Getting the following messages in the log files. What do they mean and how can we stop them from filling up the log file?
Apr 30 15:45:06 abrhor02orcp010 CCIRMTD: CCIRMTD ->Connect_host : No hat for host IP < ::ffff:18.104.22.168>
Apr 30 15:46:34 abrhor02orcp010 CCIRMTD: CAICCI_W_2014[abrhor02orcp010] Attempt to connect to host <::ffff:22.214.171.124> failed, Check to see if Unicenter is active on ::ffff:126.96.36.199
Apr 30 15:46:36 abrhor02orcp010 CCIRMTD: .CAICCI_F_2048 Could not find hostname gvsgfbhor075.globalvalue.srv.br in /etc/hosts file, errno=<0>
Apr 30 15:46:36 abrhor02orcp010 CCIRMTD: .CAICCI_W_2014[abrhor02orcp010] Attempt to connect to host <gvsgfbhor075.globalvalue.srv.br> failed, Check to see if Unicenter is active on gvsgfbhor075.globalvalue.srv.br
Release : 11.2
Component : UNICENTER UNIVERSAL JOB MANAGEMENT AGENT
These connections are rogue connections that have been established to the
CCI at some time and now CCI is trying to connect back. Quite often this happens if somebody does a port scan through the network.
To rectify this you can either recycle CCI or you can issue the following command to remove the connection from CCI :
ccinet disconnect ::ffff:nnn.nnn.nnn.nnn
Where nnn.nnn.nnn.nnn is the IP address displayed in the CAICCI_W_2014
You can also do the following which will stop all connections from trying to
$CAIGLBL0000/cci/scripts/envsetlocal (755 root sys permissions)
add the following contents:
Recycle unicenter and cci.