cancel
Showing results for 
Search instead for 
Did you mean: 
scoutt
Level 11
Report Inappropriate Content
Message 1 of 4

Exception while executing the AvertAlerts command

Jump to solution

This is on a brand new isntall of 4.5 build (937). I can access the internet as I can read the advisory threats. But I see this

Last check:2011-03-01 13:07:44.407(Failed)

2011-03-01 12:52:44,390 ERROR [pool-6-thread-1] daemon.AvertService  - Exception while executing the AvertAlerts command

com.mcafee.orion.core.cmd.CommandException: POST Command got unexpected HTTP Status:0

    at com.mcafee.orion.core.cmd.CommandInvoker.invoke(CommandInvoker.java:862)

    at com.mcafee.orion.core.cmd.CommandInvoker.invokeCommand(CommandInvoker.java:607)

    at com.mcafee.orion.core.cmd.CommandInvoker.invoke(CommandInvoker.java:596)

    at com.mcafee.orion.core.cmd.CommandInvoker.invoke(CommandInvoker.java:482)

    at com.mcafee.orion.core.cmd.CommandInvoker.invoke(CommandInvoker.java:457)

    at com.mcafee.orion.core.cmd.CommandInvoker.invoke(CommandInvoker.java:624)

    at com.mcafee.orion.core.cmd.CommandInvoker.invoke(CommandInvoker.java:632)

    at com.mcafee.epo.avertalerts.daemon.AvertService$AvertDaemon.run(AvertService.java:93)

    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:441)

    at java.util.concurrent.FutureTask$Sync.innerRunAndReset(FutureTask.java:317)

    at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:150)

    at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$101(ScheduledThreadPoolExecutor.java:98)

    at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.runPeriodic(ScheduledThreadPoolExecutor.java:181)

    at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:205)

    at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)

    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)

    at java.lang.Thread.run(Thread.java:619)

Caused by: java.io.IOException: POST Command got unexpected HTTP Status:0

    at com.mcafee.epo.avertalerts.myavert.AvertAlertsClient.sendSoapRequest(AvertAlertsClient.java:112)

    at com.mcafee.epo.avertalerts.myavert.AvertAlertsClient.getReport(AvertAlertsClient.java:145)

    at com.mcafee.epo.avertalerts.myavert.AvertAlertsClient.getReportByName(AvertAlertsClient.java:206)

    at com.mcafee.epo.avertalerts.command.AvertWebService.invoke(AvertWebService.java:85)

    at com.mcafee.orion.core.cmd.CommandInvoker.invoke(CommandInvoker.java:825)

    ... 16 more

1 Solution

Accepted Solutions
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Exception while executing the AvertAlerts command

Jump to solution

The Avert service listens on port 8801 - can you make sure you've got 8801 open through your firewall?

HTH -

Joe

3 Replies
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Exception while executing the AvertAlerts command

Jump to solution

The Avert service listens on port 8801 - can you make sure you've got 8801 open through your firewall?

HTH -

Joe

scoutt
Level 11
Report Inappropriate Content
Message 3 of 4

Exception while executing the AvertAlerts command

Jump to solution

After reading some more and trying a few things I think you are correct. Yes, it is being blocked but I wasn't sure what error it was seeing how the status was 0, not a forbidden or anything.

POST Command got unexpected HTTP Status:0

Not much to go on with that status.

Thanks Joe, I think we can call this one answered.

McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 4

Exception while executing the AvertAlerts command

Jump to solution

It all depends on what's doing the blocking - if it's a firewall that's just dropping the packet you're not going to get any response codes coming back. If it's some sort of authenticating proxy then you'd get a connection established, but then you'd probably get a 407 response code (or something similar.)

Usually when we see a zero it's because the connection isn't even being established, which in turn usually means firewall

Regards-

Joe