Multiple "Ethernet Auth Ok" and "Ethernet Auth Fail" events

[danielbarrantes]

I have had some inconveniences due to a large number of events generated by various energy meters since when performing an event count at the end of the month, they present between 30,000 to 50,000 events per "Cause: Ethernet" and "Effect value: Auth Ok and Auth Fail ".

Initially it was thought that they were generated every time someone tried to register, however due to the large number of monthly events it is impossible that this is due to a failed authentication by a user.

I need to know the origin of these events so that I can attack the root cause and that they do not generate as much disk space.

 

[Charles_Murison · Accepted solution]

Hello @danielbarrantes ,

By chance, are these devices time sync'd via PME? If so this could explain some of these events. When PME sends a time sync to a meter with advanced security there are actually 2 time sync messages, one without user security information and a second with security information. Some meters will ignore the first message, others will register that message as a failed authentication.

Not much that can be changed inside PME at this time. The T1 device to me looks like information in some software (likely PME) is using the wrong password for User1.

Regards,

Charles.

[Grant_IPACS]

Hi @Charles_Murison  and @danielbarrantes , @jerry_IPACS  and I have seen similar issues on one of our sites and thought it may be because we are not using the default meter password, is there any fix on the horizon?

[Charles_Murison]

Hello @Grant_IPACS ,

Would need to know more details, device types, firmware versions, advanced/standard/no security/legacy security enabled or disabled, number of devices etc. Time sync is just one possible reason, more investigations would be needed to determine if this is the root cause on your system.

Regards,

Charles