Connection refused by Host alerts

[plakshmi]

Team,

We are getting "Connection refused by Host" alerts for a linux remote host intermittently. We observed issue with xinetd deamon on the remote server. Also found below entries from /var/adm/messages log file and time of the log entries & nagios alerts match exactly.

Dec 7 03:12:21 XSBIPROD xinetd[56810]: Deactivating service nrpe due to excessive incoming connections. Restarting in 30 seconds.
Dec 7 03:12:51 XSBIPROD xinetd[56810]: Activating service nrpe
Dec 7 03:14:15 XSBIPROD rhsmd: This system is registered to RHN Classic.
Dec 7 03:17:21 XSBIPROD xinetd[56810]: Deactivating service nrpe due to excessive incoming connections. Restarting in 30 seconds.
Dec 7 03:17:51 XSBIPROD xinetd[56810]: Activating service nrpe
Dec 7 03:22:21 XSBIPROD xinetd[56810]: Deactivating service nrpe due to excessive incoming connections. Restarting in 30 seconds.
Dec 7 03:22:51 XSBIPROD xinetd[56810]: Activating service nrpe
Dec 7 03:27:21 XSBIPROD xinetd[56810]: Deactivating service nrpe due to excessive incoming connections. Restarting in 30 seconds.
Dec 7 03:27:51 XSBIPROD xinetd[56810]: Activating service nrpe
Dec 7 03:32:22 XSBIPROD xinetd[56810]: Deactivating service nrpe due to excessive incoming connections. Restarting in 30 seconds.
Dec 7 03:32:52 XSBIPROD xinetd[56810]: Activating service nrpe

Could you let us know if we need to do any changes from nagios side or suggest us please.

[slansing]

You may need to bump up the max connections:

http://www.symantec.com/business/suppor ... =TECH37520

[plakshmi]

Thanks for the reply. Sorry for the late response.

We are working on increasing the max incoming connections from 25(default) to 40 per second. Will let you know if we face any issues after doing this step.

[sreinhardt]

Great, thanks for the update, hopefully this works!

[plakshmi]

We have increased max connections on our QC server and observed for 3-4 days. We did not find any issue so far. We will be implementing it on production box where we have actually seen the errors and hopefully it will clear the issue.

We will keep you posted.

[scottwilkerson]

Thanks for keeping us up to date!

[plakshmi]

The issue has been resolved. After increasing max connections from 25 to 50 on production server, we are not receiving the "Connection refused by host" alerts.

Thanks for your support.