Sentinel Appliance 8.6.1.0
Scenario:
I build a senitnel appliance in my lab...and it upgrade it from 8.5.1.0
but after upgrade...sometimes it will stop work...and webconsole could not connect...I check the server log...it show some message like below:
=================================
Mon Mar 25 22:45:00 CST 2024|SEVERE|TimerThreadPool pool|esecurity.ccs.comp.mapengine.map.FileSourceData.openDataFeed
Error opening map data file: /var/opt/novell/sentinel/data/map_data/ZeuS_Botnet_Domain_ListData
java.io.IOException: Too many open files
at java.io.UnixFileSystem.createFileExclusively(Native Method)
at java.io.File.createTempFile(File.java:2063)
at esecurity.base.util.TempFileManager.createTempFile(TempFileManager.java:122)
at esecurity.base.io.StableFileInputStream.<init>(StableFileInputStream.java:37)
at esecurity.ccs.comp.mapengine.map.FileSourceData.openDataFeed(FileSourceData.java:98)
at esecurity.ccs.comp.mapengine.map.FileSourceData.nextRow(FileSourceData.java:51)
at esecurity.ccs.comp.mapengine.map.DelimitedSourceMapGenerator.populateMapRows(DelimitedSourceMapGenerator.java:263)
at esecurity.ccs.comp.mapengine.map.DelimitedSourceMapGenerator.generate(DelimitedSourceMapGenerator.java:132)
at esecurity.ccs.comp.mapengine.map.DelimitedSourceMapGenerator.generate(DelimitedSourceMapGenerator.java:74)
at esecurity.ccs.comp.list.CListUpdater$Updater.readData(CListUpdater.java:375)
at esecurity.ccs.comp.list.CListUpdater$Updater.access$500(CListUpdater.java:267)
at esecurity.ccs.comp.list.CListUpdater$Updater$AbstractTask.run(CListUpdater.java:438)
at esecurity.base.ccs.comp.timer.TimerServiceImpl$TimerRequest$1.run(TimerServiceImpl.java:190)
at esecurity.base.ccs.comp.threadpool.TaskThreadPool$RunWrapper.run(TaskThreadPool.java:164)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at java.lang.Thread.run(Thread.java:750)
====================================
I must manual start it again....it will work fine.
Whether which function use Botnet's data ??
Wencheng