perfSONAR User Q&A and Other Discussion

[Brian Candler <>]

On 15/12/2014 13:30, Jason Zurawski wrote:
> Hey Dan;
>
> I apologize for the belated reply, Andy is on holiday and I spaced out and 
> didn’t respond to this sooner.
>
> Is the host still in this state, or did it self recover?  We have tried to 
> reproduce the situation in our testing and have noticed it does happen, just 
> not in a regular or predictable way.
When the problem happens, try running

  tcpdump -i eth0 -nn tcp portrange 5000-5900

and see if one host is trying to connect on a port between 5601 and 5900 
and getting rejected. If so, you may have hit a problem with the default 
firewall rules supplied with perfsonar.

Edit /etc/sysconfig/iptables, find the line

# BWCTL Test (Incoming, TCP and UDP)
-A perfSONAR -m state --state NEW,ESTABLISHED -m tcp -p tcp --dport 
5000:5600 -j ACCEPT

and change :5600 to :5900. Then run "/etc/init.d/iptables reload". 
Repeat for /etc/sysconfig/ip6tables and "/etc/init.d/ip6tables reload", 
if you are using IPv6.

Please let us know if your graphs recover immediately afterwards.

Regards,

Brian Candler.