5 Replies Latest reply on Jun 17, 2013 8:12 AM by SLOtransmission

    Failed connection attempts "wmiprvse.exe" on Win2008R2

      We have production database in RAC HOST1 (sid:PROD1 VIP: and HOST2 (sid:PROD2 VIP: on Windows 2008R2. Database version is 64bit and Grid Infrastructure is
      From the beginning we have issue, that some process is obviously trying to connect to the database with windows SYSTEM account, because oracle SYSTEM account locks after an hour.
      After searching the logs, we found that every exactly 8 minutes it is trying to connect:

      1.     listener.log entry - the port number is not fixed
      +27-MAR-2012 12:12:34 * (CONNECT_DATA=(SERVER=DEDICATED) (SERVICE_NAME=servicename.domain.si) (INSTANCE_NAME=prod1) (CID=(PROGRAM=C:\Windows\system32\wbem\wmiprvse.exe)(HOST=HOST1)(USER=SYSTEM))) * (ADDRESS=(PROTOCOL=tcp)(HOST= * establish * elesprod.eles.si * 0+

      2.     after a minute (60 seconds connection timeout) we get also record in alert_prod1.log
      Tue Mar 27 12:13:35 Central Europe Daylight Time 2012
      WARNING: inbound connection timed out (ORA-3136)

      3.     And sqlnet.log
      Fatal NI connect error 12170.
           TNS for 64-bit Windows: Version - Production
           Oracle Bequeath NT Protocol Adapter for 64-bit Windows: Version - Production
           Windows NT TCP/IP NT Protocol Adapter for 64-bit Windows: Version - Production
      Time: 27-MAR-2012 12:13:35
      Tracing not turned on.
      Tns error struct:
      ns main err code: 12535
      TNS-12535: TNS:operation timed out
      ns secondary err code: 12606
      nt main err code: 0
      nt secondary err code: 0
      nt OS err code: 0
      Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=

      The funny thing is that, this connection attempts are only on node 1 (HOST1) and none on node 2 (HOST2).
      Any clue what is going on?

      p.s.: we create "nolock" profile just for system user, so locking that account is not problem, but I want to figure it out, why/who/what is the pain in my a**.