PK40415: TCPC0007E AUDIT MESSAGES APPEAR FREQUENTLY IN THE SYSTEMOUT LOG FILE

PK40415; 6.0.2.19: TCPC0007E audit messages appear frequently in the SystemOut

APAR status

• Closed as program error.

Error description

• Despite WAS continuing to run and handle traffic,  frequent
  TCPC0007E audit messages appear. One source triggering this
  behavior is clients opening and immediately closing sockets
  against the server.
  

Local fix

• testfix
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: WebSphere Application Server version 6       *
  *                 users of the TCP channel.                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: TCPC0007E audit messages appear in the  *
  *                      SystemOut files frequently, even when   *
  *                      the system appears to be working fine.  *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  When the TCP channel performs a socket accept() call, if it
  receives a null socket object, it considers that an error
  condition. The first five in a row will trigger the audit
  message about that port no longer accepting connections.
  

Problem conclusion

• Because there was a selector listening for new accept keys, it
  was thought that the accept() would not fail except under severe
  conditions. So when a null socket was returned, the audit was
  made to inform the Application Server administrator of the
  error condition (turning off the TCP network layer of the
  Operating
  System will do this for example).
  However, if a new socket is closed by the client side before
  the accept() is made, it will validly return the null socket at
  that point, despite the selector firing on the key. The code
  is changed to move the audit from the first five nulls in a row
  to be every 100th. If working traffic is accepted, then the
  error counter is started over.
  
  This is targeted for fixpacks 6.0.2.21 and 6.1.0.9.
  Please refer to the recommended updates page for delivery
  information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• TCPCHANN
  

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R60A PSY

     UP

• R60H PSY

     UP

• R60I PSY

     UP

• R60P PSY

     UP

• R60S PSY

     UP

• R60W PSY

     UP

• R60Z PSY

     UP

• R61A PSY

     UP

• R61H PSY

     UP

• R61I PSY

     UP

• R61P PSY

     UP

• R61S PSY

     UP

• R61W PSY

     UP

• R61Z PSY

     UP