Why did pcsd daemon crashed during nessus scan - and how can I prevent it from happening again?
Issue
- Security audit was performed on cluster nodes through nessus tool for security audit. As a result of nessus scanning, pcsd cluster status shows offline:
PCSD Status:
node41: Online
node42: Offline
- The
pcsd
appeared to hang or crash when doing a scan with "Nessus scan tool" and the following was logged in the file/var/log/pcsd/pcsd.log
(where X.X.X.X is an IP address):
X.X.X.X - - [11/Jul/2021:03:37:46 +0200] "GET / HTTP/1.1" 302 - 0.0004
X.X.X.X - - [11/Jul/2021:03:37:46 +0200] "GET / HTTP/1.1" 302 - 0.0005
node42.examplerh.com - - [11/Jul/2021:03:37:46 CEST] "GET / HTTP/1.1" 302 0
- -> /
[2021-07-11 03:37:46] ERROR Errno::ECONNRESET: Connection reset by peer
/usr/share/ruby/openssl/buffering.rb:54:in `sysread'
/usr/share/ruby/openssl/buffering.rb:54:in `fill_rbuff'
/usr/share/ruby/openssl/buffering.rb:294:in `eof?'
/usr/share/ruby/webrick/httpserver.rb:80:in `run'
/usr/share/ruby/webrick/server.rb:295:in `block in start_thread'
X.X.X.X - - [11/Jul/2021:03:37:46 +0200] "GET / HTTP/1.1" 302 - 0.0005
X.X.X.X - - [11/Jul/2021:03:37:46 +0200] "GET / HTTP/1.1" 302 - 0.0006
node42.examplerh.com - - [11/Jul/2021:03:37:46 CEST] "GET / HTTP/1.1" 302 0
- -> /
[2021-07-11 03:37:46] ERROR Errno::ECONNRESET: Connection reset by peer
/usr/share/ruby/openssl/buffering.rb:54:in `sysread'
/usr/share/ruby/openssl/buffering.rb:54:in `fill_rbuff'
/usr/share/ruby/openssl/buffering.rb:294:in `eof?'
/usr/share/ruby/webrick/httpserver.rb:80:in `run'
/usr/share/ruby/webrick/server.rb:295:in `block in start_thread'
Environment
Red Hat Enterprise Linux (RHEL) 7 or 8 with the High Availability Add-On
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.