Re: session timeout in 10g

Hi,  

To verify Paul's point you could enable sqlnet tracing.
>From the generated trace file it would be clear if the client is being
redirected to some other port.  

HTH,
Fairlie

Paul Drake <bdbafh_at_gmail.com> wrote:
On 8/30/05, Chris Stephens <cstephens16_at_gmail.com> wrote:so I found the following in the alert log:

WARNING: inbound connection timed out (ORA-3136)

...not much of anything on metastink or google.

no profiles are set and the machine is on the same network.

any ideas on what could be causing this? ...or how to find out what is causing this? :)
Chris,

That sounds like a classis case of attempting to obtain a dedicated server session through a listener where NAT or a firewall is involved. The incoming request to the listener is translated inbounds, but the redirected client never finds its port in the storm. One can tnsping and get a reply, but not create a session.

Might you have setup iptables whereby all incoming connection attempts are blocked except for those explicitly allowed? That is a laudable objective, but you'll need to open the high TCP ports (>1024) for dedicated server connections. You can restrict the range of ports used in the kernel settings, if desired.

I've never seen that message in an alert log - usually messages regarding failed connection attempts are in the listener log file.

hth.

Paul  

On 8/30/05, Paul Drake <bdbafh_at_gmail.com > wrote:
>
> On 8/30/05, Chris Stephens <cstephens16_at_gmail.com> wrote:
>
> > I recently installed 10gR2 on red hat 3. i am getting disconnected through toad and isqlpus. i haven't determined the exact lenght of time this takes to occur yet.
> >
> > i looked in sqlnet.ora for a timeout setting but there is nothing there. is this default behavior? if so how do i change it?
> >
> > thanks,
> > chris
> >
>
> Chris,
>
> Unless your DBA has set profiles that limit connect time, this is most likely a networking issue. Even with a resource limit of connect_time, it would still just "snipe" the session, not kill it itself until another call is made.
>
> Is the oracle client on the same LAN as the oracle server - meaning, do you traverse a router or firewall where NAT/IP masquerading is involved?
>
> An easy way to tell is if a netstat (from the client desktop) returns a high port and an IP address different than that of the oracle server.
>
> You might consider enabling keep_alive settings in the oracle network configuration files.
> Metalink has various notes covering this, as well as the Networking guide available via OTN.
>
> As far as iSqlplus, I haven't a clue. Never used it. Knew that there was an exploit for itearly on, so I never installed it.
>
> hth.
>
> Paul
>
>
>
>
>
> --
> #/etc/init.d/init.cssd stop
> # f=ma, divide by 1, convert to moles.

--
http://www.freelists.org/webpage/oracle-l




-- 
#/etc/init.d/init.cssd stop
# f=ma, divide by 1, convert to moles. 

Fairlie Rego
Senior Oracle Consultant
Optus Telecommunications
www.optus.com.au
Mobile: +61 4 02 792 405
Home: +61 2 8920 0273

 
When I read about the evils of drinking, I gave up reading.






__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
--
http://www.freelists.org/webpage/oracle-l