[tech] [wheel] Your ticket has been updated: INC0425380 - Network interruptions/TCP resets

[wheel at ucc.gu.uwa.edu.au]

Hi! Thank you for the followup, apologies that I was not able to
reply in depth at the time. The issue has stopped.

Was there a possible cause/resolution for it in the December or
early January period?

I had meant the original report to be a query/informational report:
"We have seen a series of strange TCP resets - is it just
affecting us, or is it a known campus-wide issue?"

As John mentioned previously in this ticket, the issue appears to have
stopped since around start-of-business this year. Specifically, it:

 * started at almost exactly midnight, Sunday 2019-12-01 00:00 and
   then several times over the next few hours
 * recurred on 2019-12-11 , 2019-12-12
 * recurred often from 2019-12-17 through to 2020-01-03 inclusive

An example of a network service affected is SSH on 2019-12-11:

1. What is the IP/Device name you are trying to connect these sessions from
172.198.145.248
2. What is the IP/Device name you are trying to connect these sessions to?
130.95.13.11 / ssh.ucc.asn.au
3. What TCP Ports are you trying to connect through?
22 (ssh)
4. What program are you using to connect? I.E Putty?
openssh-client to openssh-server ( https://www.openssh.com/ )

On Sun, Jan 05, 2020 at 07:19:56PM -0800, UWA Service Desk wrote:
>   Hi UCC 
>  
> Your ticket INC0425380 regarding??Network interruptions/TCP resets??has been updated with comments for your attention:
> 
> 06/01/2020 11:19:51 AWST - Rachel McAuliffe Additional comments
> Hi Nick,
> 
> So we can investigate this further for you,
> 
> Can you please advise the following:
> 
> 1. What is the IP/Device name you are trying to connect these sessions from
> 2. What is the IP/Device name you are trying to connect these sessions to?
> 3. What TCP Ports are you trying to connec through?
> 4. What program are you using to connect? I.E Putty?
> 
> Kind Regards
> Rachel
> 
> Please review and respond at your earliest convenience by browsing to the ticket INC0425380 [https://servicenowsso.applications.uwa.edu.au/sp?id=ticket&table=incident&sys_id=cf45405bdbfd04d07d4c187344961986], or by replying to this email (please do not reply??inline).
> 
> If you would like to view the progress of this ticket, you can do so by logging in to the Service Portal [http://serviceportal.it.uwa.edu.au/] and accessing "My Tickets" menu in the top right.
> 
>   IT Service Desk
>  
>     ????CRICOS Code: 00126G
> 
> Ref:UWAMSG3946357


On Thu, Jan 09, 2020 at 12:43:02AM -0800, UWA Service Desk wrote:
>   Hi UCC 
>  
> We believe INC0425380 [https://servicenowsso.applications.uwa.edu.au/sp?id=ticket&table=incident&sys_id=cf45405bdbfd04d07d4c187344961986]??regarding??Network interruptions/TCP resets??has been resolved with comments for your attention:
> 
> Hi Nick,
> 
> As we haven't heard from you after multiple contact attempts we will be closing this ticket.
> 
> If you have any further issues or concerns please raise a new ticket by emailing IT-ServiceDesk at uwa.edu.au
> 
> Kind Regards
> 
> If this ticket has not been resolved to your satisfaction, please reply to this email within 3 business days, after which this ticket will be automatically closed (please do not reply inline).
> 
>   IT Service Desk
>     ????CRICOS Code: 00126G
> Ref:UWAMSG3988093

On Fri, Jan 10, 2020 at 07:04:55PM +0800, John Hodge wrote:
> Rachel,
> 
> Hopefully this gets through (not sure how emails to tickets work)
> 
> We haven't seen the issue since the new year, but at its worst all active
> TCP connections from/to any address under 130.95.13 and te outside world
> were being terminated (Long-running connections and brand new
> connections).?? We did not get the chance to test if this issue was present
> with connections within UWA.
> 
> John Hodge [TPG]
> UCC Wheel Member
-- 
   Nick Bannon   | "I made this letter longer than usual because
                 | I lack the time to make it shorter." - Pascal