Socket exhaustion due to high ARK activity when using Security Virtual Server Protection for VMware

Technote (troubleshooting)


Users may experience socket exhaustion and difficulty managing an ESXi 4.1 host with Virtual Server Protection (VSP) installed.


This problem is due to socket exhaustion on the ESXi host. This can be experienced after a large power cycling of ARK (anti-rootkit)-protected virtual machines. In testing, this behavior could be replicated by power cycling hundreds of virtual machines. This issue is related to the ESXi software itself and is not a bug in the VSP software.

Resolving the problem

There are several workarounds for this issue:

  • Restart the management services on the ESXi host.
  • Reboot the ESXi host.
  • Use a different version of ESXi in your environment. The latest patched version of ESXi 4.1 does not exhibit this behavior, nor do ESXi versions 5.0 and 5.1.

If you need further information on this issue, please contact VMware Support.

If the above information does not resolve your issue, contact IBM Security Systems Customer Support.

Document information

More support for:

IBM Security Virtual Server Protection for VMware

Software version:


Operating system(s):


Reference #:


Modified date:


Translate my page

Content navigation