[EHPweb] FW: More problems with ehzmenlo & ehznorth

[Jim Luetgert]

Stan did the upgrades on ehzmenlo and ehznorth about 2 weeks ago.
There were some initial communication problems that were quickly 
resolved. The problems sending files to these machines using scp began 
between 2AM and 3AM PDT on July 4. I am unable to ssh to either machine 
to evaluate their file systems.

I don't have a similar automated way to test ncsn's access to the 
ehpmaster mysql db. All I know is that a script that worked fine last 
week no longer works.

Nsmprt1.wr.usgs.gov, a machine on the 130.118.43 subnet, has had no 
problems accessing the ehpmaster db.

I now notice I can no longer get to nsmprt1 using Fetch (SFTP) via VPN. 
This is something that I have relied upon for years.

Who is messing with our computers? Why is it being done on weekends?

-Jim



Christopher J Bidwell wrote:
>>From ehpmaters perspective, I haven't noticed any mysql denies. I don't have access to any of these systems other than ehzmenlo, but are there any full filesystems?  I think may have upgraded one or both of these systems so hopefully he will chime in here somewhere. Not sure if it may be relevant tothis problem. 
> --------------
> Thanks,
> 
> Chris Bidwell, RHCT
> Web Admin
> Geologic Hazards Team
> 303-273-8642
> cbidwell at usgs.gov
> (Sent via Blackberry)
> 
> 
> ----- Original Message -----
> From: "David Oppenheimer" [oppen at usgs.gov]
> Sent: 07/05/2009 04:29 PM MST
> To: <EHPweb at geohazards.usgs.gov>
> Cc: James Luetgert
> Subject: [EHPweb] FW: More problems with ehzmenlo & ehznorth
> 
> 
> 
> fyi
> 
> -------------------------------------------------------
> David Oppenheimer                   office:650.329.4792
> U.S. Geological Survey              fax:   650.329.4732
> 345 Middlefield Road.-MS 977    email: oppen at usgs.gov
> Menlo Park, CA 94025
> 
> 
> -----Original Message-----
> From: Jim Luetgert [mailto:luetgert at usgs.gov] 
> Sent: Sunday, July 05, 2009 9:43 AM
> To: 'kohler'; silver at usgs.gov; stan at bort.gps.caltech.edu
> Subject: More problems with ehzmenlo & ehznorth
> 
> I just discovered that communications from ncsn (ehzmenlo) to other 
> machines has also been compromised. Processes on ncsn that access the 
> MySQL DB on ehpmaster can no longer connect!
> 
> Warning: mysql_connect() [function.mysql-connect]: Unknown MySQL server 
> host 'ehpmaster.wr.usgs.gov' (2) in 
> /home/html/ncsn/waveforms/Vol_List.php on line 9
> 
> Any ideas what happened? (and how to fix it?)
> 
> -Jim
> 
> 
> Jim Luetgert wrote:
>> This morning (Sat., July 4) at ~3AM PDT, secure shell communications to 
>> ehzmenlo and ehznorth from machines in the 130.118.43 subnet ceased to 
>> function.  Attempts to ssh from nsmprt1 give these results:
>>
>> ppicker on nsmprt1 [6]: ssh ehznorth
>> ssh_exchange_identification: Connection closed by remote host
>> ppicker on nsmprt1 [7]: ssh ehzmenlo
>> ssh_exchange_identification: Connection closed by remote host
>>
>> Communication with ehzden and ehzeast are unaffected.
>>
>> Any ideas?
>>
>> -Jim
>>
> 
> _______________________________________________
> EHPweb mailing list
> EHPweb at geohazards.usgs.gov
> https://geohazards.usgs.gov/mailman/listinfo/ehpweb
>