Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Console: Live Response intermittently fails in various ways.

Carbon Black Console: Live Response intermittently fails in various ways.

Environment

  • CBC Sensor: All versions
  • CBC Server:  All versions

Symptoms

  • Intermittent problems may include, failure to connect, large file transfer only partially succeeding, general instability.
  • Confer.log will show a block of messages like this:
  • 09/21/22 13:31:40.876: 18d8 ERROR CMessageObj::ParseReplyHeader: errorCode = 105 (0x00000069), success = false
    09/21/22 13:31:40.876: 18d8 ERROR CMessageObj::ParseReplyHeader: Server returned error (105 0x00000069):
    09/21/22 13:31:40.876: 18d8 ERROR CBLR: Failed to post reply for quit msg! siStatus[25] backendErr[105]

Cause

ErrorCode = 105 means unable to resolve a server's DNS address failed.

Resolution

There is likely a DNS network configuration or device that is not handling the DNS resolution request. If the problem is intermittent, have the site network team troubleshoot configurations where there are interchangeable parts, such as two DNS servers from different providers, or a round robin DNS configuration.
 

Additional Notes


 

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎10-14-2022
Views:
375
Contributors