AnsweredAssumed Answered

Error in SQL Server after scan

Question asked by Felipe de Mesquita Gurian on Feb 14, 2018
Latest reply on Feb 14, 2018 by Ian Glennon

We receive three errors after running a scan.

 

 

MSSSPI-116: Logon       Error: 17828, Severity: 20, State: 4.    

The prelogin packet used to open the connection is structurally invalid; the connection has been closed. Please contact the vendor of the client library. [CLIENT: xx.xx.x.xxx]  [Policy: MSSQL Logfile Template]

 

MSSSPI-116: Logon       Error: 17836, Severity: 20, State: 14.    

Length specified in network packet payload did not match number of bytes read; the connection has been closed. Please contact the vendor of the client library. [CLIENT: xx.xx.x.xxx]  [P...

 

MSSSPI-115:                                     Error: 17832, Severity: 20, State: 2.    

The login packet used to open the connection is structurally invalid; the connection has been closed. Please contact the vendor of the client library. [CLIENT: xx.xx.x.xxx]  [Policy: MSSQL Logfile ...

 

 

In the error 17832, i found this discussion bellow:

SQL error message alert after VM Scan 

 

He says that this occurs because of the size of the packet that qualys sends to the database server.

 

 

The solution is:

 

  1.     On the Start menu, click Run. 
  2.     Type regedit, and then click OK. (If the User Account Control dialog box appears, click Continue.) 
  3.     Navigate to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\Parameters. 
  4.     If the MaxTokenSize parameter is not present, right-click Parameters, point to New, and then click DWORD (32-bit) Value. Name the registry entry MaxTokenSize. 
  5.     Right-click MaxTokenSize, and then click Modify. 
  6.     In the Value data box type the desired     MaxTokenSize   value.  Note:   

    Hexadecimal value ffff (decimal value 65535) is the maximum recommended token size. Providing this value would probably solve the problem, but could have negative computer-wide effects with regard to performance. We recommend that you establish the minimum     MaxTokenSize   value that allows for the largest token of any user in your organization and enter that value.

     
  7.            Click OK.       
  8.     Close Registry Editor. 
  9.     Restart the computer. 

however I need to know what is the size of the packet that qualys sends to the server.

 

Do you have any way to find it, or have a standard size packet who qualys sends to the server?

Outcomes