Imperva Cyber Community

communities_1.jpg
 View Only
Expand all | Collapse all

Oracle Imperva agent version 14.4.0.120 crash database server

  • 1.  Oracle Imperva agent version 14.4.0.120 crash database server

    Posted 12-20-2021 21:29
    Could someone please share with us some real use cases with Oracle Imperva agent version 14.4.0.120 running on Oracle 19c & 12c /  Exadata Linux 4.14.35-1902.306.2.7.el7uek.x86_64?

    Since 30th Nov, we have six database server reboots and all are related to Imperva Agent (either with Injection Kernel space or User Space Collector).

    Anyone using this version of Imperva experience similar issue.....
    #DatabaseActivityMonitoring

    ------------------------------
    Dominic Tsang
    Cyber Data and Database Security Engineer
    ------------------------------


  • 2.  RE: Oracle Imperva agent version 14.4.0.120 crash database server

    Posted 12-21-2021 17:24
    Hi,

    Please check these ones -> https://docs.imperva.com/howto/26149592 and https://docs.imperva.com/howto/e2f6af9e and https://docs.oracle.com/cd/E20451_01/html/E28021/glyvd.html
    Maybe it is your issue.

    Please give feedback.




    ------------------------------
    Karol Gruszczynski
    IT SECURITY EXPERT
    Trafford IT
    Warsaw
    ------------------------------



  • 3.  RE: Oracle Imperva agent version 14.4.0.120 crash database server

    Posted 02-01-2022 06:00
    Hi, @Dominic Tsang
    Have you fixed the issue?
    We faced with simmilar issue on Oracle 19c and Rhel 7.7. Agent version is 14.4.0.80.
    And in different cases it leads to bit different behavior: in some cases servers went to bootloop with installed agent, for other servers lost the networks (bond interefaces crashed).
    In the article provided by @Karol Gruszczynski written that issue is not relevant for agents with version 14.4 and above

    ​​

    ------------------------------
    [Nikolay] [Kuznetsov]
    ------------------------------



  • 4.  RE: Oracle Imperva agent version 14.4.0.120 crash database server

    Posted 02-07-2022 17:06
    Experiencing the same issue.  Have tested agents up to version 14.5.

    ------------------------------
    Enrique Cedeno
    Senior Security Engineer
    Cincinnati OH
    ------------------------------



  • 5.  RE: Oracle Imperva agent version 14.4.0.120 crash database server

    Posted 02-08-2022 02:09
    Hi Enrique.
    Can you provide some details about your issue? ​​

    ------------------------------
    [Nikolay] [Kuznetsov]
    ------------------------------



  • 6.  RE: Oracle Imperva agent version 14.4.0.120 crash database server

    Posted 05-12-2022 23:00
    Is there a similar problem in version 14.5?

    ------------------------------
    Wenlong Wang
    Technical Director
    Beijing China
    ------------------------------



  • 7.  RE: Oracle Imperva agent version 14.4.0.120 crash database server

    Posted 05-13-2022 06:19

    Hi @Wenlong Wang,

    Thanks for posting. My understanding is that the issue with 14.4.0.120 ​is a very specific issue and we have a team looking into it.

    If you have an issue with version 14.5, it may be best to raise a support ticket so that they can look into the exact behaviors you are experiencing. If you haven't found answers on community, you could try searching the support portal, which pulls from documentation and knowledgebase also.

    THanks,



    ------------------------------
    Sarah Lamont(csp)
    Digital Community Manager
    ------------------------------



  • 8.  RE: Oracle Imperva agent version 14.4.0.120 crash database server
    Best Answer

    Posted 03-14-2022 12:05

    Hello Dominic,

    Thank you for posting above issue. If the issue still exists , Please open a case with Imperva Support to further investigate this issue
    You can open support case by calling Global support hotline number at +1 877-467-3780, via imperva customer portal or email at support@imperva.com

    Once the case is opened, please share following information to help support further investigate this issue

    1. Time stamp of the issue
    2. Verify if there are any core files generated on the DB server, get the core files and upload to Imperva FTP under the case folder 
    3.Collect imperva agent get-tech-info logs and upload to imperva ftp under the case folder 
    Regards



    ------------------------------
    Ashwin Patil (csp)
    Senior Product Support Engineer
    Tel Aviv CA
    ------------------------------



  • 9.  RE: Oracle Imperva agent version 14.4.0.120 crash database server

    Posted 04-04-2022 03:04
    Edited by Nguyen Doan 04-04-2022 03:04
    Hi Dominic,

    Did you resolve the issue?
    I'm having with simmilar issue on Oracle 19c and Unbreakable Enterprise Kernel (UEK) 5. Could you share some detail about this?

    Thank you.




  • 10.  RE: Oracle Imperva agent version 14.4.0.120 crash database server

    Posted 04-05-2022 07:20
    Hi Nguyen,

    No. The issue is not fully resolved. Imperva support recommended us to  install Imperva-ragent-OEL-v7-kUEK-v5-px86_64-b14.4.0.120.0.619224 and configure ragent to use Oracle USERSPACE. That appears to work few days. Then, it triggered server eviction and resulted in many compute nodes reboot. We engage Oracle support to identify the root cause and was told that there are massive memory leak (over 600Gb) from the injected Oracle background but Oracle fail to identify the memory leak origin. We are sure there is still bug in either Oracle injection module or Imperva agent. We are planning to do live monitor this root to collect more data for both Oracle & Imperva support.

    Do you mind sharing the experience from your site.

    Regards,
    Dom

    ------------------------------
    Dominic Tsang
    Cyber Data and Database Security Engineer
    ------------------------------



  • 11.  RE: Oracle Imperva agent version 14.4.0.120 crash database server

    Posted 04-05-2022 22:29
    Edited by Nguyen Doan 04-05-2022 22:29
    Hi Dominic,

    We are having the same issue, the host  memory usage was too high and crashed.We just enabled the agent and will monitor its process for few days. I'll update if there is something.

    Please keep this post posted, thank you.






  • 12.  RE: Oracle Imperva agent version 14.4.0.120 crash database server

    Posted 04-20-2022 07:35
    Hi Nguyen,

    How are the tests going? Did you manage to replicate the reboot event and capture any meaningful dump? We do also tried in our Non-PRD environment but failed to replicate the same. Please share your valuable findings if possible.

    Thanks in advance.

    ------------------------------
    Dominic Tsang
    Cyber Data and Database Security Engineer
    ------------------------------



  • 13.  RE: Oracle Imperva agent version 14.4.0.120 crash database server

    Posted 04-06-2022 07:37

    Hi all,

    I have connected with support on this and they advised that there could be many causes for this issue, therefore it would be best to open a support ticket or continue from the previous ticket so that they can investigate properly.

    Thanks,



    ------------------------------
    Sarah Lamont(csp)
    Digital Community Manager
    ------------------------------