Why did pcsd daemon crashed during nessus scan - and how can I prevent it from happening again?

Solution In Progress - Updated -

Issue

  • Security audit was performed on cluster nodes through nessus tool for security audit. As a result of nessus scanning, pcsd cluster status shows offline:
PCSD Status:
  node41: Online
  node42: Offline
  • The pcsd appeared to hang or crash when doing a scan with "Nessus scan tool" and the following was logged in the file /var/log/pcsd/pcsd.log (where X.X.X.X is an IP address):
X.X.X.X - - [11/Jul/2021:03:37:46 +0200] "GET / HTTP/1.1" 302 - 0.0004
X.X.X.X - - [11/Jul/2021:03:37:46 +0200] "GET / HTTP/1.1" 302 - 0.0005
node42.examplerh.com - - [11/Jul/2021:03:37:46 CEST] "GET / HTTP/1.1" 302 0
- -> /
[2021-07-11 03:37:46] ERROR Errno::ECONNRESET: Connection reset by peer
    /usr/share/ruby/openssl/buffering.rb:54:in `sysread'
    /usr/share/ruby/openssl/buffering.rb:54:in `fill_rbuff'
    /usr/share/ruby/openssl/buffering.rb:294:in `eof?'
    /usr/share/ruby/webrick/httpserver.rb:80:in `run'
    /usr/share/ruby/webrick/server.rb:295:in `block in start_thread'
X.X.X.X - - [11/Jul/2021:03:37:46 +0200] "GET / HTTP/1.1" 302 - 0.0005
X.X.X.X - - [11/Jul/2021:03:37:46 +0200] "GET / HTTP/1.1" 302 - 0.0006
node42.examplerh.com - - [11/Jul/2021:03:37:46 CEST] "GET / HTTP/1.1" 302 0
- -> /
[2021-07-11 03:37:46] ERROR Errno::ECONNRESET: Connection reset by peer
    /usr/share/ruby/openssl/buffering.rb:54:in `sysread'
    /usr/share/ruby/openssl/buffering.rb:54:in `fill_rbuff'
    /usr/share/ruby/openssl/buffering.rb:294:in `eof?'
    /usr/share/ruby/webrick/httpserver.rb:80:in `run'
    /usr/share/ruby/webrick/server.rb:295:in `block in start_thread'

Environment

Red Hat Enterprise Linux (RHEL) 7 or 8 with the High Availability Add-On

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In