Thank you, Patti! You were correct. It turns out there was a vulnerability scan 
run against that network at that time.

--Shawn

From: "Clark, Patti" <clar...@ornl.gov>
Date: Monday, March 5, 2018 at 8:05 AM
To: Shawn Rappaport <srappap...@shutterfly.com>, 
"bacula-users@lists.sourceforge.net" <bacula-users@lists.sourceforge.net>
Subject: Re: [Bacula-users] Packet size too big errors

Not from your backup.  You have something on the network that is scanning the 
server your director is running on.  Probably Nessus.  I’m sure the client IP 
is a clue.

Patti

From: Shawn Rappaport <srappap...@shutterfly.com>
Date: Sunday, March 4, 2018 at 6:06 PM
To: "bacula-users@lists.sourceforge.net" <bacula-users@lists.sourceforge.net>
Subject: [Bacula-users] Packet size too big errors

I’m running Bacula 9.0.6 on CentOS 7.3. Today I received the following errors 
when my catalog was backing up:

03-Mar 12:27 xbacdirector01-lv.internal.shutterfly.com-dir: ERROR in 
authenticate.c:330 UA Hello from client:10.32.12.18:9101 is invalid. Len=0

03-Mar 12:27 xbacdirector01-lv.internal.shutterfly.com-dir: ERROR in 
authenticate.c:330 UA Hello from client:10.32.12.18:9101 is invalid. Len=-4
03-Mar 12:27 xbacdirector01-lv.internal.shutterfly.com-dir JobId 0: Fatal 
error: bsock.c:819 Packet size=121984032 too big from 
"client:10.32.12.18:9101". Maximum permitted 1000000. Terminating connection.

03-Mar 12:28 xbacdirector01-lv.internal.shutterfly.com-dir: ERROR in 
authenticate.c:330 UA Hello from client:10.32.12.18:9101 is invalid. Len=-4
03-Mar 12:28 xbacdirector01-lv.internal.shutterfly.com-dir JobId 0: Fatal 
error: bsock.c:819 Packet size=138759248 too big from 
"client:10.32.12.18:9101". Maximum permitted 1000000. Terminating connection.

03-Mar 12:28 xbacdirector01-lv.internal.shutterfly.com-dir: ERROR in 
authenticate.c:330 UA Hello from client:10.32.12.18:9101 is invalid. Len=-4
03-Mar 12:28 xbacdirector01-lv.internal.shutterfly.com-dir JobId 0: Fatal 
error: bsock.c:819 Packet size=50331667 too big from "client:10.32.12.18:9101". 
Maximum permitted 1000000. Terminating connection.

I manually ran a backup of my catalog after I received the errors and it was 
successful.

Does anyone know why I would be getting these messages and if it’s something to 
be concerned about?

--Shawn
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to