[AWA] Windows agents ENDED_LOST - ended undefined (host terminated prematurely)

Document ID : KB000104350
Last Modified Date : 04/07/2018
Show Technical Document Details
Issue:
Windows agents in production environment were down in batch with status ENDED_LOST - ended undefined (host terminated prematurely)
All agents were found stopped and need to be manually restarted
The issue happened twice until the moment of recognition.
Error messages:
------------------ Agent's log ---------------
20180207/135139.049 - U1002200 Received an invalid message from partner '*UNKNOWN' via connection '<ip address>'.
20180207/135139.049 - U1002203 Field 'Length' in message header is invalid.
---------- Service Manager log ----------
20180702/135140.142 - U0022042 Process 'UC4 WinX64-Agent X' abnormal ended with access violation.
--------------------------------------------------
Environment:
Windows Agent 10.0.2
Cause:
Investigation:
  • When try to verify the ip address, it turns out to be a Network scanning server, it appears that this network scanning server flooded the network with messages to check for operating ports (including operation ports of Windows Agents)
  • Windows agents which received the message found it to be invalid and forced shut down.
  • This behavior was found and fixed in version 10.0.3
Resolution:
The behavior of forcing shut down after receiving invalid message was fixed from version 10.0.3