Search sqlserver-dba.com
Follow sqlserver-dba.com
*Use the Comments section for questions
SQLServer-DBA.com Links
Recent Posts
- sys.dm_server_services - How to check if SQL Server service is running or not?
- Msg 3023, Level 16, State 2 Backup, file manipulation operations (such as ALTER DATABASE ADD FILE) and encryption changes on a database must be serialized. Reissue the statement after the current backup or file manipulation operation is completed.
- Can we restore a database to an older version in SQL Server?
- How do I save all SQL Agent Jobs
- How to view SQL Server mount point space without access to server
- DBCC SHRINKFILE: page could not be moved because it is a work table page.
- SQL Agent Last Modified explanation
- Sql certificate chain was issued by an authority that is not trusted
- sqlserver-dba.com switching from feedburner to follow.it
- Taking transaction log backup and full back at the same time
Error 17836 Length specified in network packet payload did not match number of bytes read; the connection has been closed
10 January,2017 by Tom Collins
Question: This error appeared in the SQL Server Logs today.
Error: 17836, Severity: 20, State: 14. Length specified in network packet payload did not match number of bytes read; the connection has been closed. Please contact the vendor of the client library. [CLIENT: an_ip]
How can I find out what application is attempting to connect ?
Answer: The most common reason for this error are Nessus scanners or similar detection intrusion systems. They usually scan servers looking for vulnerabilities. It’s not obvious from the logs – but you can build a correlation between the timings in the SQL Server Error logs and the Nessus Scanner schedules \ logs
The first clue is the CLIENT details specified in the error log. Use the nslookup command to find the FQDN. It may be obvious from the client name , and you can contact the server owner to find out if there are any applications attempting to connect
Another option is to use a network monitor tool to discover exactly which program \ logon is hitting the server.
For more detailed information about the error message use the Troubleshoot connectivity issues with Connectivity Ring Buffer
Read More
Database Security Countermeasures against hacker attacks - SQL ...
SQL Server - Security Risk Analysis and database security (SQL ...
Author: Tom Collins (http://www.sqlserver-dba.com)
Share:
Verify your Comment
Previewing your Comment
This is only a preview. Your comment has not yet been posted.
As a final step before posting your comment, enter the letters and numbers you see in the image below. This prevents automated programs from posting comments.
Having trouble reading this image? View an alternate.
Posted by: |