IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Watchlist errors/failures in /var/log/cb/job-runner.log: [Errno 99] Cannot assign requested address',))

Watchlist errors/failures in /var/log/cb/job-runner.log: [Errno 99] Cannot assign requested address',))

Environment

  • Cb Response Server 6.x

Symptoms

This message appears in /var/log/cb/job-runner.log occationally during watchlist run, causing the execution to fail:

[Errno 99] Cannot assign requested address

Cause

The message is because the Response master/standalone server has run out of local ports.  Shortage of local ports prevents the Response server from invoking searches until ports are free.  Typically the next watchlist run will succeed.

Resolution

     1. Execute the following as root to expand the port range (on master/standlone server as root user):

syctl -w net.ipv4.ip_local_port_range="15000 64000"

     2. Make the change permanent  by editing your /etc/sysctl.conf file and add the following parameter at the end of the file (confirm before editing that this parameter isn't present):

net.ipv4.ip_local_port_range = 15000 64000

This change does not require a restart, and the error should no longer occur after this change is made.

Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎08-13-2018
Views:
867
Contributors