 0:00:00.015 67:54:33.488
alg 668 8 6 109 1172 0:00:00.046 67:54:33.316
krbcc32s 568 8 2 27 352 0:00:00.015 67:54:28.425
ati2evxx 1096 8 4 65 728 0:00:00.046 67:54:27.738
explorer 2072 8 12 409 12644 0:00:17.046 67:54:27.659
CAPing 2488 8 1 28 652 0:00:01.078 67:54:25.863
msmsgs 2516 8 2 161 1324 0:00:00.140 67:54:25.800
krbcc32s 3028 8 4 43 400 0:00:00.046 67:53:55.225
term-ssh 3252 8 1 94 3592 0:00:00.453 66:58:05.541
cmd 3948 8 1 34 2048 0:00:00.078 66:58:03.900
ntvdm 3048 8 3 36 1184 0:00:00.140 66:58:03.853
term-ssh 3624 8 1 94 3576 0:00:00.234 0:25:37.208
cmd 2968 8 1 64 2160 0:00:00.250 0:25:35.833
ntvdm 3888 8 3 36 1184 0:00:00.265 0:25:35.802
firefox 3808 8 15 266 19876 0:00:08.515 0:02:40.827
notepad 3468 8 1 33 2968 0:00:00.843 0:02:15.061
term-ssh 2900 8 1 94 3556 0:00:00.265 0:00:29.921
cmd 892 8 1 34 2036 0:00:00.140 0:00:28.062
ntvdm 2464 8 3 36 1184 0:00:00.250 0:00:28.015
cmd 524 8 1 32 1988 0:00:00.046 0:00:24.749
pslist 2548 13 2 94 1024 0:00:00.031 0:00:00.031

When i restart the machine, it will run fine for days, then this will start happening again... always with the same error as mentioned in the pervious post.


Frank Quinn
 
In the off chance this post supports html...

<pre>
Name Pid Pri Thd Hnd Priv CPU Time Elapsed Time
Idle 0 0 4 0 0 268:23:07.593 0:00:00.000
System 4 8 87 1223 0 0:04:28.421 0:00:00.000
smss 1204 11 4 28 192 0:00:00.046 67:54:46.659
csrss 1288 13 15 563 2356 0:04:26.906 67:54:42.753
winlogon 1316 13 23 689 9788 0:00:03.453 67:54:41.269
services 1360 9 16 309 2040 0:00:04.484 67:54:41.128
lsass 1372 9 18 441 2812 0:04:25.171 67:54:41.113
ati2evxx 1552 8 4 63 572 0:00:00.031 67:54:40.566
svchost 1568 8 21 223 2752 0:00:00.796 67:54:40.550
svchost 1628 8 10 288 1776 0:00:00.781 67:54:40.300
svchost 1980 8 77 1599 20704 0:10:27.031 67:54:40.238
svchost 448 8 6 97 1284 0:00:00.187 67:54:40.191
svchost 552 8 14 206 1756 0:00:00.125 67:54:40.113
spoolsv 796 8 11 120 3088 0:00:00.093 67:54:39.441
nfsclnt 968 8 7 73 708 0:00:00.046 67:54:37.300
telnetd 1156 8 3 103 2520 0:00:00.328 67:54:35.613
mdm 1184 8 5 93 868 0:00:00.031 67:54:35.534
sqlservr 1236 8 28 307 36040 1:11:33.656 67:54:35.503
rvntsctl 1440 8 2 22 280 0:00:00.031 67:54:35.394
rvd 180 8 10 93 736 0:00:00.109 67:54:35.363
WinVNC 1676 8 4 119 1808 0:00:03.343 67:54:35.206
PSXRUN 1760 8 3 41 352 0:00:00.031 67:54:35.128
PSXSS 1788 13 16 842 2000 0:00:02.984 67:54:35.097
init 404 8 2 8 632 0:00:00.015 67:54:34.441
inetd 876 8 2 6 1588 0:00:00.015 67:54:34.300
zzInterix 396 8 2 10 580 0:00:00.015 67:54:33.488
alg 668 8 6 109 1172 0:00:00.046 67:54:33.316
krbcc32s 568 8 2 27 352 0:00:00.015 67:54:28.425
ati2evxx 1096 8 4 65 728 0:00:00.046 67:54:27.738
explorer 2072 8 12 409 12644 0:00:17.046 67:54:27.659
CAPing 2488 8 1 28 652 0:00:01.078 67:54:25.863
msmsgs 2516 8 2 161 1324 0:00:00.140 67:54:25.800
krbcc32s 3028 8 4 43 400 0:00:00.046 67:53:55.225
term-ssh 3252 8 1 94 3592 0:00:00.453 66:58:05.541
cmd 3948 8 1 34 2048 0:00:00.078 66:58:03.900
ntvdm 3048 8 3 36 1184 0:00:00.140 66:58:03.853
term-ssh 3624 8 1 94 3576 0:00:00.234 0:25:37.208
cmd 2968 8 1 64 2160 0:00:00.250 0:25:35.833
ntvdm 3888 8 3 36 1184 0:00:00.265 0:25:35.802
firefox 3808 8 15 266 19876 0:00:08.515 0:02:40.827
notepad 3468 8 1 33 2968 0:00:00.843 0:02:15.061
term-ssh 2900 8 1 94 3556 0:00:00.265 0:00:29.921
cmd 892 8 1 34 2036 0:00:00.140 0:00:28.062
ntvdm 2464 8 3 36 1184 0:00:00.250 0:00:28.015
cmd 524 8 1 32 1988 0:00:00.046 0:00:24.749
pslist 2548 13 2 94 1024 0:00:00.031 0:00:00.031
</pre>


Frank Quinn
 
I have also just learned from one of my colleagues that this doess not happen with putty - only with openssh-based clients (linux/cygwin).


 

© 2007 - 2008 Kroum Grigorov
Powered by phpBB © 2001, 2005 phpBB Group