Web connection not possible after watching some event

Forum for questions and support relating to the 1.24.x releases only.
Locked
Schuhkasten
Posts: 48
Joined: Thu Jun 03, 2010 6:43 am

Web connection not possible after watching some event

Post by Schuhkasten »

Hello,

I have ZM 1.2.4.11 running since 1 year without problems. Ubuntu 9.10 Desktop
Since few days it always "crashes" when I watch some records.
How can I check what is wrong?

Here the content of the logs:

12/09/11 19:44:45.335664 zmdc[2393].INF [Server starting at 11/12/09 19:44:45]
12/09/11 19:44:48.704817 zmdc[2393].INF ['zmc -d /dev/video0' starting at 11/12/09 19:44:48, pid = 2417]
12/09/11 19:44:49.110304 zmdc[2393].INF ['zmc -m 3' starting at 11/12/09 19:44:49, pid = 2419]
12/09/11 19:44:49.513583 zmdc[2393].INF ['zma -m 3' starting at 11/12/09 19:44:49, pid = 2421]
12/09/11 19:44:50.018447 zmdc[2393].INF ['zmc -m 6' starting at 11/12/09 19:44:50, pid = 2436]
12/09/11 19:44:50.612839 zmdc[2393].INF ['zma -m 6' starting at 11/12/09 19:44:50, pid = 2496]
12/09/11 19:44:51.267302 zmdc[2393].INF ['zmfilter.pl' starting at 11/12/09 19:44:51, pid = 2503]
12/09/11 19:44:51.862748 zmdc[2393].INF ['zmaudit.pl -c' starting at 11/12/09 19:44:51, pid = 2505]
12/09/11 19:44:52.612455 zmdc[2393].INF ['zmwatch.pl' starting at 11/12/09 19:44:52, pid = 2507]
12/09/11 19:50:26.130279 zmdc[2393].ERR ['zma -m 3' exited abnormally, exit status 11]
12/09/11 19:50:26.130889 zmdc[2393].INF [Starting pending process, zma -m 3]
12/09/11 19:50:26.132473 zmdc[2393].INF ['zma -m 3' starting at 11/12/09 19:50:26, pid = 2760]
12/09/11 19:51:41.391760 zmdc[2393].ERR ['zmc -m 6' exited abnormally, exit status 11]
12/09/11 19:51:41.392388 zmdc[2393].INF [Starting pending process, zmc -m 6]
12/09/11 19:51:41.394068 zmdc[2393].INF ['zmc -m 6' starting at 11/12/09 19:51:41, pid = 2763]
12/09/11 19:52:19.885439 zmdc[2393].ERR ['zmc -m 3' exited abnormally, exit status 11]
12/09/11 19:52:19.886049 zmdc[2393].INF [Starting pending process, zmc -m 3]
12/09/11 19:52:19.887747 zmdc[2393].INF ['zmc -m 3' starting at 11/12/09 19:52:19, pid = 2765]
bcl
Posts: 1
Joined: Sat Dec 24, 2011 11:23 pm

Re: Web connection not possible after watching some event

Post by bcl »

I'm hitting the same problem. I haven't narrowed down how to reproduce it, but when it happens I can't login to the index.php page at all. If I restart apache it starts working again for a while.

I'm seeing the error 11's in the zmdc.log and seeing socket_sendto errors in the apache error logs.
leeroybrown
Posts: 17
Joined: Thu Nov 17, 2011 10:29 pm

Re: Web connection not possible after watching some event

Post by leeroybrown »

I have the same problem as well, I am going to take a guess here and I think it has to do with the config times of the checks filter reload, filter exe and max restart as they are default 300 each and I notice that the audit check is 900 so every 3rd time around all the checks are happening at the same time. I notice the system becomes unavailable from around 30-40 mins before I can login again. I would like to schedule the times to run all at 3am. The only other thing I can think of is maybe the shared memory address may need to be changed. I am going to play with the numbers a bit more today and I will repost if I have success. If I am way out in left field on this one please let me know. I would like ZM to be available all hours of the day.
Locked