1 2 Previous Next 17 Replies Latest reply on Nov 19, 2007 2:56 AM by PBateman

    Push agent Installation program - failed

      Afternoon

      I've checked the server event viewer, it has many events stating
      Push agent installation program xxx.xxx.xxx.xxx failed.

      Its trying to push an agent install to an IP address 1 every minute!

      Can anyone tell me how ePO detects the IP addresses and if there is a setting to stop this from happening?

      Thanks in advance

      Paul
        • 1. Investigation
          After looking at the IP addresses it appears these are valid machines which are not reporting to the ePO server. Therefore the agent needs to be installed on the machines but failing.

          I do not know why this is failing, is there a way to turn on more detailed logging?

          Any help would be grateful

          Many Thanks
          • 2. RE: Investigation
            goto C:\Program Files\McAfee\ePO\DB\Logs

            Look at the logs and it should tell you why it is failing or at least give you a error code to look up.
            • 3. Log Files
              Thanks for the advice.

              I have had a look at all the log files and can not find anything in relation to the client installations.

              I 've checked the following:

              EpoApSvr.log
              eventparser.log
              Replication.log
              server.log
              servertask.log

              Am i missing something?

              Thanks in advance
              • 4. RE: Log Files
                tonyb99
                EpoApSvr.log is the one you want (to see the servers point of view when you push install) you should see entries like the following for example:

                20071107115458 E #892 EPOJNI Failed to connect to JV040972:8081, network error was 10060

                20071107115528 E #6492 EPOJNI Server failed to Ping JV040972..., removing the entry from the workQueue, detailed error = 1411511128

                If the workstations already have a different agent then check the agent logs on the workstations to see whats going on
                • 5. Strange
                  Thanks Tony

                  Its strange, there is nothing in the server log and the logs on the clients are not updating either.

                  All the machines that are appearing in the server events are not in ePO and all have valid machine names / IP addresses.

                  I can ping the machines from the server and also browse the hard drives.

                  Have you got any other suggestions or come across this before?

                  Thanks
                  • 6. RE: Strange
                    What version of ePO are you using? Post your EpoApSvr.log so we can see.
                    • 7. Log
                      Running 3.6.1.202

                      20071107161053 I #4544 SiteMgr ReplicateSite: Finished replicating to site BT02 AV Repository, duration: 25656ms
                      20071107161053 I #4544 McUpload Start http session login...
                      20071107161053 I #4544 McUpload Successfully disabled CA trust options.
                      20071107161053 I #4544 McUpload End http session login, status=0
                      20071107161053 I #4544 McUpload CA trust has already been set.
                      20071107161053 I #4544 McUpload Http response status code = 200
                      20071107161053 i #1692 SiteMgr ReplicationThreadProc: Replication finished successfully
                      20071107161053 x #4864 SiteMgr SiteMgr main control final release...
                      20071107161053 I #4864 RManJNI Calling RevertToSelf
                      20071107162107 I #8404 EPOJNI Getting license data...
                      20071107162107 I #8404 EPOJNI Got license data, buffer size = 153
                      20071107162107 I #1944 EPOJNI Getting license data...
                      20071107162107 I #1944 EPOJNI Got license data, buffer size = 153
                      20071107162108 I #8404 EPOJNI Getting event log entries, start=1, end=40
                      20071107162108 I #8404 EPOJNI Got event log entries, buffer size = 2714
                      20071107162110 I #1944 EPOJNI Getting event log entries, start=41, end=60
                      20071107162110 I #1944 EPOJNI Got event log entries, buffer size = 1352
                      20071107162112 I #8404 EPOJNI Getting event log entries, start=61, end=80
                      20071107162112 I #8404 EPOJNI Got event log entries, buffer size = 1350
                      20071107162115 I #1944 EPOJNI Getting event log entries, start=81, end=100
                      20071107162115 I #1944 EPOJNI Got event log entries, buffer size = 1356
                      20071107162118 I #8404 EPOJNI Getting event log entries, start=101, end=120
                      20071107162118 I #8404 EPOJNI Got event log entries, buffer size = 1352
                      20071107162121 I #1944 EPOJNI Getting event log entries, start=121, end=140
                      20071107162121 I #1944 EPOJNI Got event log entries, buffer size = 1356
                      20071107163000 I #4840 usermgr Attempting to add user: domain\AVSQL
                      20071107163000 I #4840 usermgr Current user: SYSTEM
                      20071107163000 I #4840 RManJNI Impersonating database user: domain\AVSQL
                      20071107163008 I #4840 SiteMgrWrap Created instance of Site Manager
                      20071107163008 I #4840 SiteMgrWrap DispEventAdvise on Site Manager succeeded
                      20071107163008 I #4840 SiteMgrWrap RevertToSelf Succeeded
                      20071107163008 I #4840 SiteMgrWrap Domain User is: domain\AVSQL
                      20071107163008 I #4840 usermgr Attempting to add user: domain\AVSQL
                      20071107163008 I #4840 usermgr Current user: SYSTEM
                      20071107163008 I #4840 SiteMgrWrap Impersonating database user: domain\AVSQL
                      20071107163010 I #4840 SiteMgrWrap RevertToSelf Succeeded
                      20071107163010 I #4840 SiteMgr SetEPOMode: SiteMgr enter ePO mode, server=ECCSAV01041267, port=8443, EPOUser=, Password=********
                      20071107163010 I #4840 usermgr Attempting to add user: domain\AVSQL
                      20071107163010 I #4840 usermgr Current user: SYSTEM
                      20071107163010 I #4840 SiteMgr Impersonating database user: domain\AVSQL
                      20071107163011 I #4840 SiteMgr RevertToSelf Succeeded
                      20071107163011 I #4840 SiteMgr DALInit: Connected to DAL successful
                      20071107163011 I #4840 SiteMgr SetEPOMode: Set ePO mode successful
                      20071107163011 I #4840 SiteMgr DownloadSiteListThreadProc: Download sitelist thread started
                      20071107163011 I #4840 SiteMgr DownloadSiteListThreadProc: Download sitelist thread ended
                      20071107163011 I #4840 SiteMgr Get SiteMgr status 0
                      20071107163011 I #8236 SiteMgr MirrorThreadProc: Mirror thread started
                      20071107163011 I #8236 SiteMgr DownloadSiteListThreadProc: Download sitelist thread started
                      20071107163012 I #8236 SiteMgr DownloadSiteListThreadProc: Download sitelist thread ended
                      20071107163012 I #8236 SIM_InetMgr Starting download session for site McAfeeFtp
                      20071107163017 I #8236 NaInet Looking for IE Proxy settings for protocol: http
                      20071107163017 I #8236 NaInet Trying logged on user account privilege for impersonation
                      20071107163017 I #8236 NaiInet IE Proxy settings found, Proxy Server:
                      20071107163017 I #8236 NaInet Looking for IE Proxy settings for protocol: ftp
                      20071107163017 I #8236 NaInet Trying logged on user account privilege for impersonation
                      20071107163017 I #8236 NaiInet IE Proxy settings found, Proxy Server:
                      20071107163017 I #8236 naInet FTP Session initialized
                      20071107163017 I #8236 NaInet FTP Session 1 Logging into FTP Server: ftp.nai.com using User: anonymous in win-inet mode
                      20071107163017 I #8236 naInet HTTP Session initialized
                      20071107163018 I #8236 naInet Connecting to HTTP Server using Microsoft WinInet
                      20071107163018 I #8236 naInet Trying to connect to Real Server ftp.nai.com using INTERNET_OPEN_TYPE_PRECONFIG
                      20071107163018 I #8236 naInet Connected to Server: ftp.nai.com on Port: 21 using WinInet
                      20071107163018 I #8236 SIM_InetMgr Started download session 1 for site McAfeeFtp
                      20071107163018 I #8236 SiteMgr MirrorThreadProc: Downloading file catalog.z from McAfeeFtp
                      20071107163018 I #8236 SIM_InetMgr Downloading file catalog.z from session 1, LocalDir=C:\WINDOWS\TEMP\naiCE1F.tmp\00000000, RemoteDir=
                      20071107163018 I #8236 NaInet FTP session 1 Downloading file: /CommonUpdater/catalog.z from FTP Server: ftp.nai.com
                      20071107163018 I #8236 NaInet FTP session 1 Downloading file from FTP server ftp.nai.com using WinInet [in non-proxy mode]
                      20071107163018 I #8236 naInet Open URL: ftp://ftp.nai.com:21/CommonUpdater/catalog.z
                      20071107163018 I #8236 naInet Trying to download using Microsoft WinInet library
                      20071107163018 I #8236 naInet Connecting to Server ftp.nai.com using INTERNET_OPEN_TYPE_PRECONFIG
                      20071107163018 I #8236 naInet No resume download needed, calling InternetOpenUrl
                      20071107163020 I #8236 naInet Content Length is not available, no resumable download support
                      20071107163021 I #8236 naInet Downloaded 334 bytes this time
                      20071107163021 I #8236 naInet Downloaded 0 bytes this time
                      20071107163021 I #8236 SIM_InetMgr Downloaded file catalog.z successfully in session 1
                      20071107163021 e #8236 SiteMgr MirrorThreadProc: Failed to decrypt and extract C:\WINDOWS\TEMP\naiCE1F.tmp\00000000\catalog.z, hr=0xffffff96
                      20071107163021 I #8236 McUpload Start http session login...
                      20071107163021 I #8236 McUpload Successfully disabled CA trust options.
                      20071107163021 I #8236 McUpload End http session login, status=0
                      20071107163021 I #8236 McUpload CA trust has already been set.
                      20071107163021 I #8236 McUpload Http response status code = 200
                      20071107163021 I #8236 naInet HTTP Session closed
                      20071107163021 I #8236 naInet ------------------------------------------------------------
                      20071107163021 I #8236 naInet FTP Session 1 closed
                      20071107163021 I #8236 naInet ------------------------------------------------------------
                      20071107163021 I #8236 SIM_InetMgr Session 1 ended, result=1
                      20071107163021 I #8236 SiteMgr MirrorThreadProc: Mirror thread ended
                      20071107163021 x #4840 SiteMgr SiteMgr main control final release...
                      20071107163021 I #4840 RManJNI Calling RevertToSelf
                      20071107163124 I #1944 EPOJNI Getting license data...
                      20071107163124 I #1944 EPOJNI Got license data, buffer size = 153
                      20071107163124 I #8404 EPOJNI Getting license data...
                      20071107163124 I #8404 EPOJNI Got license data, buffer size = 153
                      20071107163124 I #1944 EPOJNI Getting event log entries, start=1, end=40
                      20071107163124 I #1944 EPOJNI Got event log entries, buffer size = 2714
                      20071107163126 I #8404 EPOJNI Getting event log entries, start=41, end=60
                      20071107163126 I #8404 EPOJNI Got event log entries, buffer size = 1352
                      20071107163305 I #8404 EPOJNI Getting event log entries, start=61, end=80
                      20071107163305 I #8404 EPOJNI Got event log entries, buffer size = 1350
                      20071107163320 I #1944 EPOJNI Getting event log entries, start=81, end=100
                      20071107163320 I #1944 EPOJNI Got event log entries, buffer size = 1356
                      20071107163322 I #8404 EPOJNI Getting event log entries, start=101, end=120
                      20071107163322 I #8404 EPOJNI Got event log entries, buffer size = 1352
                      20071107163714 I #8408 EPOJNI Getting license data...
                      20071107163714 I #8408 EPOJNI Got license data, buffer size = 153
                      20071107163714 I #1944 EPOJNI Getting license data...
                      20071107163714 I #1944 EPOJNI Got license data, buffer size = 153
                      20071107163716 I #8408 EPOJNI Getting license data...
                      20071107163716 I #8408 EPOJNI Got license data, buffer size = 153
                      20071107163716 I #1944 EPOJNI Getting license data...
                      20071107163716 I #1944 EPOJNI Got license data, buffer size = 153
                      20071107163847 I #1944 EPOJNI Getting license data...
                      20071107163847 I #1944 EPOJNI Got license data, buffer size = 153
                      20071107163847 I #8408 EPOJNI Getting license data...
                      20071107163847 I #8408 EPOJNI Got license data, buffer size = 153
                      20071107163851 I #1944 EPOJNI Getting event log entries, start=1, end=40
                      20071107163851 I #1944 EPOJNI Got event log entries, buffer size = 2714
                      20071107164233 I #4796 McUpload Start http session login...
                      20071107164233 I #4796 McUpload Successfully disabled CA trust options.
                      20071107164233 I #4796 McUpload End http session login, status=0
                      20071107164233 I #4796 McUpload CA trust has already been set.
                      20071107164233 I #5004 EPOJNI Processing console request file M:/Program Files/McAfee/ePO/3.6.1/DB/Request/9403A3-115C6BA8A28--7CE9/cnslrq.ini
                      20071107164233 I #1780 EPOJNI Getting configure info from M:\Program Files\McAfee\ePO\3.6.1\DB\Server.ini
                      20071107164233 I #4796 McUpload Http response status code = 200
                      20071107164233 I #1780 EPOJNI Deleting console request file M:/Program Files/McAfee/ePO/3.6.1/DB/Request/9403A3-115C6BA8A28--7CE9/cnslrq.ini
                      • 8. RE: Log
                        The log was too long to submit therefore i had to cut and paste

                        Any help would be grateful

                        Thanks Guys
                        • 9. RE: Log
                          Hmm.... Windows firewall is turned off on the clients right? Also make sure the AVSQL NT account is not locked out. Do you have rogue system detection automation on so that it pushes agents to rogue agents? Maybe that why it is pushing agents every minute. I once had a issue where my agent pushes stopped working and I ended up reinstalling ePO. You could upgrade to ePO 4.0 but this does not come with rogue system detection yet. But overall I like ePO 4.0 alot.
                          1 2 Previous Next