Two errors -- security issues? (Error 17810 & 18736)

  • I'm on SQL Server 2012 SP3 and last night I got two odd errors that I don't know if they're related.

    In my SQL Server logs I see two error messages of:
    Error: 17836, Severity 20, State: 17
    Length specified in network packet payload didnot match number of bytes read; the connection has been closed. Please contactthe vendor of the client library. [CLIENT: xx.xx.xx.xx]

    and then a few hours later I see:
    Error: 17810, Severity: 20, State: 2
    Could not connect because the maximum number of'1' dedicated administrator connections already exists. Before a new connectioncan be made, the existing dedicated administrator connection must be dropped,either by logging off or ending the process. [CLIENT: xx.xx.xx.xx]

    The ip address is the same in both error messages. 

    No one is using the DAC connection now, I checked with:
    SELECT *
    FROM sys.dm_exec_sessions
    WHERE endpoint_id = 1

    And I was able to connect to the DAC myself through SSMS this morning.
      I did a nslookup on the ip address, and it gives me a server and an address.  I guess I need to go talk with the networking guys.

    Who was using the DAC connection?  Is there a DMV to show the historical usage?  How should I investigate these error messages further?

    Thanks,
    Rob

  • Mystery solved.  I talked with our network folks, and these errors are from our network scanner.  New and interesting things to discover on a new system. 🙂

    Thanks,
    Rob

Viewing 2 posts - 1 through 1 (of 1 total)

You must be logged in to reply to this topic. Login to reply