Agents is disconnected

274 views
Skip to first unread message

Henrique Avelino

unread,
Apr 11, 2024, 12:03:06 AM4/11/24
to Wazuh | Mailing List
Hi

After reboot Wazuh-Manager Server, 90% of the agents are disconnected.

In /var/ossec/logs/ossec.log I have a lot of logs like this:

2024/04/11 00:58:38 wazuh-remoted: WARNING: Package dropped. Could not append data into buffer.
2024/04/11 00:58:38 wazuh-remoted: WARNING: (1246): Unable to send file 'merged.mg' to agent ID '1543'.
2024/04/11 00:58:48 wazuh-remoted: WARNING: Package dropped. Could not append data into buffer.
2024/04/11 00:58:49 wazuh-remoted: WARNING: Package dropped. Could not append data into buffer.
2024/04/11 00:58:49 wazuh-remoted: WARNING: (1246): Unable to send file 'merged.mg' to agent ID '1543'.
2024/04/11 00:58:58 wazuh-remoted: WARNING: Package dropped. Could not append data into buffer.
2024/04/11 00:58:59 wazuh-remoted: WARNING: Package dropped. Could not append data into buffer.
2024/04/11 00:58:59 wazuh-remoted: WARNING: (1246): Unable to send file 'merged.mg' to agent ID '1543'.
2024/04/11 00:59:12 wazuh-remoted: WARNING: Package dropped. Could not append data into buffer.
2024/04/11 00:59:12 wazuh-remoted: WARNING: (1246): Unable to send file 'merged.mg' to agent ID '1544'.
2024/04/11 00:59:22 wazuh-remoted: WARNING: Package dropped. Could not append data into buffer.
2024/04/11 00:59:22 wazuh-remoted: WARNING: (1246): Unable to send file 'merged.mg' to agent ID '1544'.
2024/04/11 00:59:32 wazuh-remoted: WARNING: Package dropped. Could not append data into buffer.
2024/04/11 00:59:32 wazuh-remoted: WARNING: (1246): Unable to send file 'merged.mg' to agent ID '1544'.
2024/04/11 00:59:42 wazuh-remoted: WARNING: Package dropped. Could not append data into buffer.
2024/04/11 00:59:43 wazuh-remoted: WARNING: Package dropped. Could not append data into buffer.
2024/04/11 00:59:43 wazuh-remoted: WARNING: (1246): Unable to send file 'merged.mg' to agent ID '1544'.

How Can I fix it?

Henrique Avelino

unread,
Apr 11, 2024, 1:07:10 AM4/11/24
to Wazuh | Mailing List
I need to fix this issue ASAP.

Victor Fernandez

unread,
Apr 11, 2024, 4:49:34 AM4/11/24
to Wazuh | Mailing List
Hi Henrique,

First, let's verify that both the manager and the agent are on the latest available version (4.7.3), as we have addressed concurrency and performance issues in previous versions.

Next, there are two common causes for seeing these messages:
  1. An agent disconnected while the manager had pending data to send to it. In this case, such data is the shared configuration. Don't worry, the manager will try to deliver the configuration again when the agent connects back.
  2. There are performance issues in the network that slow down the transmission, to the point where the sending buffer fills up.
To diagnose the problem, I recommend the following actions:

1. Enable debug mode for wazuh-remoted: add "remoted.debug=1" to /var/ossec/etc/local_internal_options.conf, and restart the manager.

If the issue is the second one mentioned, we would see logs like this:

wazuh-remoted: DEBUG: Not enough buffer space. Retrying... [buffer_size=..., used=..., msg_size=...

2. Query the wazuh-remoted statistics through the API using:

curl -XGET -H "Authorization: Bearer $YOUR_JWT_TOKEN" https://localhost:55000/manager/daemons/stats?daemons_list=wazuh-remoted

This will provide insights into the performance of wazuh-remoted and help identify any potential bottlenecks or issues.

Hope it helps. Best regards,

Vikman

Henrique Avelino

unread,
Apr 11, 2024, 7:32:31 AM4/11/24
to Wazuh | Mailing List
Hi Vikman,

Thank you for your time.

1. Some of the logs after enabled debug
2024/04/11 08:21:49 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '1545'.
2024/04/11 08:21:49 wazuh-remoted[11003] msgs.c:642 at CreateSecMSG(): DEBUG: Event count after '20000': 18349855->7393656 (40%)
2024/04/11 08:21:56 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '599'.
2024/04/11 08:21:57 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '1543'.
2024/04/11 08:21:57 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '1544'.
2024/04/11 08:21:57 wazuh-remoted[11003] netbuffer.c:208 at nb_queue(): DEBUG: Not enough buffer space. Retrying... [buffer_size=131072, used=130828, msg_size=469]
2024/04/11 08:21:57 wazuh-remoted[11003] netbuffer.c:208 at nb_queue(): DEBUG: Not enough buffer space. Retrying... [buffer_size=131072, used=130784, msg_size=421]
2024/04/11 08:21:57 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '1446'.
2024/04/11 08:21:58 wazuh-remoted[11003] netbuffer.c:232 at nb_queue(): WARNING: Package dropped. Could not append data into buffer.
2024/04/11 08:21:58 wazuh-remoted[11003] manager.c:1694 at wait_for_msgs(): WARNING: (1246): Unable to send file 'merged.mg' to agent ID '1543'.
2024/04/11 08:21:58 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '1545'.
2024/04/11 08:21:58 wazuh-remoted[11003] netbuffer.c:232 at nb_queue(): WARNING: Package dropped. Could not append data into buffer.
2024/04/11 08:21:58 wazuh-remoted[11003] manager.c:1694 at wait_for_msgs(): WARNING: (1246): Unable to send file 'merged.mg' to agent ID '1544'.
2024/04/11 08:21:58 wazuh-remoted[11003] netbuffer.c:208 at nb_queue(): DEBUG: Not enough buffer space. Retrying... [buffer_size=131072, used=130845, msg_size=453]
2024/04/11 08:22:06 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '599'.
2024/04/11 08:22:07 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '1544'.
2024/04/11 08:22:07 wazuh-remoted[11003] netbuffer.c:208 at nb_queue(): DEBUG: Not enough buffer space. Retrying... [buffer_size=131072, used=130994, msg_size=405]
2024/04/11 08:22:07 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '1543'.
2024/04/11 08:22:07 wazuh-remoted[11003] netbuffer.c:208 at nb_queue(): DEBUG: Not enough buffer space. Retrying... [buffer_size=131072, used=131038, msg_size=405]
2024/04/11 08:22:07 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '1446'.
2024/04/11 08:22:08 wazuh-remoted[11003] netbuffer.c:232 at nb_queue(): WARNING: Package dropped. Could not append data into buffer.
2024/04/11 08:22:08 wazuh-remoted[11003] manager.c:1694 at wait_for_msgs(): WARNING: (1246): Unable to send file 'merged.mg' to agent ID '1544'.
2024/04/11 08:22:08 wazuh-remoted[11003] netbuffer.c:232 at nb_queue(): WARNING: Package dropped. Could not append data into buffer.
2024/04/11 08:22:08 wazuh-remoted[11003] manager.c:1694 at wait_for_msgs(): WARNING: (1246): Unable to send file 'merged.mg' to agent ID '1543'.
2024/04/11 08:22:08 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '1545'.
2024/04/11 08:22:08 wazuh-remoted[11003] netbuffer.c:208 at nb_queue(): DEBUG: Not enough buffer space. Retrying... [buffer_size=131072, used=130791, msg_size=453]
2024/04/11 08:22:09 wazuh-remoted[11003] netbuffer.c:232 at nb_queue(): WARNING: Package dropped. Could not append data into buffer.
2024/04/11 08:22:09 wazuh-remoted[11003] manager.c:1694 at wait_for_msgs(): WARNING: (1246): Unable to send file 'merged.mg' to agent ID '1545'.
2024/04/11 08:22:18 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '599'.
2024/04/11 08:22:18 wazuh-remoted[11003] netbuffer.c:208 at nb_queue(): DEBUG: Not enough buffer space. Retrying... [buffer_size=131072, used=131038, msg_size=85]
2024/04/11 08:21:39 wazuh-remoted[11003] netbuffer.c:208 at nb_queue(): DEBUG: Not enough buffer space. Retrying... [buffer_size=131072, used=131054, msg_size=117]
2024/04/11 08:21:39 wazuh-remoted[11003] netbuffer.c:208 at nb_queue(): DEBUG: Not enough buffer space. Retrying... [buffer_size=131072, used=130994, msg_size=85]
2024/04/11 08:21:40 wazuh-remoted[11003] secure.c:324 at handle_incoming_data_from_tcp_socket(): DEBUG: TCP peer [140]: Connection reset by peer (104)
2024/04/11 08:21:40 wazuh-remoted[11003] secure.c:331 at handle_incoming_data_from_tcp_socket(): DEBUG: handle incoming close socket [140].
2024/04/11 08:21:40 wazuh-remoted[11003] netbuffer.c:232 at nb_queue(): WARNING: Package dropped. Could not append data into buffer.
2024/04/11 08:21:40 wazuh-remoted[11003] manager.c:1694 at wait_for_msgs(): WARNING: (1246): Unable to send file 'merged.mg' to agent ID '1544'.
2024/04/11 08:21:40 wazuh-remoted[11003] secure.c:792 at _close_sock(): DEBUG: TCP peer disconnected [140]
2024/04/11 08:21:40 wazuh-remoted[11003] secure.c:275 at handle_new_tcp_connection(): DEBUG: New TCP connection [140]
2024/04/11 08:21:40 wazuh-remoted[11003] netbuffer.c:232 at nb_queue(): WARNING: Package dropped. Could not append data into buffer.
2024/04/11 08:21:41 wazuh-remoted[11003] secure.c:324 at handle_incoming_data_from_tcp_socket(): DEBUG: TCP peer [38]: Connection reset by peer (104)
2024/04/11 08:21:41 wazuh-remoted[11003] secure.c:331 at handle_incoming_data_from_tcp_socket(): DEBUG: handle incoming close socket [38].
2024/04/11 08:21:41 wazuh-remoted[11003] secure.c:792 at _close_sock(): DEBUG: TCP peer disconnected [38]
2024/04/11 08:21:41 wazuh-remoted[11003] secure.c:275 at handle_new_tcp_connection(): DEBUG: New TCP connection [38]
2024/04/11 08:21:42 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '1545'.
2024/04/11 08:21:42 wazuh-remoted[11003] netbuffer.c:208 at nb_queue(): DEBUG: Not enough buffer space. Retrying... [buffer_size=131072, used=130994, msg_size=117]
2024/04/11 08:21:42 wazuh-remoted[11003] manager.c:300 at save_controlmsg(): DEBUG: Agent COOP-DR-HV02 sent HC_STARTUP from '10.3.0.13'
2024/04/11 08:21:42 wazuh-remoted[11003] manager.c:300 at save_controlmsg(): DEBUG: Agent COOP-DR-HV01 sent HC_STARTUP from '10.3.0.13'
2024/04/11 08:21:42 wazuh-remoted[11003] secure.c:324 at handle_incoming_data_from_tcp_socket(): DEBUG: TCP peer [99]: Connection reset by peer (104)
2024/04/11 08:21:42 wazuh-remoted[11003] secure.c:331 at handle_incoming_data_from_tcp_socket(): DEBUG: handle incoming close socket [99].
2024/04/11 08:21:43 wazuh-remoted[11003] netbuffer.c:232 at nb_queue(): WARNING: Package dropped. Could not append data into buffer.
2024/04/11 08:21:43 wazuh-remoted[11003] manager.c:1694 at wait_for_msgs(): WARNING: (1246): Unable to send file 'merged.mg' to agent ID '1545'.
2024/04/11 08:21:43 wazuh-remoted[11003] secure.c:792 at _close_sock(): DEBUG: TCP peer disconnected [99]
2024/04/11 08:21:43 wazuh-remoted[11003] secure.c:275 at handle_new_tcp_connection(): DEBUG: New TCP connection [99]
2024/04/11 08:21:44 wazuh-remoted[11003] manager.c:300 at save_controlmsg(): DEBUG: Agent COOP-DR-HV03 sent HC_STARTUP from '10.3.0.13'
2024/04/11 08:21:48 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '599'.
2024/04/11 08:21:48 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '1544'.
2024/04/11 08:21:48 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '1543'.
2024/04/11 08:21:48 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '1446'.
2024/04/11 08:22:18 wazuh-remoted[11003] netbuffer.c:208 at nb_queue(): DEBUG: Not enough buffer space. Retrying... [buffer_size=131072, used=130994, msg_size=85]
2024/04/11 08:22:18 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '1446'.
2024/04/11 08:22:18 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '1545'.
2024/04/11 08:22:18 wazuh-remoted[11003] netbuffer.c:208 at nb_queue(): DEBUG: Not enough buffer space. Retrying... [buffer_size=131072, used=131001, msg_size=405]
2024/04/11 08:22:19 wazuh-remoted[11003] netbuffer.c:232 at nb_queue(): WARNING: Package dropped. Could not append data into buffer.
2024/04/11 08:22:19 wazuh-remoted[11003] netbuffer.c:232 at nb_queue(): WARNING: Package dropped. Could not append data into buffer.
2024/04/11 08:22:19 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '1543'.
2024/04/11 08:22:19 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '1544'.
2024/04/11 08:22:19 wazuh-remoted[11003] netbuffer.c:208 at nb_queue(): DEBUG: Not enough buffer space. Retrying... [buffer_size=131072, used=131038, msg_size=117]
2024/04/11 08:22:19 wazuh-remoted[11003] netbuffer.c:208 at nb_queue(): DEBUG: Not enough buffer space. Retrying... [buffer_size=131072, used=130994, msg_size=117]
2024/04/11 08:22:19 wazuh-remoted[11003] netbuffer.c:232 at nb_queue(): WARNING: Package dropped. Could not append data into buffer.
2024/04/11 08:22:19 wazuh-remoted[11003] manager.c:1694 at wait_for_msgs(): WARNING: (1246): Unable to send file 'merged.mg' to agent ID '1545'.
2024/04/11 08:22:20 wazuh-remoted[11003] netbuffer.c:232 at nb_queue(): WARNING: Package dropped. Could not append data into buffer.
2024/04/11 08:22:20 wazuh-remoted[11003] netbuffer.c:232 at nb_queue(): WARNING: Package dropped. Could not append data into buffer.
2024/04/11 08:22:20 wazuh-remoted[11003] manager.c:1694 at wait_for_msgs(): WARNING: (1246): Unable to send file 'merged.mg' to agent ID '1543'.
2024/04/11 08:22:20 wazuh-remoted[11003] manager.c:1694 at wait_for_msgs(): WARNING: (1246): Unable to send file 'merged.mg' to agent ID '1544'.
2024/04/11 08:22:26 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '599'.
2024/04/11 08:22:27 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '1446'.
2024/04/11 08:22:27 wazuh-remoted[11003] netbuffer.c:208 at nb_queue(): DEBUG: Not enough buffer space. Retrying... [buffer_size=131072, used=131038, msg_size=85]
2024/04/11 08:22:27 wazuh-remoted[11003] netbuffer.c:208 at nb_queue(): DEBUG: Not enough buffer space. Retrying... [buffer_size=131072, used=130994, msg_size=85]
2024/04/11 08:22:28 wazuh-remoted[11003] netbuffer.c:232 at nb_queue(): WARNING: Package dropped. Could not append data into buffer.
2024/04/11 08:22:28 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '1543'.
2024/04/11 08:22:28 wazuh-remoted[11003] netbuffer.c:208 at nb_queue(): DEBUG: Not enough buffer space. Retrying... [buffer_size=131072, used=131038, msg_size=117]
2024/04/11 08:22:28 wazuh-remoted[11003] netbuffer.c:232 at nb_queue(): WARNING: Package dropped. Could not append data into buffer.
2024/04/11 08:22:28 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '1544'.
2024/04/11 08:22:28 wazuh-remoted[11003] netbuffer.c:208 at nb_queue(): DEBUG: Not enough buffer space. Retrying... [buffer_size=131072, used=130994, msg_size=117]
2024/04/11 08:22:28 wazuh-remoted[11003] netbuffer.c:208 at nb_queue(): DEBUG: Not enough buffer space. Retrying... [buffer_size=131072, used=131001, msg_size=85]
2024/04/11 08:22:29 wazuh-remoted[11003] netbuffer.c:232 at nb_queue(): WARNING: Package dropped. Could not append data into buffer.
2024/04/11 08:22:29 wazuh-remoted[11003] manager.c:1694 at wait_for_msgs(): WARNING: (1246): Unable to send file 'merged.mg' to agent ID '1543'.
2024/04/11 08:22:29 wazuh-remoted[11003] netbuffer.c:232 at nb_queue(): WARNING: Package dropped. Could not append data into buffer.
2024/04/11 08:22:29 wazuh-remoted[11003] manager.c:1694 at wait_for_msgs(): WARNING: (1246): Unable to send file 'merged.mg' to agent ID '1544'.
2024/04/11 08:22:29 wazuh-remoted[11003] netbuffer.c:232 at nb_queue(): WARNING: Package dropped. Could not append data into buffer.
2024/04/11 08:22:29 wazuh-remoted[11003] manager.c:1681 at wait_for_msgs(): DEBUG: Sending file 'default,Client-x/merged.mg' to agent '1545'.
2024/04/11 08:22:29 wazuh-remoted[11003] netbuffer.c:208 at nb_queue(): DEBUG: Not enough buffer space. Retrying... [buffer_size=131072, used=131001, msg_size=117]
2024/04/11 08:22:30 wazuh-remoted[11003] netbuffer.c:232 at nb_queue(): WARNING: Package dropped. Could not append data into buffer.
2024/04/11 08:22:30 wazuh-remoted[11003] manager.c:1694 at wait_for_msgs(): WARNING: (1246): Unable to send file 'merged.mg' to agent ID '1545'.


2. wazuh-remoted statistics API results:

root# curl -XGET -H "Authorization: Bearer $Token_XXXXX" https://server:55000/manager/daemons/stats?daemons_list=wazuh-remoted
curl: (60) SSL certificate problem: self-signed certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

Victor Fernandez

unread,
Apr 11, 2024, 12:18:09 PM4/11/24
to Wazuh | Mailing List
Hi Henrique,

Thank you for sharing the logs. Based on the information provided:

1. Firstly, it's crucial to ensure that both the manager and agents are running on the latest available version (4.7.3).

2. It appears that the manager is attempting to send data to the agents at a rate faster than they can receive. This can lead to package drops and warnings about the inability to send files to certain agents. To address this, you can diagnose the issue further using netstat and the API call you made. Additionally, I recommend extending the buffer size to 512 KiB to see if it improves the situation. You can do this by setting remoted.send_buffer_size to 524288 in the local_internal_options.conf file and then restarting the manager. (Refer Internal configuration).

3. Regarding the SSL certificate problem encountered with the API call, it seems that you're using a self-signed certificate, which is the default setup. To bypass the SSL certificate verification, you can simply add the -k option to your curl command. This will allow the API call to proceed without validating the SSL certificate. For more details, you can refer to the documentation here: Wazuh API - Getting Started.

This situation typically indicates either a manager overload or network congestion.

Hope this helps,

Best.

Henrique Avelino

unread,
Apr 11, 2024, 2:43:51 PM4/11/24
to Wazuh | Mailing List
Victor

1. Yes, manager and agents are running on version 4.7.3

2. I still need to do this

3. Now it works:
root# curl -k -XGET -H "Authorization: Bearer Token_xxx" https://localhost:55000/manager/daemons/stats?daemons_list=wazuh-remoted
{"data": {"affected_items": [{"uptime": "2024-04-11T12:15:57+00:00", "timestamp": "2024-04-11T18:39:00+00:00", "name": "wazuh-remoted", "metrics": {"bytes": {"received": 6342281674, "sent": 2034706951}, "keys_reload_count": 11, "messages": {"received_breakdown": {"control": 337440, "control_breakdown": {"keepalive": 332380, "request": 0, "shutdown": 57, "startup": 5003}, "dequeued_after": 26283, "discarded": 0, "event": 6727996, "ping": 0, "unknown": 141}, "sent_breakdown": {"ack": 336801, "ar": 179165, "discarded": 1578, "request": 0, "sca": 8, "shared": 4980259}}, "queues": {"received": {"size": 131072, "usage": 0}}, "tcp_sessions": 217}}], "total_affected_items": 1, "total_failed_items": 0, "failed_items": []}, "message": "Statistical information for each daemon was successfully read", "error": 0}

Thanks.

Victor Fernandez

unread,
Apr 12, 2024, 2:45:11 AM4/12/24
to Wazuh | Mailing List
Hi Henrique,

Thank you for providing the diagnostic data. Upon analyzing the information:

If we delve into these data, we find that the service was active for 162 minutes (from uptime to timestamp). Adding up the events (6727996) plus the control messages (337440), we get 726.9 messages/second, which is quite acceptable, especially considering that the usage of the receiving queue is 0 (no stress on message input).

However, there are three things that catch my attention:
  1. Despite the common receiving queue being empty, one or more sending queues (one per agent) are full. This could indicate some communication issue in the manager → agent direction.
  2. There is a relatively high number of dequeued_after messages, which are messages processed after the agents have disconnected. This suggests there may be a lot of connection/disconnection activity.
  3. There is an unusually high number of shared messages sent. These correspond to shared configuration (etc/shared). Out of curiosity, have you copied any relatively large extra files into that folder?
Regarding netstat, it might shed light on any network-level issues:

An example:

$ netstat -tn | grep -E "^Proto|:1514 "

Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 192.168.64.6:1514 192.168.64.1:49292 ESTABLISHED

Normally, both Recv-Q and Send-Q should have a value of 0 or very low. This, combined with the idea of increasing the size of the sending queues, will likely bring us closer to the root cause of this issue.

Let me know if you need further assistance or clarification on any of these points.

Best regards,

Vikman
Reply all
Reply to author
Forward
0 new messages