[AWA] Windows agents ENDED_LOST - ended undefined (host terminated prematurely)

book

Article ID: 104350

calendar_today

Updated On:

Products

CA Automic Workload Automation - Automation Engine AUTOMIC WORKLOAD AUTOMATION

Issue/Introduction

Windows agents in production environment were down in batch with status ENDED_LOST - ended undefined (host terminated prematurely)
All agents were found stopped and need to be manually restarted
The issue happened twice until the moment of recognition.
Error messages:
------------------ Agent's log ---------------
20180207/135139.049 - U1002200 Received an invalid message from partner '*UNKNOWN' via connection '<ip address>'.
20180207/135139.049 - U1002203 Field 'Length' in message header is invalid.
---------- Service Manager log ----------
20180702/135140.142 - U0022042 Process 'UC4 WinX64-Agent X' abnormal ended with access violation.
--------------------------------------------------

Cause

Investigation:
  • When try to verify the ip address, it turns out to be a Network scanning server, it appears that this network scanning server flooded the network with messages to check for operating ports (including operation ports of Windows Agents)
  • Windows agents which received the message found it to be invalid and forced shut down.
  • This behavior was found and fixed in version 10.0.3

Environment

Windows Agent 10.0.2

Resolution

The behavior of forcing shut down after receiving invalid message was fixed from version 10.0.3