cancel
Showing results for 
Search instead for 
Did you mean: 
Quitch
Level 7
Report Inappropriate Content
Message 1 of 7

Clients appearing then disappearing

Jump to solution

This is a follow-up on my previous topic - https://community.mcafee.com/message/173247#173247

Unfortunately, I started celebrating too early. While removing the unmanaged entry from ePO the remote client would appear once the agent had been woken up, I've found that less than a minute later they have disappeared from ePO again.

As a recap from the previous topic, this is a fresh ePO 4.5 install on a server which uses the same name as the server it replaces. The keys were not ported, the DB was not migrated, McAfee 4.0 agents (which have been kept patched) were deployed fresh to all machines using the force install setting. We deploy agents using a domain admin account used for no other purpose, all deployments report successful and we have verified with the timestamp on the FramePkg.exe on machines that they are receiving the file.

To clarify the issue now experienced:

1. Delete unmanaged entry in ePO

2. Use psexec to force wakeup on remote agent at 0833 - psexec \\machinename -u domain\user "c:\program files\mcafee\common framework\cmdagent.exe" /p /e /c - finishes with error code 0

3. Verify that agent has added the system to ePO. It is listed as managed with a full set of properties.

4. Within five minutes a search for the system turns up no results.

What on earth?

I've noticed than when it is visible my systems are reporting 556 are compliant and 1 is non-compliant. Once it disappears from search my report shows 557 systems compliant. I exported the results and found that the rogue system disappears and is replaced with a different system which moves into the compliant area. A few minutes later this system disappears (cannot be found in a search) and the one I woke-up reappears as non-compliant and is discoverable via search.

So far as I can tell systems are appearing in ePO when they talk to the ePO server, but then disappear a minute or two later. This is leading to what look like stable compliance stats, but in reality a number of those systems appear to be ones which are trading places, appearing and disappearing.

Below is the log of the system I was working during the wake-up and reporting. The log here ends at 0835 and the next entry isn't until 0838 (Agent enforcing policies) by which point it was no longer visible in ePO (I checked at 0837)

2011-02-04 08:33:17     i     #2800     Agent     Agent Started Enforcing policies

2011-02-04 08:33:17     I     #2800     Agent     Thread signal occurred

2011-02-04 08:33:17     I     #2800     Manage     Enforcing policies

2011-02-04 08:33:18     i     #3544     Agent     Agent started performing ASCI

2011-02-04 08:33:18     I     #3544     Agent     Collecting Properties

2011-02-04 08:33:18     I     #3544     Agent     Collecting IP address using Internet Manager

2011-02-04 08:33:18     I     #3544     naInet     HTTP Session initialized

2011-02-04 08:33:18     I     #3544     imsite     Connecting to server: 100.100.0.248 on port: 81

2011-02-04 08:33:18     i     #2800     Manage     Enforcing Policies for EPOAGENT3000META

2011-02-04 08:33:18     I     #3544     naInet     HTTP Session closed

2011-02-04 08:33:18     I     #3544     Manage     Collecting Properties

2011-02-04 08:33:18     i     #2800     Manage     Enforcing Policies for EPOAGENT3000

2011-02-04 08:33:18     i     #2800     Manage     Enforcing Policies for McAfee Agent

2011-02-04 08:33:18     i     #3544     Manage     Collecting Properties

2011-02-04 08:33:18     I     #2800     Agent     CePOAgent::EnforcePolicy priority=-2

2011-02-04 08:33:18     I     #2800     Agent     Enforcing policies

2011-02-04 08:33:18     I     #2800     LstnSvr     Enforcing Policies

2011-02-04 08:33:18     I     #2800     Logging     Enforcing policies

2011-02-04 08:33:18     I     #2800     Manage     Enforcing policies

2011-02-04 08:33:18     I     #2800     UsrSpCt     Enforcing policies

2011-02-04 08:33:18     I     #3544     Agent     Agent is sending properties version to the ePO Server

2011-02-04 08:33:19     i     #3544     Agent     Agent started performing ASCI

2011-02-04 08:33:19     I     #2388     Agent     Started processing a package..

2011-02-04 08:33:19     I     #3544     Agent     Agent is sending properties version to the ePO Server

2011-02-04 08:33:19     I     #2800     Sched     >>--CSchedule::EnforcePolicy

2011-02-04 08:33:19     I     #2388     Agent     Preparing Props Version Package

2011-02-04 08:33:19     I     #2800     Sched     >>--CSchedule::ModifyTask

2011-02-04 08:33:19     I     #2800     Sched     <<--CSchedule::ModifyTask

2011-02-04 08:33:19     I     #2800     Sched     Product Updates - Last run time(local) is Fri Feb 04 08:26:00 2011

2011-02-04 08:33:19     I     #2800     Sched     

2011-02-04 08:33:19     I     #2800     Sched     0 fields of the task 129 are updated successfully

2011-02-04 08:33:19     I     #2800     Sched     RunAtEnforcementEnabled not found in the task settings

2011-02-04 08:33:19     I     #2800     Sched     >>--CSchedule::ModifyTask

2011-02-04 08:33:19     I     #2800     Sched     <<--CSchedule::ModifyTask

2011-02-04 08:33:19     I     #2388     SpiPkgr     Using sequence number 11570

2011-02-04 08:33:19     i     #2388     Agent     Agent communication session started

2011-02-04 08:33:19     i     #2388     Agent     Agent is sending PROPS VERSION package to ePO server

2011-02-04 08:33:19     i     #2388     Agent     Agent is connecting to ePO server

2011-02-04 08:33:19     I     #2388     naInet     HTTP Session initialized

2011-02-04 08:33:19     I     #2388     imsite          Upload from: C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412819990140000_29087.spkg

2011-02-04 08:33:19     I     #2388     imsite          Upload response target: C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412819994830000_10896.spkg

2011-02-04 08:33:19     I     #2388     naInet     Uploading file C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412819990140000_29087.spkg to ePO Server...

2011-02-04 08:33:19     I     #2388     naInet     Connecting to Real Server: 100.100.0.248 on port: 81

2011-02-04 08:33:19     I     #2388     naInet     Connected to ePO Server: 100.100.0.248

2011-02-04 08:33:19     I     #2388     naInet     Uploading SPIPE HTTP header

2011-02-04 08:33:19     I     #2388     naInet     Uploading data in bytes: 934

2011-02-04 08:33:19     I     #2388     naInet     Reading acknowledgement from ePO Server

2011-02-04 08:33:19     I     #2800     Sched     Deploy McAfee Agent Updates - Last run time(local) is Tue Sep 28 12:15:06 2010

2011-02-04 08:33:19     I     #2800     Sched     

2011-02-04 08:33:19     I     #2800     Sched     0 fields of the task 131 are updated successfully

2011-02-04 08:33:19     I     #2800     Sched     >>--CSchedule::ModifyTask

2011-02-04 08:33:20     I     #2800     Sched     <<--CSchedule::ModifyTask

2011-02-04 08:33:20     I     #2388     naInet     Authentication successful: HTTP/1.1 200 OK

2011-02-04 08:33:20     I     #2388     naInet     

2011-02-04 08:33:20     I     #2388     naInet     Received response [200 OK] from ePO Server

2011-02-04 08:33:20     I     #2388     naInet     Receiving a package ePO Server

2011-02-04 08:33:20     I     #2388     naInet     Uploaded file : C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412819990140000_29087.spkg to Server successfully

2011-02-04 08:33:20     I     #2388     naInet     HTTP Session closed

2011-02-04 08:33:20     i     #2388     Agent     Package uploaded to ePO Server successfully

2011-02-04 08:33:20     i     #2388     Agent     Agent communication session closed

2011-02-04 08:33:20     i     #2388     Agent     Agent received REQUEST PUBLIC KEY package from ePO server

2011-02-04 08:33:20     I     #2388     Agent     Started processing a package..

2011-02-04 08:33:20     I     #2388     Manage     Collecting Properties

2011-02-04 08:33:20     I     #2388     Manage     CEnforceProperties::LoadPropFiles() - Properties file not found, creating new

2011-02-04 08:33:20     i     #2388     Manage     Collecting Properties

2011-02-04 08:33:20     I     #2388     Agent     Preparing Agent Key Package

2011-02-04 08:33:20     I     #2388     Agent     Getting IP address for public key from Internet Manager

2011-02-04 08:33:20     I     #2388     naInet     HTTP Session initialized

2011-02-04 08:33:20     I     #2388     imsite     Connecting to server: 100.100.0.248 on port: 81

2011-02-04 08:33:20     I     #2800     Sched     Deploy McAfee VirusScan - Last run time(local) is Fri Feb 04 08:31:42 2011

2011-02-04 08:33:20     I     #2800     Sched     

2011-02-04 08:33:20     I     #2800     Sched     0 fields of the task 133 are updated successfully

2011-02-04 08:33:20     I     #2388     naInet     HTTP Session closed

2011-02-04 08:33:20     I     #1772     Sched     Deploy McAfee VirusScan - Last run time is : not run yet

2011-02-04 08:33:20     i     #1772     Sched     Added a new task Deploy McAfee VirusScan to Scheduler's task list

2011-02-04 08:33:20     I     #2800     Sched     >>--CSchedule::GetTask

2011-02-04 08:33:20     I     #2800     Sched     <<--CSchedule::GetTask

2011-02-04 08:33:20     I     #2800     Sched     >>--CSchedule::GetTask

2011-02-04 08:33:20     I     #2800     Sched     <<--CSchedule::GetTask

2011-02-04 08:33:20     I     #2800     Sched     >>--CSchedule::GetTask

2011-02-04 08:33:20     I     #2800     Sched     <<--CSchedule::GetTask

2011-02-04 08:33:20     I     #2800     Sched     <<--CSchedule::EnforcePolicy

2011-02-04 08:33:20     i     #2800     Agent     Agent finished Enforcing policies

2011-02-04 08:33:20     i     #2800     Agent     Next policy enforcement in 5 minutes

2011-02-04 08:33:20     I     #2388     SpiPkgr     Using sequence number 11571

2011-02-04 08:33:20     i     #2388     Agent     Agent communication session started

2011-02-04 08:33:20     I     #2388     Agent     Package type is AgentPubKey

2011-02-04 08:33:20     i     #2388     Agent     Agent is connecting to ePO server

2011-02-04 08:33:20     I     #2388     naInet     HTTP Session initialized

2011-02-04 08:33:20     I     #2388     imsite          Upload from: C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820001080000_13431.spkg

2011-02-04 08:33:20     I     #2388     imsite          Upload response target: C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820009200000_10938.spkg

2011-02-04 08:33:20     I     #2388     naInet     Uploading file C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820001080000_13431.spkg to ePO Server...

2011-02-04 08:33:20     I     #2388     naInet     Connecting to Real Server: 100.100.0.248 on port: 81

2011-02-04 08:33:20     I     #2388     naInet     Connected to ePO Server: 100.100.0.248

2011-02-04 08:33:20     I     #2388     naInet     Uploading SPIPE HTTP header

2011-02-04 08:33:20     I     #2388     naInet     Uploading data in bytes: 2662

2011-02-04 08:33:20     I     #2388     naInet     Reading acknowledgement from ePO Server

2011-02-04 08:33:21     i     #924     Sched     Scheduler: Invoking task [Deploy McAfee VirusScan]...

2011-02-04 08:33:21     I     #5120     Sched     >>--RunTask

2011-02-04 08:33:21     I     #5120     Manage     Running task SoftwareID:EPOAGENT3000, TaskID:133

2011-02-04 08:33:21     I     #2808     FrmSvc     User SID is S-1-5-18 and SessionID is 0

2011-02-04 08:33:21     i     #2808     Script     The deployment task will be re-tried in 5 minutes because Updater is in progress.

2011-02-04 08:33:21     I     #5120     Sched     <<--RunTask

2011-02-04 08:33:21     I     #924     Sched     Deploy McAfee VirusScan lCookie == NULL, Scheduler won't take care this task

2011-02-04 08:33:21     I     #924     Sched     Deploy McAfee VirusScan - Last run time(local) is Fri Feb 04 08:33:21 2011

2011-02-04 08:33:21     I     #924     Sched     

2011-02-04 08:33:21     I     #924     Sched     End of invoking the task

2011-02-04 08:33:22     I     #2388     naInet     No package to receive from ePO Server, HTTP return code: HTTP/1.1 202 OK

2011-02-04 08:33:22     I     #2388     naInet     

2011-02-04 08:33:22     I     #2388     naInet     Received response [202 OK] from ePO Server

2011-02-04 08:33:22     I     #2388     naihttp     client:no package to receive

2011-02-04 08:33:22     I     #2388     naInet     Uploaded file : C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820001080000_13431.spkg to Server successfully

2011-02-04 08:33:22     I     #2388     imsite     NaInet library returned code == 13

2011-02-04 08:33:22     I     #2388     naInet     HTTP Session closed

2011-02-04 08:33:22     i     #2388     Agent     No package received from ePO Server

2011-02-04 08:33:22     i     #2388     Agent     Agent communication session closed

2011-02-04 08:33:22     I     #2388     Agent     Started processing a package..

2011-02-04 08:33:22     I     #2388     Agent     Preparing Props Version Package

2011-02-04 08:33:22     I     #2388     SpiPkgr     Using sequence number 11572

2011-02-04 08:33:22     i     #2388     Agent     Agent communication session started

2011-02-04 08:33:22     i     #2388     Agent     Agent is sending PROPS VERSION package to ePO server

2011-02-04 08:33:22     i     #2388     Agent     Agent is connecting to ePO server

2011-02-04 08:33:22     I     #2388     naInet     HTTP Session initialized

2011-02-04 08:33:22     I     #2388     imsite          Upload from: C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820024990000_24482.spkg

2011-02-04 08:33:22     I     #2388     imsite          Upload response target: C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820028420000_9876.spkg

2011-02-04 08:33:22     I     #2388     naInet     Uploading file C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820024990000_24482.spkg to ePO Server...

2011-02-04 08:33:22     I     #2388     naInet     Connecting to Real Server: 100.100.0.248 on port: 81

2011-02-04 08:33:22     I     #2388     naInet     Connected to ePO Server: 100.100.0.248

2011-02-04 08:33:22     I     #2388     naInet     Uploading SPIPE HTTP header

2011-02-04 08:33:22     I     #2388     naInet     Uploading data in bytes: 918

2011-02-04 08:33:22     I     #2388     naInet     Reading acknowledgement from ePO Server

2011-02-04 08:33:23     I     #2388     naInet     Authentication successful: HTTP/1.1 200 OK

2011-02-04 08:33:23     I     #2388     naInet     

2011-02-04 08:33:23     I     #2388     naInet     Received response [200 OK] from ePO Server

2011-02-04 08:33:23     I     #2388     naInet     Receiving a package ePO Server

2011-02-04 08:33:23     I     #2388     naInet     Uploaded file : C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820024990000_24482.spkg to Server successfully

2011-02-04 08:33:23     I     #2388     naInet     HTTP Session closed

2011-02-04 08:33:23     i     #2388     Agent     Package uploaded to ePO Server successfully

2011-02-04 08:33:23     i     #2388     Agent     Agent communication session closed

2011-02-04 08:33:23     i     #2388     Agent     Agent received REQUEST PROPS package from ePO server

2011-02-04 08:33:23     I     #2388     Agent     Started processing a package..

2011-02-04 08:33:23     I     #2388     Agent     Preparing Props Package

2011-02-04 08:33:23     I     #2388     SpiPkgr     Using sequence number 11573

2011-02-04 08:33:23     i     #2388     Agent     Agent communication session started

2011-02-04 08:33:23     i     #2388     Agent     Agent is sending INC PROPS package to ePO server

2011-02-04 08:33:23     i     #2388     Agent     Agent is connecting to ePO server

2011-02-04 08:33:23     I     #2388     naInet     HTTP Session initialized

2011-02-04 08:33:23     I     #2388     imsite          Upload from: C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820033270000_699.spkg

2011-02-04 08:33:23     I     #2388     imsite          Upload response target: C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820036860000_26046.spkg

2011-02-04 08:33:23     I     #2388     naInet     Uploading file C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820033270000_699.spkg to ePO Server...

2011-02-04 08:33:23     I     #2388     naInet     Connecting to Real Server: 100.100.0.248 on port: 81

2011-02-04 08:33:23     I     #2388     naInet     Connected to ePO Server: 100.100.0.248

2011-02-04 08:33:23     I     #2388     naInet     Uploading SPIPE HTTP header

2011-02-04 08:33:23     I     #2388     naInet     Uploading data in bytes: 2054

2011-02-04 08:33:23     I     #2388     naInet     Reading acknowledgement from ePO Server

2011-02-04 08:33:24     I     #2388     naInet     No package to receive from ePO Server, HTTP return code: HTTP/1.1 202 OK

2011-02-04 08:33:24     I     #2388     naInet     

2011-02-04 08:33:24     I     #2388     naInet     Received response [202 OK] from ePO Server

2011-02-04 08:33:24     I     #2388     naihttp     client:no package to receive

2011-02-04 08:33:24     I     #2388     naInet     Uploaded file : C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412820033270000_699.spkg to Server successfully

2011-02-04 08:33:25     I     #2388     imsite     NaInet library returned code == 13

2011-02-04 08:33:25     I     #2388     naInet     HTTP Session closed

2011-02-04 08:33:25     i     #2388     Agent     No package received from ePO Server

2011-02-04 08:33:25     i     #2388     Agent     Agent communication session closed

2011-02-04 08:33:25     I     #2388     Agent     Agent communication failed, result=-44

2011-02-04 08:33:53     I     #4516     Uec     Received ipc data from mue

2011-02-04 08:33:53     I     #4516     Uec     Processing progress information

2011-02-04 08:33:53     i     #4516     Updater     Backing up file(s) Engine DAT

2011-02-04 08:33:53     I     #4516     Uec     Done processing progress information

2011-02-04 08:34:01     I     #4516     Uec     Received ipc data from mue

2011-02-04 08:34:01     I     #4516     Uec     Processing progress information

2011-02-04 08:34:01     i     #4516     Updater     Pre-notifying for DAT update.

2011-02-04 08:34:01     I     #4516     Uec     Done processing progress information

2011-02-04 08:34:01     I     #4516     Uec     Received ipc data from mue

2011-02-04 08:34:01     I     #4516     Uec     Processing progress information

2011-02-04 08:34:01     i     #4516     Updater     Copying DAT.

2011-02-04 08:34:01     I     #4516     Uec     Done processing progress information

2011-02-04 08:34:07     I     #4516     Uec     Received ipc data from mue

2011-02-04 08:34:07     I     #4516     Uec     Processing event information

2011-02-04 08:34:07     I     #4516     UpdEvents     Generating update event:EventId=2401:Severity=4:ProductId=VIRUSCAN8700:Locale=0000:UpdateType=DAT:UpdateError=0:NewVersion=6246.0000:DateTime=02032011

2011-02-04 08:34:07     I     #4516     UpdEvents     EpoEventInf Interface: Event element created.

2011-02-04 08:34:07     I     #4516     Uec     Done processing event  information

2011-02-04 08:34:07     I     #4516     Uec     Received ipc data from mue

2011-02-04 08:34:07     I     #4516     Uec     Processing progress information

2011-02-04 08:34:07     i     #4516     Updater     Update succeeded to version 6246.0000.

2011-02-04 08:34:07     I     #4516     Uec     Done processing progress information

2011-02-04 08:34:07     I     #4516     Uec     Received ipc data from mue

2011-02-04 08:34:07     I     #4516     Uec     Processing progress information

2011-02-04 08:34:07     i     #4516     Updater     Post-notifying for DAT update.

2011-02-04 08:34:07     I     #4516     Uec     Done processing progress information

2011-02-04 08:34:34     I     #4516     Uec     Received ipc data from mue

2011-02-04 08:34:34     I     #4516     Uec     Processing event information

2011-02-04 08:34:34     I     #4516     Uec     Done processing event  information

2011-02-04 08:34:34     I     #4516     Uec     Received ipc data from mue

2011-02-04 08:34:34     I     #4516     Uec     Processing progress information

2011-02-04 08:34:34     i     #4516     Updater     Verifying AgtMetaDet.McS.

2011-02-04 08:34:34     I     #4516     Uec     Done processing progress information

2011-02-04 08:34:34     I     #4516     Uec     Received ipc data from mue

2011-02-04 08:34:34     I     #4516     Uec     Processing progress information

2011-02-04 08:34:34     i     #4516     Updater     Searching available updates for McAfee Agent Plugin.

2011-02-04 08:34:34     I     #4516     Uec     Done processing progress information

2011-02-04 08:34:34     I     #4516     Uec     Received ipc data from mue

2011-02-04 08:34:34     I     #4516     Uec     Processing progress information

2011-02-04 08:34:34     i     #4516     Updater     Product(s) running the latest Plugin.

2011-02-04 08:34:34     I     #4516     Uec     Done processing progress information

2011-02-04 08:34:34     I     #4516     Uec     Received ipc data from mue

2011-02-04 08:34:34     I     #4516     Uec     Processing progress information

2011-02-04 08:34:34     i     #4516     Updater     Verifying VSE870Det.McS.

2011-02-04 08:34:34     I     #4516     Uec     Done processing progress information

2011-02-04 08:34:34     I     #4516     Uec     Received ipc data from mue

2011-02-04 08:34:34     I     #4516     Uec     Processing progress information

2011-02-04 08:34:34     i     #4516     Updater     Verifying VSE850Det.McS.

2011-02-04 08:34:34     I     #4516     Uec     Done processing progress information

2011-02-04 08:34:34     I     #4516     Uec     Received ipc data from mue

2011-02-04 08:34:34     I     #4516     Uec     Processing progress information

2011-02-04 08:34:34     i     #4516     Updater     Verifying BocDet_VSE.McS.

2011-02-04 08:34:34     I     #4516     Uec     Done processing progress information

2011-02-04 08:34:35     I     #4516     Uec     Received ipc data from mue

2011-02-04 08:34:35     I     #4516     Uec     Processing progress information

2011-02-04 08:34:35     i     #4516     Updater     Searching available updates for BOC DAT.

2011-02-04 08:34:35     I     #4516     Uec     Done processing progress information

2011-02-04 08:34:35     I     #4516     Uec     Received ipc data from mue

2011-02-04 08:34:35     I     #4516     Uec     Processing progress information

2011-02-04 08:34:35     i     #4516     Updater     Product(s) running the latest BOC DAT.

2011-02-04 08:34:35     I     #4516     Uec     Done processing progress information

2011-02-04 08:34:35     I     #4516     Uec     Received ipc data from mue

2011-02-04 08:34:35     I     #4516     Uec     Processing progress information

2011-02-04 08:34:35     i     #4516     Updater     Verifying VSE880Det.McS.

2011-02-04 08:34:35     I     #4516     Uec     Done processing progress information

2011-02-04 08:34:35     I     #4516     Uec     Received ipc data from mue

2011-02-04 08:34:35     I     #4516     Uec     Processing progress information

2011-02-04 08:34:35     i     #4516     Updater     Verifying ePOMVTDetect.McS.

2011-02-04 08:34:35     I     #4516     Uec     Done processing progress information

2011-02-04 08:34:37     I     #4516     Uec     Received ipc data from mue

2011-02-04 08:34:37     I     #4516     Uec     Processing progress information

2011-02-04 08:34:37     i     #4516     Updater     Update Finished

2011-02-04 08:34:37     I     #4516     Uec     Done processing progress information

2011-02-04 08:34:37     I     #4516     Uec     Received ipc data from mue

2011-02-04 08:34:37     I     #4516     Uec     Processing   EndUpdateDialog information

2011-02-04 08:34:37     I     #4516     Uec     Done processing  EndUpdateDialog information

2011-02-04 08:34:37     I     #4516     Uec     Received ipc data from mue

2011-02-04 08:34:37     I     #4516     Uec     Processing   EndUpdateDialog information

2011-02-04 08:34:37     I     #4516     Uec     Done processing  EndUpdateDialog information

2011-02-04 08:34:37     I     #4516     Uec     Received ipc data from mue

2011-02-04 08:34:37     I     #4516     Uec     Processing event information

2011-02-04 08:34:37     I     #4516     muemsg     Calling HandlePostpone with TaskID:  UpdateState: 1

2011-02-04 08:34:37     I     #4516     muemsg     Calling m_pUpdateInfoCallback->HandlePostpone

2011-02-04 08:34:37     I     #4516     Updater     CMcAfeeUpdate::HandlePostpone() Entered taskid: 129

2011-02-04 08:34:37     I     #4516     Updater     Finished calling GetPostponeMins

2011-02-04 08:34:37     I     #4516     Updater     CMcAfeeUpdate::HandlePostpone() Exit

2011-02-04 08:34:37     I     #4516     muemsg     Finished Calling m_pUpdateInfoCallback->HandlePostpone

2011-02-04 08:34:37     I     #4516     muemsg     Finished Calling HandlePostpone

2011-02-04 08:34:37     I     #4516     UpdEvents     EpoEventInf Interface: Update event created.

2011-02-04 08:34:37     I     #4516     UpdEvents     DeInitializing Event Interface

2011-02-04 08:34:37     I     #4516     UpdEvents     EpoEventInf Interface: Deinitialization succeeded.

2011-02-04 08:34:37     I     #4516     muemsg     Updater session finish state value =1

2011-02-04 08:34:37     I     #4516     Uec     Done processing event  information

2011-02-04 08:34:37     I     #4516     Uec     Terminating thread

2011-02-04 08:34:38     I     #6004     Uec     Terminating ipc channel

2011-02-04 08:34:38     I     #6004     ipcchannel     Aborting IPC object connection

2011-02-04 08:34:38     I     #6004     ipcchannel     Closing IPC connection

2011-02-04 08:34:38     I     #2808     FrmSvc     User SID is S-1-5-18 and SessionID is 0

2011-02-04 08:34:38     i     #1772     Sched     The task Product Updates is successful

2011-02-04 08:34:38     i     #1772     Sched     Scheduler: Task [Product Updates] is finished

2011-02-04 08:34:38     I     #1772     Sched     >>--ReleaseTask

2011-02-04 08:34:38     I     #1772     Manage     Releasing Task Cookie=19255304

2011-02-04 08:34:38     I     #1772     Sched     <<--ReleaseTask

2011-02-04 08:35:52     I     #2604     Agent     Sending the next batch of immediate events

2011-02-04 08:35:52     i     #2604     Agent     Agent is looking for events to upload

2011-02-04 08:35:52     I     #2604     Agent     Agent did not find any events to upload

2011-02-04 08:35:52     I     #2604     Agent     Agent did not find any events to upload

2011-02-04 08:35:52     i     #2604     Agent     Agent uploading 1 events to ePO Server

2011-02-04 08:35:52     I     #2388     Agent     Started processing a package..

2011-02-04 08:35:52     I     #2388     SpiPkgr     Using sequence number 11574

2011-02-04 08:35:52     i     #2388     Agent     Agent communication session started

2011-02-04 08:35:52     i     #2388     Agent     Agent is sending EVENT package to ePO server

2011-02-04 08:35:52     i     #2388     Agent     Agent is connecting to ePO server

2011-02-04 08:35:52     I     #2388     naInet     HTTP Session initialized

2011-02-04 08:35:52     I     #2388     imsite          Upload from: C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412821524180000_8783.spkg

2011-02-04 08:35:52     I     #2388     imsite          Upload response target: C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412821524340000_23163.spkg

2011-02-04 08:35:52     I     #2388     naInet     Uploading file C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412821524180000_8783.spkg to ePO Server...

2011-02-04 08:35:52     I     #2388     naInet     Connecting to Real Server: 100.100.0.248 on port: 81

2011-02-04 08:35:52     I     #2388     naInet     Connected to ePO Server: 100.100.0.248

2011-02-04 08:35:52     I     #2388     naInet     Uploading SPIPE HTTP header

2011-02-04 08:35:52     I     #2388     naInet     Uploading data in bytes: 1086

2011-02-04 08:35:52     I     #2388     naInet     Reading acknowledgement from ePO Server

2011-02-04 08:35:52     I     #2388     naInet     No package to receive from ePO Server, HTTP return code: HTTP/1.1 202 OK

2011-02-04 08:35:52     I     #2388     naInet     

2011-02-04 08:35:52     I     #2388     naInet     Received response [202 OK] from ePO Server

2011-02-04 08:35:52     I     #2388     naihttp     client:no package to receive

2011-02-04 08:35:52     I     #2388     naInet     Uploaded file : C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Unpack\pkg00129412821524180000_8783.spkg to Server successfully

2011-02-04 08:35:52     I     #2388     imsite     NaInet library returned code == 13

2011-02-04 08:35:52     I     #2388     naInet     HTTP Session closed

2011-02-04 08:35:52     i     #2388     Agent     No package received from ePO Server

2011-02-04 08:35:52     i     #2388     Agent     Agent communication session closed

Message was edited by: Quitch on 04/02/11 09:16:04 GMT
1 Solution

Accepted Solutions
McAfee Employee JoeBidgood
McAfee Employee
Report Inappropriate Content
Message 6 of 7

Re: Clients appearing then disappearing

Jump to solution

Then I'm willing to bet you have the issue described in KB 52949 

Give that a try -

Regards,

Joe

View solution in original post

6 Replies
McAfee Employee JoeBidgood
McAfee Employee
Report Inappropriate Content
Message 2 of 7

Re: Clients appearing then disappearing

Jump to solution

The behaviour you describe sounds like a duplicate GUID problem.  Repeat your test so that the machine appears in ePO again: go into the properties for the machine and make a note of its GUID.

Then when it disappears again, search for the GUID in the Quick Search dashboard - don't include the curly brackets.

Is a different machine found?

HTH -

Joe

Quitch
Level 7
Report Inappropriate Content
Message 3 of 7

Re: Clients appearing then disappearing

Jump to solution

I had a similar thought to you and have been looking into that very idea. I've got the weekly ePO GUID duplication tasks setup (both clear non-reoccuring errors and remove high error systems), so this shouldn't be an issue I hope. To test I connected to the registry of the machine and deleted its GUID, restarted the framework service and then forced a wakeup. It's still not listed.

I've now tried the steps you provided. Is there a way to get GUID from the machine properties? I didn't see it so I connected to the machine's registry and got it from there. No other machine was found in a search (I excluded the brackets). No sequence errors were shown in the machine properties when I viewed it, though I don't know how quickly it would get them.

McAfee Employee JoeBidgood
McAfee Employee
Report Inappropriate Content
Message 4 of 7

Re: Clients appearing then disappearing

Jump to solution

You can get the guid from the agent properties if you click on the "More" link to give you the detailed properties for the agent

One other thought - are these machines connecting via VPN?

Thanks -

Joe

Highlighted
Quitch
Level 7
Report Inappropriate Content
Message 5 of 7

Re: Clients appearing then disappearing

Jump to solution

The ones I've been testing on are, yes. There are rogues in other subnets, but the VPN ones crop up much more often so I have used them.

McAfee Employee JoeBidgood
McAfee Employee
Report Inappropriate Content
Message 6 of 7

Re: Clients appearing then disappearing

Jump to solution

Then I'm willing to bet you have the issue described in KB 52949 

Give that a try -

Regards,

Joe

View solution in original post

Quitch
Level 7
Report Inappropriate Content
Message 7 of 7

Re: Clients appearing then disappearing

Jump to solution

That looks to have done the trick. Thanks.

More McAfee Tools to Help You

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community