×
The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.
On the TCP2617 message you can hit F1 and get further details. Such as:
Message . . . . : TCP/IP connection to remote system &2 closed, reason
code
&5.
Cause . . . . . : The TCP/IP connection to remote system &2 has been
closed.
The connection was closed for reason code &5. Full connection details
for
the closed connection include:
- local IP address is &1
- local port is &3
- remote IP address is &2
- remote port is &4
Reason codes and their meanings follow:
1 = TCP connection closed due to expiration of 10 minute FINWAIT2
timer.
2 = TCP connection closed due to R2 retry threshold being run.
3 = TCP connection closed due to keepalive timeout.
Now, that local port will tell us if they are trying to hack ftp, smtp,
telnet or whatever.
If you just don't want to hear about these people anymore (and many people
don't) then you can look at the bottom of this
http://www-01.ibm.com/support/docview.wss?uid=nas1dce52e8dee822d1d86256d040064def4
In the 6.1 MTU (Memo To Users) it will tell you that this has been removed
from QSYSOPR and will now be sent to QUSRSYS/QTCP and to the history log.
Apparently many people turned it off as clutter to "real" stuff in
QSYSOPR.
There are also some ptf's out for certain data flow issues. They're MF
ptf's.
IBM considers this message an assistant in figuring out Line Printer
Daemon issues.
Rob Berendt
midrange.com
