Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Sensor Reporting Connection Error 0x80c80006 (DNS)

Sensor Reporting Connection Error 0x80c80006 (DNS)

Version

Cb Response Windows sensors

Issue

A windows sensor is unable to connect to the server with sensor comm logs reporting an 0x80c80006 Couldn't resolve host name error

Note: A description of error codes can be generated on the endpoint itself. In this case:

C:\Windows\system32>c:\Windows\CarbonBlack\cb.exe -e 0x80c80006

0x80C80006: Facility[CURL] Code[0006] Severity[1] Couldn't resolve host name

Cause

This is a DNS lookup related error which means the sensor cannot connect to the Cb Response Server URL specified for its group.

Solution

Run the following on the endpoint:

nslookup MASTERADDRESS

and

ping MASTERADDRESS

If you run nslookup and receive “Non-authoritative answer" then this indicates that the host is public, but there may be an issue with connecting to it via that endpoint that needs to be investigated by a network administrator.

Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎07-07-2017
Views:
1593
Contributors