cancel
Showing results for 
Search instead for 
Did you mean: 
pankajs
Level 9
Report Inappropriate Content
Message 1 of 14

Too many sessions on ePO DB

Hi,

my ePO DB is going on toss. i am receving too many sessions.How i can resolve such problems.

i am Unable to find out the exact cause of it.

I am also attaching the server server logs.please provide your solutions on the same.

ePO4.5 patch5

DB SQL server 2005

CommandTextStatusLoginHostNameBlkByDBNameCommandCPUTimeDiskIOLastBatchProgramNameSPID
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetSmartPolicyAssignmentsEx;1SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          015########Apache HTTP Server                            85
DECLARE @pid int; SET @pid = 3578165 SET NOCOUNT ON;  DECLARE @tbl TABLE([section] nvarchar(128), [setting] nvarchar(128), [value] nvarchar(3000) NULL); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Active',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Active User Privilege Type',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Bypass Mode',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Undefined Device Classes',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Unmanaged Printers',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Unsupported Printers',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CMA Plug-in',N'Last Update Time',N'1362379513'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Configuration',N'Enforcement Mode',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Configuration',N'Evidence Path',N'\\mailmonitoring.edelcap.com\newevid$'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Configuration',N'Last Update Time',N'1362379500'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Discovery',N'Discovery End Scan Date',N'1362371280'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Discovery',N'Discovery Next Run',N'1362850200'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Discovery',N'Discovery Running State',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Language',N'0409'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Last Logged on User',N'EDELCAP\PVSunil'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Logged on User Distinguished Name',N'CN=P V Sunil,OU=Securities,OU=BSG,OU=Indiabulls,OU=Mumbai,DC=edelcap,DC=com'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Logged on User SID',N'S-1-5-21-1307921687-277884699-924725345-29199'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'PluginVersion',N'9.1.100.1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Protected Data Folder',N'C:\Documents and Settings\All Users\Application Data\McAfee\DLP\Agent\'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'szInstallDir',N'C:\Program Files\McAfee\DLP\Agent'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'szProductVer',N'9.1.100.1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Temp Data Folder',N'C:\Documents and Settings\All Users\Application Data\McAfee\DLP\Temp\S-1-5-21-1307921687-277884699-924725345-29199'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Policy',N'Last Update Time',N'1362379500'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Policy',N'Name',N'DLP Security Policy'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Policy',N'Version',N'1362118898'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'PropertiesAggregation',N'AllProperties',N'<Root><S N="CMA Plug-in"><P N="Last Update Time" V="1362379513"/></S><S N="General"><P N="PluginVersion" V="9.1.100.1"/><P N="szProductVer" V="9.1.100.1"/><P N="Last Logged on User" V="EDELCAP\PVSunil"/><P N="Protected Data Folder" V="C:\Documents and Settings\All Users\Application Data\McAfee\DLP\Agent\"/><P N="Temp Data Folder" V="C:\Documents and Settings\All Users\Application Data\McAfee\DLP\Temp\S-1-5-21-1307921687-277884699-924725345-29199"/><P N="Logged on User Distinguished Name" V="CN=P V Sunil,OU=Securities,OU=BSG,OU=Indiabulls,OU=Mumbai,DC=edelcap,DC=com"/><P N="Logged on User SID" V="S-1-5-21-1307921687-277884699-924725345-29199"/></S><S N="Agent"><P N="Active" V="1"/><P N="Undefined Device Classes" V=""/><P N="Unmanaged Printers" V=""/><P N="Unsupported Printers" V=""/><P N="Bypass Mode" V="0"/><P N="Active User Privilege Type" V="0"/></S><S N="Configuration"><P N="Last Update Time" V="1362379500"/><P N="SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          109233########Apache HTTP Server                            94
DECLARE @pid int; SET @pid = 3593402 SET NOCOUNT ON;  DECLARE @tbl TABLE([section] nvarchar(128), [setting] nvarchar(128), [value] nvarchar(3000) NULL); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection',N'APEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection',N'bPVSPTEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'bLimitSize',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'bLogToFile',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'dwMaxLogSizeMB',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'LogFileFormat',N'Unicode (UTF8)'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'szLogFileName',N'%DEFLOGDIR%\AccessProtectionLog.txt'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'bLocalEventLog',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'bSendSNMP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'SuppressAlertsBelow',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'AlertManagerServerPath',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'AlertType',N'Alert Manager alerting enabled.'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerAP',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerEmail',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerICAP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerNetApp',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerOAS',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerODS',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerSAP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerUpdate',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerVMODS',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'CentralizedAlertingPath',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'NoActiveDir',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'BOPEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'BOPShowMessages',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'EnterceptMode',N'Protection mode'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'bLimitSize_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'bLogToFile_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'dwMaxLogSizeMB_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'LogFileFormat_Ent',N'Unicode (UTF8)'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'szLogFileName_Ent',N'%DEFLOGDIR%\BufferOverflowProtectionLog.txt'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'bHeuristicsEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'bPUPProtectionEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'dwHeuristicsConfidence',N'100'); INSERT INTSUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          203274########Apache HTTP Server                            95
pionero.dbo.USP_THBOLT_CHAT_GETEMployee;1SUSPENDED                     pioneroEDEMUMEXTCRM002414pioneroSELECT INTO     1687########.Net SqlClient Data Provider                  114
pionero.dbo.USP_THBOLTNETWORK_GET_WALLMsg_Notify;1SUSPENDED                     pioneroEDEMUMEXTCRM002414pioneroSELECT INTO     01706########.Net SqlClient Data Provider                  131
pionero.dbo.USP_THBOLTNETWORK_GET_WALLMsg_Notify;1SUSPENDED                     pioneroEDEMUMEXTCRM002414pioneroSELECT INTO     01239########.Net SqlClient Data Provider                  133
DECLARE @pid int; SET @pid = 3600147 SET NOCOUNT ON;  DECLARE @tbl TABLE([section] nvarchar(128), [setting] nvarchar(128), [value] nvarchar(3000) NULL); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Language',N'0409'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'PluginVersion',N'6.1.3.7409862'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'szInstallDir',N'C:\Program Files\McAfee\Endpoint Encryption for PC v6'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'szProductVer',N'6.1.3.7409862');  UPDATE PS SET [Value] = T.[value]   FROM @tbl T INNER JOIN [EPOProductSettings] PS   ON ((T.[section] = PS.[SectionName]) AND (T.[setting] = PS.[SettingName]))   WHERE ((PS.[ParentID] = @pid) AND (PS.[Value] <> T.[value]));  INSERT INTO [EPOProductSettings]([ParentID], [SectionName], [SettingName], [Value])   SELECT @pid, T.[section], T.[setting], T.[value]   FROM @tbl T LEFT JOIN [EPOProductSettings] PS   ON ((PS.[ParentID] = @pid) AND (T.[section] = PS.[SectionName]) AND (T.[setting] = PS.[SettingName]))   WHERE (PS.[ParentID] IS NULL);  DELETE PS   FROM [EPOProductSettings] PS LEFT JOIN @tbl T   ON ((PS.[SectionName] = T.[section]) AND (PS.[SettingName] = T.[setting]))   WHERE ((PS.[ParentID] = @pid) AND (T.[section] IS NULL));  SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          161569########Apache HTTP Server                            140
EdelweissSSP_DB.dbo.TempResetTimeout;1SUSPENDED                     ewsharepointEDEMUMEXTAPP023.EdelweissSSP_DBUPDATE          01########Windows SharePoint Services                   156
SELECT * FROM EPOMetaSoftware WHERE MetaProductID=N'EPOAGENTMETA'SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          471157########Apache HTTP Server                            159
DECLARE @pid int; SET @pid = 3617893 SET NOCOUNT ON;  DECLARE @tbl TABLE([section] nvarchar(128), [setting] nvarchar(128), [value] nvarchar(3000) NULL); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection',N'APEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection',N'bPVSPTEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'bLimitSize',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'bLogToFile',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'dwMaxLogSizeMB',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'LogFileFormat',N'Unicode (UTF8)'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'szLogFileName',N'%DEFLOGDIR%\AccessProtectionLog.txt'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'bLocalEventLog',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'bSendSNMP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'SuppressAlertsBelow',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'AlertManagerServerPath',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'AlertType',N'Alert Manager alerting enabled.'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerAP',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerEmail',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerICAP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerNetApp',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerOAS',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerODS',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerSAP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerUpdate',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerVMODS',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'CentralizedAlertingPath',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'NoActiveDir',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'BOPEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'BOPShowMessages',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'EnterceptMode',N'Protection mode'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'bLimitSize_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'bLogToFile_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'dwMaxLogSizeMB_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'LogFileFormat_Ent',N'Unicode (UTF8)'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'szLogFileName_Ent',N'%DEFLOGDIR%\BufferOverflowProtectionLog.txt'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'bHeuristicsEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'bPUPProtectionEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'dwHeuristicsConfidence',N'100'); INSERT INTSUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          188440########Apache HTTP Server                            163
SELECT TOP 1 [Name] FROM [EPOPolicyObjects] WHERE [PolicyObjectID] = 182; SELECT [PolicySettingsID], [TheTimestamp] FROM [EPOPolicyObjectToSettings] WHERE [PolicyObjectID] = 182 SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          153########Apache HTTP Server                            177
Treasury_Risk.dbo.ADD_GET_GRG_EQUITY_UPLOAD;1RUNNABLE                      treasuryBSG-1341A      .Treasury_RiskSELECT          0719########.Net SqlClient Data Provider                  180
SELECT TOP 1 [Name] FROM [EPOPolicyObjects] WHERE [PolicyObjectID] = 775; SELECT [PolicySettingsID], [TheTimestamp] FROM [EPOPolicyObjectToSettings] WHERE [PolicyObjectID] = 775 SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          163########Apache HTTP Server                            194
pionero.dbo.USP_THBOLTNETWORK_BIRTHDAYLIST;1RUNNABLE                      pioneroEDEMUMEXTCRM002.pioneroSELECT INTO     03########.Net SqlClient Data Provider                  201
(@P1 int) SELECT XMLMapping FROM SyncGlobalMapping WHERE SyncDatasourceId =@P1 SUSPENDED                     EDELCAP\besadminEDEMUMKALAPP007.BESMgmtUPDATE          052########BlackBerry® Messaging Agent                   204
SELECT TOP 1 [Name] FROM [EPOPolicyObjects] WHERE [PolicyObjectID] = 185; SELECT [PolicySettingsID], [TheTimestamp] FROM [EPOPolicyObjectToSettings] WHERE [PolicyObjectID] = 185 SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          1517########Apache HTTP Server                            211
update listdetail_mf set up_inrt=0.1,incen_in=0  ,Annul_inrt=0 ,up_in_rable=250 ,Annul_in_rable=0 where rowguid='{C4810598-87F0-4C97-B228-CC44744CA4F4}'SUSPENDED                     srdiwellRTLSYN-2425    .InvestmentUPDATE          353687731########InvestWell[FD]                                215
update listdetail_mf set up_inrt=0.1,incen_in=0  ,Annul_inrt=0 ,up_in_rable=250 ,Annul_in_rable=0 where rowguid='{C4810598-87F0-4C97-B228-CC44744CA4F4}'SUSPENDED                     RTLSYN-2425    .InvestmentUPDATE          00########InvestWell[FD]                                215
EdelweissSSP_DB.dbo.TempGetStateItemExclusive3;1SUSPENDED                     ewsharepointEDEMUMEXTAPP023.EdelweissSSP_DBUPDATE          310########Windows SharePoint Services                   225
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetPolicyRuleAssignmentsByNode;1SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          02########Apache HTTP Server                            240
DECLARE @pid int; SET @pid = 3605990 SET NOCOUNT ON;  DECLARE @tbl TABLE([section] nvarchar(128), [setting] nvarchar(128), [value] nvarchar(3000) NULL); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection',N'APEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection',N'bPVSPTEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'bLimitSize',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'bLogToFile',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'dwMaxLogSizeMB',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'LogFileFormat',N'Unicode (UTF8)'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'szLogFileName',N'%DEFLOGDIR%\AccessProtectionLog.txt'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'bLocalEventLog',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'bSendSNMP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'SuppressAlertsBelow',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'AlertManagerServerPath',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'AlertType',N'Alert Manager alerting enabled.'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerAP',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerEmail',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerICAP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerNetApp',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerOAS',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerODS',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerSAP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerUpdate',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerVMODS',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'CentralizedAlertingPath',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'NoActiveDir',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'BOPEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'BOPShowMessages',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'EnterceptMode',N'Protection mode'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'bLimitSize_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'bLogToFile_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'dwMaxLogSizeMB_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'LogFileFormat_Ent',N'Unicode (UTF8)'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'szLogFileName_Ent',N'%DEFLOGDIR%\BufferOverflowProtectionLog.txt'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'bHeuristicsEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'bPUPProtectionEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'dwHeuristicsConfidence',N'100'); INSERT INTRUNNABLE                      epodbadminEDESIONMEPO01  .ePO4_EDESIONMEPO01INSERT          0465########Apache HTTP Server                            246
DECLARE @pid int; SET @pid = 3595676 SET NOCOUNT ON;  DECLARE @tbl TABLE([section] nvarchar(128), [setting] nvarchar(128), [value] nvarchar(3000) NULL); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection',N'APEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection',N'bPVSPTEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'bLimitSize',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'bLogToFile',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'dwMaxLogSizeMB',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'LogFileFormat',N'Unicode (UTF8)'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'szLogFileName',N'%DEFLOGDIR%\AccessProtectionLog.txt'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'bLocalEventLog',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'bSendSNMP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'SuppressAlertsBelow',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'AlertManagerServerPath',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'AlertType',N'Alert Manager alerting enabled.'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerAP',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerEmail',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerICAP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerNetApp',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerOAS',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerODS',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerSAP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerUpdate',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerVMODS',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'CentralizedAlertingPath',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'NoActiveDir',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'BOPEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'BOPShowMessages',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'EnterceptMode',N'Protection mode'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'bLimitSize_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'bLogToFile_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'dwMaxLogSizeMB_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'LogFileFormat_Ent',N'Unicode (UTF8)'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'szLogFileName_Ent',N'%DEFLOGDIR%\BufferOverflowProtectionLog.txt'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'bHeuristicsEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'bPUPProtectionEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'dwHeuristicsConfidence',N'100'); INSERT INTSUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          15240########Apache HTTP Server                            276
EXEC EPOTask_GetAgentSupportedTasks 3731SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          110274########Apache HTTP Server                            279
SELECT TOP 1 [Name] FROM [EPOPolicyObjects] WHERE [PolicyObjectID] = 445; SELECT [PolicySettingsID], [TheTimestamp] FROM [EPOPolicyObjectToSettings] WHERE [PolicyObjectID] = 445 SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          00########Apache HTTP Server                            289
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetPolicyRuleAssignmentsByNode;1SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          010########Apache HTTP Server                            298
Edelpartners.dbo.BONDS_latestOffers;1RUNNABLE                      edelpartnersEDEMUMNMWEB002 .EdelpartnersINSERT          00########.Net SqlClient Data Provider                  303
DECLARE @pid int; SET @pid = 3584870 SET NOCOUNT ON;  DECLARE @tbl TABLE([section] nvarchar(128), [setting] nvarchar(128), [value] nvarchar(3000) NULL); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection',N'APEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection',N'bPVSPTEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'bLimitSize',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'bLogToFile',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'dwMaxLogSizeMB',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'LogFileFormat',N'Unicode (UTF8)'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'szLogFileName',N'%DEFLOGDIR%\AccessProtectionLog.txt'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'bLocalEventLog',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'bSendSNMP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'SuppressAlertsBelow',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'AlertManagerServerPath',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'AlertType',N'Alert Manager alerting enabled.'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerAP',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerEmail',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerICAP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerNetApp',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerOAS',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerODS',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerSAP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerUpdate',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerVMODS',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'CentralizedAlertingPath',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'NoActiveDir',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'BOPEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'BOPShowMessages',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'EnterceptMode',N'Protection mode'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'bLimitSize_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'bLogToFile_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'dwMaxLogSizeMB_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'LogFileFormat_Ent',N'Unicode (UTF8)'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'szLogFileName_Ent',N'%DEFLOGDIR%\BufferOverflowProtectionLog.txt'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'bHeuristicsEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'bPUPProtectionEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'dwHeuristicsConfidence',N'100'); INSERT INTSUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          31534########Apache HTTP Server                            306
DECLARE @AutoID INT DECLARE @TheTimestamp BINARY (8) SET @AutoID = 927 SET @TheTimestamp = @@DBTS SET NOCOUNT ON UPDATE [dbo].[EPOLeafNode] SET TheTimestamp=@TheTimestamp, LastCommSeqNum=0x0000000000007938 WHERE AutoID = @AutoID SELECT nResult=0, TheTimestamp=@TheTimestamp, AutoID=@AutoIDSUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          172238########Apache HTTP Server                            310
SELECT * FROM EPOMetaSoftware WHERE MetaProductID=N'VIRUSCAN8700'SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          15403########Apache HTTP Server                            312
SELECT AutoID,PlatformsSupported FROM [dbo].[EPOSoftware] WHERE ProductCode=N'VIRUSCAN8800'SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          0219########Apache HTTP Server                            313
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetPolicyRuleAssignmentsByNode;1SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          07########Apache HTTP Server                            314
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetPolicyRuleAssignmentsByNode;1SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          00########Apache HTTP Server                            319
SELECT TOP 1 * FROM EPOLeafNode WHERE (AgentGUID=N'75C8C33F-071A-47B0-BEB8-4508B3AC244B')SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          203218########Apache HTTP Server                            322
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetSmartPolicyTagAssignments;1SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          02########Apache HTTP Server                            323
DECLARE @pid int; SET @pid = 3574634 SET NOCOUNT ON;  DECLARE @tbl TABLE([section] nvarchar(128), [setting] nvarchar(128), [value] nvarchar(3000) NULL); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Active',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Active User Privilege Type',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Bypass Mode',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Undefined Device Classes',N'ezty2usb {41966169-3FD7-4392-AFE4-E6A9D0A92C72}'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Unmanaged Printers',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Unsupported Printers',N'HP LaserJet Professional M1213nf MFP'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CMA Plug-in',N'Last Update Time',N'1362379513'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Configuration',N'Enforcement Mode',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Configuration',N'Evidence Path',N'\\dlp-data.edelcap.com\evids'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Configuration',N'Last Update Time',N'1362379503'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Discovery',N'Discovery End Scan Date',N'1362364022'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Discovery',N'Discovery Next Run',N'1362850200'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Discovery',N'Discovery Running State',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Language',N'0409'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Last Logged on User',N'EDELCAP\sarang'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Logged on User Distinguished Name',N'CN=Sarang Tembe,OU=IE Alpha,OU=IE,OU=Kalina,OU=Mumbai,DC=edelcap,DC=com'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Logged on User SID',N'S-1-5-21-1307921687-277884699-924725345-13175'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'PluginVersion',N'9.1.100.1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Protected Data Folder',N'C:\Documents and Settings\All Users\Application Data\McAfee\DLP\Agent\'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'szInstallDir',N'C:\Program Files\McAfee\DLP\Agent'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'szProductVer',N'9.1.100.1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Temp Data Folder',N'C:\Documents and Settings\All Users\Application Data\McAfee\DLP\Temp\S-1-5-21-1307921687-277884699-924725345-13175'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Policy',N'Last Update Time',N'1362379503'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Policy',N'Name',N'DLP Security Policy'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Policy',N'Version',N'1362118898'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'PropertiesAggregation',N'AllProperties',N'<Root><S N="CMA Plug-in"><P N="Last Update Time" V="1362379513"/></S><S N="General"><P N="PluginVersion" V="9.1.100.1"/><P N="szProductVer" V="9.1.100.1"/><P N="Last Logged on User" V="EDELCAP\sarang"/><P N="Protected Data Folder" V="C:\Documents and Settings\All Users\Application Data\McAfee\DLP\Agent\"/><P N="Temp Data Folder" V="C:\Documents and Settings\All Users\Application Data\McAfee\DLP\Temp\S-1-5-21-1307921687-277884699-924725345-13175"/><P N="Logged on User Distinguished Name" V="CN=Sarang Tembe,OU=IE Alpha,OU=IE,OU=Kalina,OU=Mumbai,DC=edelcap,DC=com"/><P N="Logged on User SID" V="S-1-5-21-1307921687-277884699-924725345-13175"/></S><S N="Agent"><P N="Active" V="1"/><P N="Undefined Device Classes" V="ezty2usb {41966169-3FD7-4392-AFE4-E6A9D0A92C72}"/><P N="Unmanaged Printers" V=""/><P N="Unsupported Printers" V="HP LaserJet Professional M1213SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          32297########Apache HTTP Server                            324
SELECT * FROM EPOMetaSoftware WHERE MetaProductID=N'EPOAGENTMETA'SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          109281########Apache HTTP Server                            326
EXECUTE EPOTags_AutoTagComputerASCI 5630SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          62124########Apache HTTP Server                            327
PCG_OIMS.dbo.USP_PCGOIMS_MID_REPEATED_EXECUTION;1RUNNABLE                      PCG_OIMSWAIS-NEMP711   .PCG_OIMSINSERT          31313777########.Net SqlClient Data Provider                  329
Edelpartners.dbo.Market_Updates;1SUSPENDED                     edelpartnersEDEMUMNMWEB002 414EdelpartnersINSERT          08########.Net SqlClient Data Provider                  332
DECLARE @pid int; SET @pid = 3609329 SET NOCOUNT ON;  DECLARE @tbl TABLE([section] nvarchar(128), [setting] nvarchar(128), [value] nvarchar(3000) NULL); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Active',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Active User Privilege Type',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Bypass Mode',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Undefined Device Classes',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Unmanaged Printers',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Unsupported Printers',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CMA Plug-in',N'Last Update Time',N'1362379599'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Configuration',N'Enforcement Mode',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Configuration',N'Evidence Path',N'\\dlp-data.edelcap.com\evids'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Configuration',N'Last Update Time',N'1362379569'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Discovery',N'Discovery End Scan Date',N'1362372187'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Discovery',N'Discovery Next Run',N'1362850200'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Discovery',N'Discovery Running State',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Language',N'0409'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Last Logged on User',N'EDELCAP\VickyAgarwal'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Logged on User Distinguished Name',N'CN=Vicky Agarwal,OU=Bullion,OU=Indiabulls,OU=Mumbai,DC=edelcap,DC=com'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Logged on User SID',N'S-1-5-21-1307921687-277884699-924725345-45118'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'PluginVersion',N'9.1.100.1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Protected Data Folder',N'C:\Documents and Settings\All Users\Application Data\McAfee\DLP\Agent\'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'szInstallDir',N'C:\Program Files\McAfee\DLP\Agent'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'szProductVer',N'9.1.100.1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Temp Data Folder',N'C:\Documents and Settings\All Users\Application Data\McAfee\DLP\Temp\S-1-5-21-1307921687-277884699-924725345-45118'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Policy',N'Last Update Time',N'1362379569'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Policy',N'Name',N'DLP Security Policy'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Policy',N'Version',N'1362118898'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'PropertiesAggregation',N'AllProperties',N'<Root><S N="CMA Plug-in"><P N="Last Update Time" V="1362379599"/></S><S N="General"><P N="PluginVersion" V="9.1.100.1"/><P N="szProductVer" V="9.1.100.1"/><P N="Last Logged on User" V="EDELCAP\VickyAgarwal"/><P N="Protected Data Folder" V="C:\Documents and Settings\All Users\Application Data\McAfee\DLP\Agent\"/><P N="Temp Data Folder" V="C:\Documents and Settings\All Users\Application Data\McAfee\DLP\Temp\S-1-5-21-1307921687-277884699-924725345-45118"/><P N="Logged on User Distinguished Name" V="CN=Vicky Agarwal,OU=Bullion,OU=Indiabulls,OU=Mumbai,DC=edelcap,DC=com"/><P N="Logged on User SID" V="S-1-5-21-1307921687-277884699-924725345-45118"/></S><S N="Agent"><P N="Active" V="1"/><P N="Undefined Device Classes" V=""/><P N="Unmanaged Printers" V=""/><P N="Unsupported Printers" V=""/><P N="Bypass Mode" V="0"/><P N="Active User Privilege Type" V="0"/></S><S N="Configuration"><P N="Last Update Time" V="1362379569"/><P N="Evidence PaSUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          0249########Apache HTTP Server                            333
Edelpartners.dbo.Market_Graph;1SUSPENDED                     edelpartnersEDEMUMNMWEB002 414EdelpartnersINSERT          00########.Net SqlClient Data Provider                  335
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetSmartPolicyAssignmentsEx;1SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          09########Apache HTTP Server                            337
SELECT [AutoID],[ParentID],[TheTimestamp],[ProductCode] FROM [dbo].[EPOProductProperties] WHERE ([ParentID]=6985)SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          219224########Apache HTTP Server                            340
UPDATE [dbo].[EPOProductProperties] SET  [ProductVersion] = N'8.8.0.975.Wrk', [EngineVer] = N'5400.1158', [DATVer] = N'7003.0000', [DATDate] = N'3/3/2013', [ExtraDatNames] = N'N/A', [Language] = N'0000', [InstalledPath] = N'C:\Program Files\McAfee\VirusScan Enterprise\', [LicenseStatus] = N'licensed', [Hotfix] = N'2', [Servicepack] = N'', [EngineVer64] = N'N/A' WHERE AutoID = 3595346SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          203220########Apache HTTP Server                            341
DECLARE @AutoID INT DECLARE @TheTimestamp BINARY (8) SET @AutoID = 7904 SET @TheTimestamp = @@DBTS SET NOCOUNT ON UPDATE [dbo].[EPOLeafNode] SET TheTimestamp=@TheTimestamp, LastCommSeqNum=0x0000000000001F38 WHERE AutoID = @AutoID SELECT nResult=0, TheTimestamp=@TheTimestamp, AutoID=@AutoIDSUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          31191########Apache HTTP Server                            342
DECLARE @pid int; SET @pid = 3614269 SET NOCOUNT ON;  DECLARE @tbl TABLE([section] nvarchar(128), [setting] nvarchar(128), [value] nvarchar(3000) NULL); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'AgentBroadcastPingPort',N'8082'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'AgentGUID',N'{ECCBF60A-C101-4347-8DB3-C6D6A9FC846E}'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'AgentPingPort',N'8081'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'bEnableAgentPing',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'bEnableSuperAgent',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'bEnableSuperAgentRepository',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'CheckNetworkMessageInterval',N'60'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'ClusterNode',N'3'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'IsRunNowSupported',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Language',N'0409'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'PCStatus',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'PEStatus',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'PluginVersion',N'4.6.0.1694'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'PolicyEnforcementInterval',N'45'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'RebootTimeOut',N'-1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'ServerKeyHash',N'tRBaxL/SEKf9wynjBlTN/Hfbj7E='); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'ShowAgentUI',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'ShowRebootUI',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'szInstallDir',N'C:\Program Files (x86)\McAfee\Common Framework'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'szProductVer',N'4.6.0.1694'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'VirtualDirectory',N'');  UPDATE PS SET [Value] = T.[value]   FROM @tbl T INNER JOIN [EPOProductSettings] PS   ON ((T.[section] = PS.[SectionName]) AND (T.[setting] = PS.[SettingName]))   WHERE ((PS.[ParentID] = @pid) AND (PS.[Value] <> T.[value]));  INSERT INTO [EPOProductSettings]([ParentID], [SectionName], [SettingName], [Value])   SELECT @pid, T.[section], T.[setting], T.[value]   FROM @tbl T LEFT JOIN [EPOProductSettings] PS   ON ((PS.[ParentID] = @pid) AND (T.[section] = PS.[SectionName]) AND (T.[setting] = PS.[SettingName]))   WHERE (PS.[ParentID] IS NULL);  DELETE PS   FROM [EPOProductSettings] PS LEFT JOIN @tbl T   ON ((PS.[SectionName] = T.[section]) AND (PS.[SettingName] = T.[setting]))   WHERE ((PS.[ParentID] = @pid) AND (T.[section] IS NULL));  SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          203179########Apache HTTP Server                            343
DECLARE @pid int; SET @pid = 3579631 SET NOCOUNT ON;  DECLARE @tbl TABLE([section] nvarchar(128), [setting] nvarchar(128), [value] nvarchar(3000) NULL); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Active',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Active User Privilege Type',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Bypass Mode',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Undefined Device Classes',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Unmanaged Printers',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Agent',N'Unsupported Printers',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CMA Plug-in',N'Last Update Time',N'1362379599'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Configuration',N'Enforcement Mode',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Configuration',N'Evidence Path',N'\\mailmonitoring.edelcap.com\newevid$'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Configuration',N'Last Update Time',N'1362379572'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Discovery',N'Discovery End Scan Date',N'1362372039'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Discovery',N'Discovery Next Run',N'1362850200'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Discovery',N'Discovery Running State',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Language',N'0409'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Last Logged on User',N'EDELCAP\VikramDesai'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Logged on User Distinguished Name',N'CN=Vikram Desai,OU=Users,OU=F_A,OU=Kalina,OU=Mumbai,DC=edelcap,DC=com'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Logged on User SID',N'S-1-5-21-1307921687-277884699-924725345-15571'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'PluginVersion',N'9.1.100.1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Protected Data Folder',N'C:\Documents and Settings\All Users\Application Data\McAfee\DLP\Agent\'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'szInstallDir',N'C:\Program Files\McAfee\DLP\Agent'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'szProductVer',N'9.1.100.1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'General',N'Temp Data Folder',N'C:\Documents and Settings\All Users\Application Data\McAfee\DLP\Temp\S-1-5-21-1307921687-277884699-924725345-15571'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Policy',N'Last Update Time',N'1362379572'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Policy',N'Name',N'DLP Security Policy'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Policy',N'Version',N'1362118898'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'PropertiesAggregation',N'AllProperties',N'<Root><S N="CMA Plug-in"><P N="Last Update Time" V="1362379599"/></S><S N="General"><P N="PluginVersion" V="9.1.100.1"/><P N="szProductVer" V="9.1.100.1"/><P N="Last Logged on User" V="EDELCAP\VikramDesai"/><P N="Protected Data Folder" V="C:\Documents and Settings\All Users\Application Data\McAfee\DLP\Agent\"/><P N="Temp Data Folder" V="C:\Documents and Settings\All Users\Application Data\McAfee\DLP\Temp\S-1-5-21-1307921687-277884699-924725345-15571"/><P N="Logged on User Distinguished Name" V="CN=Vikram Desai,OU=Users,OU=F_A,OU=Kalina,OU=Mumbai,DC=edelcap,DC=com"/><P N="Logged on User SID" V="S-1-5-21-1307921687-277884699-924725345-15571"/></S><S N="Agent"><P N="Active" V="1"/><P N="Undefined Device Classes" V=""/><P N="Unmanaged Printers" V=""/><P N="Unsupported Printers" V=""/><P N="Bypass Mode" V="0"/><P N="Active User Privilege Type" V="0"/></S><S N="Configuration"><P N="Last Update Time" V="1362379572"/><P N="EvidSUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          15176########Apache HTTP Server                            344
SELECT AutoID,PlatformsSupported FROM [dbo].[EPOSoftware] WHERE ProductCode=N'EPOAGENTMETA'SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          15163########Apache HTTP Server                            345
DECLARE @pid int; SET @pid = 3587166 SET NOCOUNT ON;  DECLARE @tbl TABLE([section] nvarchar(128), [setting] nvarchar(128), [value] nvarchar(3000) NULL); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection',N'APEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection',N'bPVSPTEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'bLimitSize',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'bLogToFile',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'dwMaxLogSizeMB',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'LogFileFormat',N'Unicode (UTF8)'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'szLogFileName',N'%DEFLOGDIR%\AccessProtectionLog.txt'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'bLocalEventLog',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'bSendSNMP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'SuppressAlertsBelow',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'AlertManagerServerPath',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'AlertType',N'Alert Manager alerting enabled.'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerAP',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerEmail',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerICAP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerNetApp',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerOAS',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerODS',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerSAP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerUpdate',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerVMODS',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'CentralizedAlertingPath',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'NoActiveDir',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'BOPEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'BOPShowMessages',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'EnterceptMode',N'Protection mode'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'bLimitSize_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'bLogToFile_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'dwMaxLogSizeMB_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'LogFileFormat_Ent',N'Unicode (UTF8)'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'szLogFileName_Ent',N'%DEFLOGDIR%\BufferOverflowProtectionLog.txt'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'bHeuristicsEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'bPUPProtectionEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'dwHeuristicsConfidence',N'100'); INSERT INTSUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          46153########Apache HTTP Server                            346
SELECT AutoID,PlatformsSupported FROM [dbo].[EPOSoftware] WHERE ProductCode=N'SITEADVMETA'SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01AWAITING COMMAND422160########Apache HTTP Server                            347
EXECUTE EPOLeafNodeUser_GetCreateLeafNodeUser 3031,N''SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          16202########Apache HTTP Server                            348
DECLARE @pid int; SET @pid = 3582840 SET NOCOUNT ON;  DECLARE @tbl TABLE([section] nvarchar(128), [setting] nvarchar(128), [value] nvarchar(3000) NULL); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection',N'APEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection',N'bPVSPTEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'bLimitSize',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'bLogToFile',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'dwMaxLogSizeMB',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'LogFileFormat',N'Unicode (UTF8)'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'szLogFileName',N'%DEFLOGDIR%\AccessProtectionLog.txt'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'bLocalEventLog',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'bSendSNMP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'SuppressAlertsBelow',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'AlertManagerServerPath',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'AlertType',N'Alert Manager alerting enabled.'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerAP',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerEmail',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerICAP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerNetApp',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerOAS',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerODS',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerSAP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerUpdate',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerVMODS',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'CentralizedAlertingPath',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'NoActiveDir',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'BOPEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'BOPShowMessages',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'EnterceptMode',N'Protection mode'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'bLimitSize_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'bLogToFile_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'dwMaxLogSizeMB_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'LogFileFormat_Ent',N'Unicode (UTF8)'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'szLogFileName_Ent',N'%DEFLOGDIR%\BufferOverflowProtectionLog.txt'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'bHeuristicsEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'bPUPProtectionEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'dwHeuristicsConfidence',N'100'); INSERT INTSUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          63176########Apache HTTP Server                            349
DECLARE @pid int; SET @pid = 3618384 SET NOCOUNT ON;  DECLARE @tbl TABLE([section] nvarchar(128), [setting] nvarchar(128), [value] nvarchar(3000) NULL); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection',N'APEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection',N'bPVSPTEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'bLimitSize',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'bLogToFile',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'dwMaxLogSizeMB',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'LogFileFormat',N'Unicode (UTF8)'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Access Protection Reports',N'szLogFileName',N'%DEFLOGDIR%\AccessProtectionLog.txt'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'bLocalEventLog',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'bSendSNMP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Additional Alerting Options',N'SuppressAlertsBelow',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'AlertManagerServerPath',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'AlertType',N'Alert Manager alerting enabled.'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerAP',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerEmail',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerICAP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerNetApp',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerOAS',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerODS',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerSAP',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerUpdate',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'bSendToAlertManagerVMODS',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'CentralizedAlertingPath',N''); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Alert Manager Alerts',N'NoActiveDir',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'BOPEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'BOPShowMessages',N'0'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Detection',N'EnterceptMode',N'Protection mode'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'bLimitSize_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'bLogToFile_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'dwMaxLogSizeMB_Ent',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'LogFileFormat_Ent',N'Unicode (UTF8)'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'Buffer Overflow Reports',N'szLogFileName_Ent',N'%DEFLOGDIR%\BufferOverflowProtectionLog.txt'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'bHeuristicsEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'bPUPProtectionEnabled',N'1'); INSERT INTO @tbl([section], [setting], [value]) VALUES(N'CounterMeasures',N'dwHeuristicsConfidence',N'100'); INSERT INTSUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          16101########Apache HTTP Server                            352
SELECT * FROM EPOMetaSoftware WHERE MetaProductID=N'EPOAGENTMETA'SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          219109########Apache HTTP Server                            353
DECLARE @AutoID INT DECLARE @TheTimestamp BINARY (8) SET @AutoID = 8342 SET @TheTimestamp = @@DBTS SET NOCOUNT ON UPDATE [dbo].[EPOLeafNode] SET TheTimestamp=@TheTimestamp, LastCommSeqNum=0x00000000000036E3 WHERE AutoID = @AutoID SELECT nResult=0, TheTimestamp=@TheTimestamp, AutoID=@AutoIDSUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          94125########Apache HTTP Server                            354
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetPolicyRuleAssignmentsByNode;1SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          01########Apache HTTP Server                            355
SELECT TOP 1 [Name] FROM [EPOPolicyObjects] WHERE [PolicyObjectID] = 332; SELECT [PolicySettingsID], [TheTimestamp] FROM [EPOPolicyObjectToSettings] WHERE [PolicyObjectID] = 332 SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          05########Apache HTTP Server                            356
EXECUTE EPOLeafNodeUser_DeleteLeafNodeUser 7412,N'EDELCAP\TanushreeB'RUNNABLE                      epodbadminEDESIONMEPO01  .ePO4_EDESIONMEPO01INSERT          14092########Apache HTTP Server                            359
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetPolicyRuleAssignmentsByNode;1SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          01########Apache HTTP Server                            362
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetPolicyRuleAssignmentsByNode;1SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          05########Apache HTTP Server                            363
SELECT TOP 1 [Name] FROM [EPOPolicyObjects] WHERE [PolicyObjectID] = 779; SELECT [PolicySettingsID], [TheTimestamp] FROM [EPOPolicyObjectToSettings] WHERE [PolicyObjectID] = 779 SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          01########Apache HTTP Server                            364
sp_who4 activeRUNNABLE                      SQLDBAIT-VEN22       .masterSELECT INTO     266172########Microsoft SQL Server Management Studio - Query375
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetPolicyRuleAssignmentsByNode;1SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          04########Apache HTTP Server                            386
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetPolicyRuleAssignmentsByNode;1SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          01########Apache HTTP Server                            403
SELECT TOP 1 [Name] FROM [EPOPolicyObjects] WHERE [PolicyObjectID] = 332; SELECT [PolicySettingsID], [TheTimestamp] FROM [EPOPolicyObjectToSettings] WHERE [PolicyObjectID] = 332 SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          152########Apache HTTP Server                            405
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetPolicyRuleAssignmentsByNode;1SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          160########Apache HTTP Server                            407
SELECT TOP 1 [Name] FROM [EPOPolicyObjects] WHERE [PolicyObjectID] = 758; SELECT [PolicySettingsID], [TheTimestamp] FROM [EPOPolicyObjectToSettings] WHERE [PolicyObjectID] = 758 SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          161########Apache HTTP Server                            409
SELECT TOP 1 [Name] FROM [EPOPolicyObjects] WHERE [PolicyObjectID] = 750; SELECT [PolicySettingsID], [TheTimestamp] FROM [EPOPolicyObjectToSettings] WHERE [PolicyObjectID] = 750 SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          01########Apache HTTP Server                            410
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetPolicyRuleAssignmentsByNode;1SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          02########Apache HTTP Server                            411
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetPolicyRuleAssignmentsByNode;1SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          02########Apache HTTP Server                            412
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetPolicyRuleAssignmentsByNode;1RUNNABLE                      epodbadminEDESIONMEPO01  .ePO4_EDESIONMEPO01INSERT          01########Apache HTTP Server                            414
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetPolicyRuleAssignmentsByNode;1RUNNABLE                      epodbadminEDESIONMEPO01  .ePO4_EDESIONMEPO01DELETE          310########Apache HTTP Server                            415
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetPolicyRuleAssignmentsByNode;1SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          01########Apache HTTP Server                            416
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetSmartPolicyAssignmentsEx;1SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          160########Apache HTTP Server                            418
SELECT TOP 1 [Name] FROM [EPOPolicyObjects] WHERE [PolicyObjectID] = 791; SELECT [PolicySettingsID], [TheTimestamp] FROM [EPOPolicyObjectToSettings] WHERE [PolicyObjectID] = 791 SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          00########Apache HTTP Server                            419
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetPolicyRuleAssignmentsByNode;1SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          00########Apache HTTP Server                            420
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetPolicyRuleAssignmentsByNode;1SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          01########Apache HTTP Server                            422
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetPolicyRuleAssignmentsByNode;1SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          160########Apache HTTP Server                            423
ePO4_EDESIONMEPO01.dbo.EPOPolicy_GetPolicyRuleAssignmentsByNode;1SUSPENDED                     epodbadminEDESIONMEPO01  414ePO4_EDESIONMEPO01INSERT          02########Apache HTTP Server                            424
13 Replies
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 14

Re: Too many sessions on ePO DB

Hello Pankaj,

Could you elaborate on what the symptoms are - and why you think there is a problem? I had a quick look at the files you attached and don't find anything standing out.

Thanks.

pankajs
Level 9
Report Inappropriate Content
Message 3 of 14

Re: Too many sessions on ePO DB

Hi saileendra,

When i receive such query from epo database,the database server do not allow to process the other DB's query.

Disk I/O status show 70 to 80 %.

It takes time to process other DB qyery.

Re: Too many sessions on ePO DB

You need to find out why these queries are getting suspended. Indexing, delete or alter queries, create locks that make queries wait before processing. Checkout your waittime on these processes to see which queries have been suspended the longest.

There is a high possiblity the query with the longest suspended waittime is the culprit. Checkout the SQL on that query, see which tables it is trying to access.

Have you removed/reinstalled any extensions lately? Corrupt extensions/installations/removals I have noticed can cause strange problems like this.

-KJ

Re: Too many sessions on ePO DB

What does going on toss. mean? Is it just using up all the memory of the server? Please include the specs of your ePO server and whether it is a split configuration or not. What point products you are using? How many agents?

How many people are Admins and making requests to the ePO database?

pankajs
Level 9
Report Inappropriate Content
Message 6 of 14

Re: Too many sessions on ePO DB

1> Disk I/O is going on toss.

2>DB and ePO server are on different system.

3>DB server configuration:

6GB RAM

RAID 10

Windows server 2003

SQL Server 2005

4>Point Product

HIPS8.0

VSE8.8patch2

HDLP9.1

EEPC6.1.3

SAE3.5

5>3200 System Connected

I have doubt on HIPS policy inforcement.

McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 7 of 14

Re: Too many sessions on ePO DB

hi Pankaj,

It is stiill not clear what you meant by 'going on toss' -  perhaps it would help to log a support ticket  detailing the symptoms and what exactly do you notice with respect to the ePO server performance.

Thanks.

Saiilendra

alexn
Level 14
Report Inappropriate Content
Message 8 of 14

Re: Too many sessions on ePO DB

Hi Pankajs,

There could be many reasons of too many events, one thing I would suggest.Could you check Debug log level? You are right event parser is too busy in parsing events, Check your log level.Normal should be 7.(Going on toss, he mean DB is filling up too quickely)

Re: Too many sessions on ePO DB

If you have issues with the size of the database then please follow these guidelines:

Database Maintenance - Part 1

Database Maintenance - Part 2

Re: Too many sessions on ePO DB

Hi peter,

I have also change the settings according to your requirement.

I will update to you on the same.