Start a Conversation

Unsolved

This post is more than 5 years old

1460

August 3rd, 2017 06:00

Users Connectivity in Isilon Cluster

Hi Experts,

I see a lot of (75K+) connections in 2 SMB shares of my Isilon Cluster but when search for the open files, It's showing 0 files. None of the Files are opened.

How can we comprehend this situation & resolve this issue??

Regards

Neesha

2 Intern

 • 

20.4K Posts

August 4th, 2017 11:00

i see that when my security team runs Nessus scanning. Look at the IP addresses, see if they resolve to their scanners or to something else.

9 Posts

October 23rd, 2017 12:00

You can use netstat and grep to filter out ESTABLISHED connections using port 445 on each node. You can look at the Foreign Address column to see what IPs are connected. This should let you know narrow down if there is one specific client or group of clients causing excess connections (such as a scanner as dynamox suggests).

December 19th, 2017 20:00

If it is one fs version  8.0.0.X

isi zone list -v

isi_for_array 'isi_run -z isi_classic smb file list'

hope this helps

No Events found!

Top