Invite a Co-worker
Send a co-worker an invite to the Exchange portal.Just enter their email address and we’ll connect them to register. After joining, they will belong to the same company.
Send Invite Cancel
79289members
343963posts

Multiple "Ethernet Auth Ok" and "Ethernet Auth Fail" events

Solved
danielbarrantes
Crewman
Crewman

Multiple "Ethernet Auth Ok" and "Ethernet Auth Fail" events

 

I have had some inconveniences due to a large number of events generated by various energy meters since when performing an event count at the end of the month, they present between 30,000 to 50,000 events per "Cause: Ethernet" and "Effect value: Auth Ok and Auth Fail ".

 

Initially it was thought that they were generated every time someone tried to register, however due to the large number of monthly events it is impossible that this is due to a failed authentication by a user.

 

I need to know the origin of these events so that I can attack the root cause and that they do not generate as much disk space.

 

Ejm.PNG 

Tags (1)

Accepted Solutions
Charles_Murison
Picard Picard
Picard
0 Likes
2
470

Re: Multiple "Ethernet Auth Ok" and "Ethernet Auth Fail" events

Hello @danielbarrantes ,

 

By chance, are these devices time sync'd via PME? If so this could explain some of these events. When PME sends a time sync to a meter with advanced security there are actually 2 time sync messages, one without user security information and a second with security information. Some meters will ignore the first message, others will register that message as a failed authentication.

 

Not much that can be changed inside PME at this time. The T1 device to me looks like information in some software (likely PME) is using the wrong password for User1.

 

Regards,

Charles.

L4 Prime for Advanced metering and Utilities

See Answer In Context

Tags (1)
3 Replies 3
Charles_Murison
Picard Picard
Picard
0 Likes
2
471

Re: Multiple "Ethernet Auth Ok" and "Ethernet Auth Fail" events

Hello @danielbarrantes ,

 

By chance, are these devices time sync'd via PME? If so this could explain some of these events. When PME sends a time sync to a meter with advanced security there are actually 2 time sync messages, one without user security information and a second with security information. Some meters will ignore the first message, others will register that message as a failed authentication.

 

Not much that can be changed inside PME at this time. The T1 device to me looks like information in some software (likely PME) is using the wrong password for User1.

 

Regards,

Charles.

L4 Prime for Advanced metering and Utilities
Tags (1)
Grant_IPACS
Commander
Commander
0 Likes
1
468

Re: Multiple "Ethernet Auth Ok" and "Ethernet Auth Fail" events

Hi @Charles_Murison  and @danielbarrantes , @jerry_IPACS  and I have seen similar issues on one of our sites and thought it may be because we are not using the default meter password, is there any fix on the horizon?

 

 

Regards

Grant
Tags (1)
Charles_Murison
Picard Picard
Picard
0 Likes
0
467

Re: Multiple "Ethernet Auth Ok" and "Ethernet Auth Fail" events

Hello @Grant_IPACS ,

 

Would need to know more details, device types, firmware versions, advanced/standard/no security/legacy security enabled or disabled, number of devices etc. Time sync is just one possible reason, more investigations would be needed to determine if this is the root cause on your system.

 

Regards,

Charles

L4 Prime for Advanced metering and Utilities
Tags (1)