Why did pcsd daemon crashed during nessus scan - and how can I prevent it from happening again?

Solution Verified - Updated -

Issue

  • Security audit was performed on cluster nodes through nessus tool for security audit. As a result of nessus scanning, pcsd cluster status shows offline:
PCSD Status:
  node41: Online
  node42: Offline
  • The pcsd appeared to hang or crash when doing a scan with "Nessus scan tool" and the following was logged in the file /var/log/pcsd/pcsd.log (where X.X.X.X is an IP address):
X.X.X.X - - [11/Jul/2021:03:37:46 +0200] "GET / HTTP/1.1" 302 - 0.0004
X.X.X.X - - [11/Jul/2021:03:37:46 +0200] "GET / HTTP/1.1" 302 - 0.0005
node42.examplerh.com - - [11/Jul/2021:03:37:46 CEST] "GET / HTTP/1.1" 302 0
- -> /
[2021-07-11 03:37:46] ERROR Errno::ECONNRESET: Connection reset by peer
    /usr/share/ruby/openssl/buffering.rb:54:in `sysread'
    /usr/share/ruby/openssl/buffering.rb:54:in `fill_rbuff'
    /usr/share/ruby/openssl/buffering.rb:294:in `eof?'
    /usr/share/ruby/webrick/httpserver.rb:80:in `run'
    /usr/share/ruby/webrick/server.rb:295:in `block in start_thread'
X.X.X.X - - [11/Jul/2021:03:37:46 +0200] "GET / HTTP/1.1" 302 - 0.0005
X.X.X.X - - [11/Jul/2021:03:37:46 +0200] "GET / HTTP/1.1" 302 - 0.0006
node42.examplerh.com - - [11/Jul/2021:03:37:46 CEST] "GET / HTTP/1.1" 302 0
- -> /
[2021-07-11 03:37:46] ERROR Errno::ECONNRESET: Connection reset by peer
    /usr/share/ruby/openssl/buffering.rb:54:in `sysread'
    /usr/share/ruby/openssl/buffering.rb:54:in `fill_rbuff'
    /usr/share/ruby/openssl/buffering.rb:294:in `eof?'
    /usr/share/ruby/webrick/httpserver.rb:80:in `run'
    /usr/share/ruby/webrick/server.rb:295:in `block in start_thread'

Environment

Red Hat Enterprise Linux (RHEL) 7 or 8 with the High Availability Add-On

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content