During normal processing, CA COMMON SERVICES TASK CCITCPGW receives an error.

book

Article ID: 6836

calendar_today

Updated On:

Products

CA CIS CA Common Services for z/OS CA 90s Services CA Database Management Solutions for DB2 for z/OS CA Common Product Services Component CA Common Services CA Datacom/AD CA ecoMeter Server Component FOC CA Easytrieve Report Generator for Common Services CA Infocai Maintenance CA IPC Unicenter CA-JCLCheck Common Component CA Mainframe VM Product Manager CA Chorus Software Manager CA On Demand Portal CA Service Desk Manager - Unified Self Service CA PAM Client for Linux for zSeries CA Mainframe Connector for Linux on System z CA Graphical Management Interface CA Web Administrator for Top Secret CA CA- Xpertware CA Compress Data Compression for MVS CA Compress Data Compression for Fujitsu

Issue/Introduction

CCITCPGW/CCISSLGW may start to receive CAS9899E - Task XX - Error: Invalid CTH header received.

13.00.09 STC04207 CAS9855I Task 20 has connection from (10.132.134.158):59878 

13.00.17 STC04207 CAS9855I Task 21 has connection from (10.132.134.158):59898 

 

13.00.09 STC04207 CAS9855I Task 20 has connection from (10.132.134.158):59878 

13.00.17 STC04207 CAS9855I Task 21 has connection from (10.132.134.158):59898 

 

then continuous:

STC04207 CAS9899E Task 21 - Error: Invalid CTH header received 

13.00.17 STC04207 CAS9890E - Vers: 16 Cpu: 3 

Cause

CCITCPGW is one of CA'S TCPIP APPLICATIONS. 

 

An outside program is trying to connect to this mainframe (from another mainframe, windows or unix), which is the default port for CCITCPGW.

Addr = 141.202.66.2 

Somewhere in this outside program, it also has the port number that CCITCPGW is using 7000. 

 

CCITCPGW is attempting to use this unrecognized data, transmitted by this outside program.

This results in CAS9899E TASK 0029 ERROR: INVALID PACKET HEADER RECEIVED. 

INVALID CTH will always be some non cci user trying to send data to CCI (in error). 

 

Then stops, because the user program cancels... 

 

There is no way for CA/CCI support to block anyone who tries this. 

 

Environment

Common Services r14.1 using CCITCPGW or CCISSLGW

Resolution

If CCITCPGW is active, an outside program cannot use port 7000.

 

 

Additional Information

https://docops.ca.com/ca-common-services-for-z-os/14-1/en/message-reference#modal=content&path=/ca-common-services-for-z-os-messages/14-1/en/message-reference/cas9-messages/cas9899e&title=IENBUzk4OTlF