Failed connection attempts "wmiprvse.exe" on Win2008R2
Hi,
We have production database in RAC HOST1 (sid:PROD1 VIP:10.10.10.1) and HOST2 (sid:PROD2 VIP:10.10.10.2) on Windows 2008R2. Database version is 10.2.0.5 64bit and Grid Infrastructure is 11.2.0.3.
From the beginning we have issue, that some process is obviously trying to connect to the database with windows SYSTEM account, because oracle SYSTEM account locks after an hour.
After searching the logs, we found that every exactly 8 minutes it is trying to connect:
1. listener.log entry - the port number is not fixed
+27-MAR-2012 12:12:34 * (CONNECT_DATA=(SERVER=DEDICATED) (SERVICE_NAME=servicename.domain.si) (INSTANCE_NAME=prod1) (CID=(PROGRAM=C:\Windows\system32\wbem\wmiprvse.exe)(HOST=HOST1)(USER=SYSTEM))) * (ADDRESS=(PROTOCOL=tcp)(HOST=10.10.10.1)(PORT=65362)) * establish * elesprod.eles.si * 0+
2. after a minute (60 seconds connection timeout) we get also record in alert_prod1.log
Tue Mar 27 12:13:35 Central Europe Daylight Time 2012
WARNING: inbound connection timed out (ORA-3136)
3. And sqlnet.log
Fatal NI connect error 12170.
VERSION INFORMATION:
TNS for 64-bit Windows: Version 10.2.0.5.0 - Production
Oracle Bequeath NT Protocol Adapter for 64-bit Windows: Version 10.2.0.5.0 - Production
Windows NT TCP/IP NT Protocol Adapter for 64-bit Windows: Version 10.2.0.5.0 - Production
Time: 27-MAR-2012 12:13:35
Tracing not turned on.
Tns error struct:
ns main err code: 12535
TNS-12535: TNS:operation timed out
ns secondary err code: 12606
nt main err code: 0
nt secondary err code: 0
nt OS err code: 0
Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=10.10.10.1)(PORT=65362))
The funny thing is that, this connection attempts are only on node 1 (HOST1) and none on node 2 (HOST2).
Any clue what is going on?
p.s.: we create "nolock" profile just for system user, so locking that account is not problem, but I want to figure it out, why/who/what is the pain in my a**.