RequestProcessor Status fails to start with event code 1008

Products

• Data Loss Prevention Network Prevent for Email

Issue/Introduction

Network Prevent for Email server stuck in starting state on Enforce console, RequestProcessor status is stopped.
Tried starting it stops again and we can see event code 1008 on Enforce console > events:

 

 

RequestProcessor Logs show:

com.vontu.mta.rp.AbstractRequestProcessor createListenerSocket
WARNING: Listener creation failed.
java.net.BindException: Address already in use: bind
 at sun.nio.ch.Net.bind0(Native Method)
 at sun.nio.ch.Net.bind(Net.java:433)
 at sun.nio.ch.Net.bind(Net.java:425)
 at sun.nio.ch.ServerSocketChannelImpl.bind(ServerSocketChannelImpl.java:223)
 at sun.nio.ch.ServerSocketAdaptor.bind(ServerSocketAdaptor.java:74)
 at com.vontu.mta.rp.AbstractRequestProcessor.createListenerSocket(AbstractRequestProcessor.java:190)
 at com.vontu.mta.rp.AbstractRequestProcessor.<init>(AbstractRequestProcessor.java:76)
 at com.vontu.mta.rp.RequestProcessor.<init>(RequestProcessor.java:137)
 at com.vontu.mta.rp.RequestProcessor.<init>(RequestProcessor.java:123)
 at com.vontu.mta.rp.RequestProcessor.main(RequestProcessor.java:105)
com.vontu.mta.rp.AbstractRequestProcessor createListenerSocket
SEVERE: (SMTP_CONNECTION.5205) Could not create listener (address=0.0.0.0:2025 reason=java.net.BindException: Address already in use: bind)
om.vontu.mta.rp.RequestProcessor main
SEVERE: Terminating request processor: 

Environment

DLP 15.x

Cause

Another program was binding to port 2025 configured for RequestProcessor listener. In this scenario it was rcgui.exe(used by LAN Desk tool)

Resolution

Stop the program that is already bound to the port in question. Perform below steps to identify the application using the port and stop it:

1. Find the port that the RequestProcessor is trying to bind. Look at the RequestProcessor logs before binding error. In this case it shows port as 2025

2. Next run the following command using the port listed in the logs:
Netstat -ano | find "2025"

3. Check the process ID (PID) at the end of the line that is displayed after the "LISTENING" message in output of step 2.

4. Run the following command to get the process using port 2025, In the following exampe we use 3476
tasklist /FI "PID eq 3476"
The output will show Image name for the application. Stop that program and reconfigure it to use another port. 

5. To kill the process using command, run following command: 
Taskkill /FI "PID eq 3476"

6. Restart the Detection Service service and refresh enforce console and the network prevent for email services should be running.