datalossd process high cpu on Mac

[hugo2069]

Have an end-user who's Mac is having issues with high cpu.  The datalossd process consumes the majority of the cpu cycles.  Am I assuming correctly that this process is McAfee DLP?

Any help would be appreciated.

Thanks

[DLP_RS]

datalossd is a DLP process. Please share the DLP for MAC version and OS details.

Additionally, was it working earlier? Any recent changes made? Number of machines affected.

[hugo2069]

So currently only one user has brought up the issue.

User is running Mojave 10.14.3
DLP Endpoint 11.1.0.45

User states that the issue has been occuring for some time now (several weeks).  We have been running the same version of the McAfee products for several months now.

[DLP_RS]

Please check if  Local Discovery rule applied on the policy?

It can be verified under McAfee Console UI to see if there's a scan running on the client machine.

[hugo2069]

Can this be verified in ePO?  The user is in a meeting and I do not have access to the system at the moment.

[JaganA]

@hugo2069It was a known issue and got fixed in DLP for MAC v11.1.3. I would rather say, install the latest version.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

[hugo2069]

@JaganA  I checked the product download page and I only see version 11.1.100.8, as the latest version of 11.1 and then 11.2 is also available.  Do not see 11.1.3

[JaganA · Accepted solution]

Yes, the fix has been included in 11.1.100 & 11.2 as well, you can use one of these versions.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

[dabster]

I am seeing this way often on 11.6 version with console reporting crash as below:

Any help ?

Process: datalossd [423]
Path: /usr/local/McAfee/DlpAgent/bin/datalossd.app/Contents/MacOS/datalossd
Identifier: datalossd

Crashed Thread: 11

Exception Type: EXC_CRASH (SIGABRT)
Exception Codes: 0x0000000000000000, 0x0000000000000000
Exception Note: EXC_CORPSE_NOTIFY

Thread 11 Crashed:
0 libsystem_kernel.dylib 0x00007fff202e692e __pthread_kill + 10
1 libsystem_pthread.dylib 0x00007fff203155bd pthread_kill + 263
2 libsystem_c.dylib 0x00007fff2026a406 abort + 125
3 libc++abi.dylib 0x00007fff202d8ef2 abort_message + 241
4 libc++abi.dylib 0x00007fff202ca5e5 demangling_terminate_handler() + 242
5 libobjc.A.dylib 0x00007fff201c3595 _objc_terminate() + 104
6 libc++abi.dylib 0x00007fff202d8307 std::__terminate(void (*)()) + 8
7 libc++abi.dylib 0x00007fff202dabeb __cxxabiv1::failed_throw(__cxxabiv1::__cxa_exception*) + 27
8 libc++abi.dylib 0x00007fff202dabb2 __cxa_throw + 116
9 libc++.1.dylib 0x00007fff202adbd6 std::__1::__throw_out_of_range(char const*) + 56
10 libc++.1.dylib 0x00007fff202adb9e std::__1::__basic_string_common<true>::__throw_out_of_range() const + 16
11 libc++.1.dylib 0x00007fff202b099c std::__1::basic_string<wchar_t, std::__1::char_traits<wchar_t>, std::__1::allocator<wchar_t> >::basic_string(std::__1::basic_string<wchar_t, std::__1::char_traits<wchar_t>, std::__1::allocator<wchar_t> > const&, unsigned long, unsigned long, std::__1::allocator<wchar_t> const&) + 210
12 com.mcafee.dlp 0x0000000103cee604 CSF::SlowDictionarySearcher::searchContent(std::__1::basic_string<wchar_t, std::__1::char_traits<wchar_t>, std::__1::allocator<wchar_t> >&, std::__1::basic_string<wchar_t, std::__1::char_traits<wchar_t>, std::__1::allocator<wchar_t> >&, unsigned int, CSF::FoundMatches&) + 1284
13 com.mcafee.dlp 0x0000000103d55bf9 CSF::ContentSearcher::searchContent(std::__1::basic_string<wchar_t, std::__1::char_traits<wchar_t>, std::__1::allocator<wchar_t> > const&, CSF::FoundMatches&) + 441
14 com.mcafee.dlp 0x0000000103c0f275 ClassificationEngine::calcClassifications(TeResponseFileInfoExtraction&, DlpFileEvent&, std::__1::set<boost::uuids::uuid, GUIDComparator, std::__1::allocator<boost::uuids::uuid> >&) + 5861
15 com.mcafee.dlp 0x0000000103bfd784 RuleEngine::getProtectionRuleResult(TeResponseFileInfoExtraction&, DlpFileEvent&, int) + 116
16 com.mcafee.dlp 0x0000000103dbc1f6 FileEventManager::onExtractTextEndedSingle(DlpFileEvent*, TeResponseFileInfoExtraction) + 1574
17 com.mcafee.dlp 0x0000000103dc47d4 void boost::_bi::list3<boost::_bi::value<FileEventManager*>, boost::arg<1>, boost::arg<2> >::operator()<boost::_mfi::mf2<void, FileEventManager, DlpFileEvent*, TeResponseFileInfoExtraction>, boost::_bi::rrlist2<DlpFileEvent*, TeResponseFileInfoExtraction> >(boost::_bi::type<void>, boost::_mfi::mf2<void, FileEventManager, DlpFileEvent*, TeResponseFileInfoExtraction>&, boost::_bi::rrlist2<DlpFileEvent*, TeResponseFileInfoExtraction>&, int) + 116
18 com.mcafee.dlp 0x0000000103dc474d boost::detail::function::void_function_obj_invoker2<boost::_bi::bind_t<void, boost::_mfi::mf2<void, FileEventManager, DlpFileEvent*, TeResponseFileInfoExtraction>, boost::_bi::list3<boost::_bi::value<FileEventManager*>, boost::arg<1>, boost::arg<2> > >, void, DlpFileEvent*, TeResponseFileInfoExtraction>::invoke(boost::detail::function::function_buffer&, DlpFileEvent*, TeResponseFileInfoExtraction) + 45
19 com.mcafee.dlp 0x0000000103bd9a18 boost::function2<void, DlpFileEvent*, TeResponseFileInfoExtraction>::operator()(DlpFileEvent*, TeResponseFileInfoExtraction) const + 88
20 com.mcafee.dlp 0x0000000103be2a39 boost::asio::detail::completion_handler<boost::_bi::bind_t<boost::_bi::unspecified, boost::function<void (DlpFileEvent*, TeResponseFileInfoExtraction)>, boost::_bi::list2<boost::_bi::value<DlpFileEvent*>, boost::_bi::value<TeResponseFileInfoExtraction> > > >::do_complete(void*, boost::asio::detail::scheduler_operation*, boost::system::error_code const&, unsigned long) + 233
21 com.mcafee.dlp 0x0000000103b18f6d boost::asio::detail::scheduler::do_run_one(boost::asio::detail::conditionally_enabled_mutex::scoped_lock&, boost::asio::detail::scheduler_thread_info&, boost::system::error_code const&) + 813
22 com.mcafee.dlp 0x0000000103b18a71 boost::asio::detail::scheduler::run(boost::system::error_code&) + 193
23 com.mcafee.dlp 0x0000000103bb043f boost::asio::io_context::run() + 47
24 libboost_thread.dylib 0x00000001059ed8a4 boost::(anonymous namespace)::thread_proxy(void*) + 164
25 libsystem_pthread.dylib 0x00007fff203158fc _pthread_start + 224
26 libsystem_pthread.dylib 0x00007fff20311443 thread_start + 15

[Former Member]

Thank you very much, Now I am able to fix this issue with the support of all the answers shared under this thread, it really means a lot to my problem, Thanks.

Thanks & Regards,

fmwhatsapp inc.