Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

20061122 build also stops scanning

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Networking & Security] >> GFI EventsManager >> 20061122 build also stops scanning Page: [1] 2   next >   >>
Login
Message << Older Topic   Newer Topic >>
20061122 build also stops scanning - 27.Nov.2006 7:59:54 PM   
PCPlumber

 

Posts: 14
Score: 0
Joined: 25.Oct.2006
Status: offline
I am still having problem even with the 20061122 build.
For about 4 hours, everything works.  I got alert and everything seemed to work.  And then it stopped for no apparent reason. 
I looked at the esmproc.exe service, and it is running.  The memory usage of that service kept on growing.  Although the console shows no activity.

The overall cpu and memory usage of the entire system is next to 0.  I have dedicated a Dell 2550 for this program.

The last acitivy shown was database maintenace completed at 4:06pm.
Post #: 1
RE: 20061122 build also stops scanning - 28.Nov.2006 3:36:22 AM   
Arielle

 

Posts: 295
Score: 0
Joined: 15.Sep.2006
Status: offline
Hi,

We would like to investigate this issue further. Can you please send us some debug logs by enabling debug logging as per http://kbase.gfi.com/showarticle.asp?id=KBID002896, then run the troubleshooter (Start > All Programs > GFI EventsManager 7 > Troubleshooter), ZIP the output files and send them to forums@gfi.com or support@gfi.com referencing this thread in the email.

Thanks.

_____________________________

Arielle Bonnici

GFI Blog: http://www.gfi.com/blog – Follow Us (Twitter): http://www.twitter.com/gfisoftware – Watch Us (YouTube): http://www.youtube.com/gfisoftware

(in reply to PCPlumber)
Post #: 2
RE: 20061122 build also stops scanning - 28.Nov.2006 11:27:50 AM   
tdeering

 

Posts: 51
Score: 0
Joined: 19.Dec.2005
Status: offline
I am also having problems with the new build. Our DB server does a backup which causes the db module to not work. I have set up a script to restart the service so that error goes away, but this morning at 6am it just stopped gathering events from the windows servers. The syslog messages are still being received and processed though. I restarted the service once more and it is gathering events again.

< Message edited by tdeering -- 30.Nov.2006 5:01:14 PM >

(in reply to Arielle)
Post #: 3
RE: 20061122 build also stops scanning - 28.Nov.2006 4:41:55 PM   
MMueller

 

Posts: 1
Score: 0
Joined: 28.Nov.2006
Status: offline
I am having the same issue


Everything seams to work and then out of no where i dont get any more alert or reports. I have to reboot the server and then it works.

(in reply to tdeering)
Post #: 4
RE: 20061122 build also stops scanning - 29.Nov.2006 3:20:46 AM   
Calin Ghibu

 

Posts: 1194
Score: 0
Joined: 15.Dec.2002
Status: offline
Hi,

We need deubg logs in order to troubleshoot.
Please send them as per Arielle's instructions.

Such issues may be caused by network failures, anti virus software, SQL Server jobs, etc.

tdeering: Can you please try to run a batch file prior to the SQL Server backup which stops the GFI Service, another one which starts it after SQL Backup is done, and see if you still have the issue?

PCPlumber: this may occur in case of network failure which occurs during the scanning of computers. Can you please check if you had such newtork faiulures? (DNS down, switch /router reset, cable out, etc)

Thanks,
Calin

(in reply to MMueller)
Post #: 5
RE: 20061122 build also stops scanning - 29.Nov.2006 9:24:23 AM   
Mark Busuttil

 

Posts: 4836
Score: 0
Joined: 16.Oct.2005
Status: offline
This issue is currently being handled by e-mail support. The reference number(s) used are:

133644 - tdeering
133614 - PCPlumber

Should you require any updates or further information, kindly contact forums@gfi.com and reference the url of this topic

< Message edited by Mark Busuttil -- 1.Dec.2006 5:13:33 AM >


_____________________________

Regards,
Mark Busuttil

GFI Software Ltd - www.gfi.com
Messaging, Content Security & Network Security Software
GFI: MailEssentials - MailSecurity - MailArchiver - FAXmaker - LANguard – WebMonitor

(in reply to Calin Ghibu)
Post #: 6
RE: 20061122 build also stops scanning - 30.Nov.2006 6:41:10 PM   
chris056@umn.edu

 

Posts: 15
Score: 0
Joined: 18.Jun.2004
Status: offline
I am having the same problem also.  All scanning has stopped after appx 1 day.

If you have a good log from the others, then I will not submit another debug log.

If you do NOT have a good log from the others then please let me know and I will submit one.

(in reply to Mark Busuttil)
Post #: 7
RE: 20061122 build also stops scanning - 1.Dec.2006 4:00:02 AM   
Calin Ghibu

 

Posts: 1194
Score: 0
Joined: 15.Dec.2002
Status: offline
Hi Chris,

True, all debug logs received on this issue had similar sources for errors, but not exactly the same.

I will post more details with causes and things to verify for each person reporting it.
You can either wait for that post (which will be soon) and verify the things which apply to the other persons, or send the debug logs yourself to be analyzed.

Best regards,
Calin

< Message edited by Calin Ghibu -- 1.Dec.2006 4:15:28 AM >

(in reply to chris056@umn.edu)
Post #: 8
RE: 20061122 build also stops scanning - 6.Dec.2006 12:29:33 PM   
AESIT

 

Posts: 1
Score: 0
Joined: 6.Dec.2006
Status: offline
I am also having the same issue with scanning suddenly stopping with build 20061122. Under Job Activity I get a message about Maintenace Finished but there is not more scanning being done on my servers.

(in reply to Calin Ghibu)
Post #: 9
RE: 20061122 build also stops scanning - 7.Dec.2006 3:39:03 PM   
RayPesek

 

Posts: 255
Score: 0
Joined: 7.May2004
Status: offline
I think I may have the same issue. Ths is a first-time install of the newest build, done last Saturday. It was flawless until 2:03 PM today. Status-General shows everything is normal, yet Status-Job Activity shows Active Jobs, Queued Jobs and Syslog (which s not used) as "There are no items to show in this view."

Queued Jobs and Active Jobs had been showing something all the time since a bit ago.

Statistics-All Computers is flatlined from 12:00 AM, but I did reboot the box to try and restore its operation. It was showing normal activity before the reboot. The reboot did not help.

There aren't any Windows events logged about any abnormalities.

When I try to use the Events Browser, it just hangs. It does show the SQL server is connected and running.

------------

I just looked on the SQL 2000 SP4 server and it has these events generated starting at three seconds before the scanning stopped:

Event ID 17052

Error: 0, Severity: 19, State: 0
SqlDumpExceptionHandler: Process 57 generated fatal exception c0000005 EXCEPTION_ACCESS_VIOLATION. SQL Server is terminating this process.


Event ID 17055

17066 :
SQL Server Assertion: File: <proc.c>, line=1595
Failed Assertion = 'm_activeSdesList.Head () == NULL'.


Event ID 17055

17310 :
SqlDumpExceptionHandler: Process 1360 generated fatal exception c000001d EXCEPTION_ILLEGAL_INSTRUCTION. SQL Server is terminating this process.



Event ID 17055
17310 :
process_commands: Process 1360 generated fatal exception c000001d EXCEPTION_ILLEGAL_INSTRUCTION. SQL Server is terminating this process.


Event ID 17052

Error: 0, Severity: 19, State: 0
SqlDumpExceptionHandler: Process 51 generated fatal exception c0000005 EXCEPTION_ACCESS_VIOLATION. SQL Server is terminating this process.


And there's then one of these every minutes from then on:

EventID 17052

Error: 17883, Severity: 1, State: 0
Process 63:0 (b08) UMS Context 0x0029E040 appears to be non-yielding on Scheduler 0

None of the other databases were affected. I tried to stop and start the SQL server instance but it hung while stopping and I had to kill the process. Once it restarted, EventsManager started working again. Of course, then I got calls from the users of the other databases on the box. :-(
 
This SQL server has been running flawlessly since it was installed over a year ago. Whatever happened, EventsManager did not detect the SQL server as having an issue.
 
The transaction log backup jobs run once every three hours and it was a full hour since the last backup ran. The database backup jobs only run once a day late at night.
 
FWIW,
 
Ray

(in reply to AESIT)
Post #: 10
RE: 20061122 build also stops scanning - 8.Dec.2006 1:33:16 PM   
RayPesek

 

Posts: 255
Score: 0
Joined: 7.May2004
Status: offline
<sigh> Although EM's status page shows everything is working OK, the Events Browser shows it has not logged a single security event since 2:27 PM yesterday.

SELM, on the other hand (installed on the same computer), kept on working OK.

I stopped and restarted the EM service at 1:24 PM today and the Events Browser is now showing events, however there is a big gap between Dec. 7 2:27:21 PM and Dec. 12 1:01:28 PM.

Any suggestions on how I can get the missing records back would be appreciated. They're definitely still in the event logs.

Ray

(in reply to RayPesek)
Post #: 11
RE: 20061122 build also stops scanning - 13.Dec.2006 1:15:46 PM   
RayPesek

 

Posts: 255
Score: 0
Joined: 7.May2004
Status: offline
It stopped again at 8:58 AM today. Nothing in queue, no jobs in progress, no events and no errors on the SQL server or the server EventsManager is running on.

The emsproc.exe service was almost 1.1 GB of RAM in use. The service would not stop, so I killed and restarted it. Now it's scanning again.  It's using between 70 MB and 200MB of RAM, fluctuating up as the CPU usage goes up.

Fortunately it seems to be getting caught up rather than missing any.

Ray

(in reply to PCPlumber)
Post #: 12
RE: 20061122 build also stops scanning - 13.Dec.2006 4:47:03 PM   
srsb

 

Posts: 4
Score: 0
Joined: 26.Oct.2006
Status: offline
 
We are having the same issue with build 20061122, it runs for a while then hangs. If you try to stop/start the service it doesn't work.

Time to get it fixed, when is the next build due out? There are to many problems for production software.

Also what about the next build on the Report Pack??

(in reply to PCPlumber)
Post #: 13
RE: 20061122 build also stops scanning - 20.Dec.2006 11:58:52 AM   
petestorm

 

Posts: 10
Score: 0
Joined: 11.Oct.2006
Status: offline
quote:

ORIGINAL: srsb


We are having the same issue with build 20061122, it runs for a while then hangs. If you try to stop/start the service it doesn't work.

Time to get it fixed, when is the next build due out? There are to many problems for production software.

Also what about the next build on the Report Pack??



quote:

PCPlumber
I am still having problem even with the 20061122 build.
For about 4 hours, everything works. I got alert and everything seemed to work. And then it stopped for no apparent reason.
I looked at the esmproc.exe service, and it is running. The memory usage of that service kept on growing. Although the console shows no activity.

The overall cpu and memory usage of the entire system is next to 0. I have dedicated a Dell 2550 for this program.

The last acitivy shown was database maintenace completed at 4:06pm.
Report | Post #: 1
RE: 20061122 build also stops scanning - 28.Nov.2006 3:36:22 AM
No New Messages
Arielle
Hi,


Any updates on this issue? Pretty lame that I have to force quit and restart the service of software that's at version 7.

< Message edited by petestorm -- 20.Dec.2006 12:00:14 PM >

(in reply to srsb)
Post #: 14
RE: 20061122 build also stops scanning - 20.Dec.2006 1:56:35 PM   
jsammari

 

Posts: 10
Score: 0
Joined: 12.Oct.2006
Status: offline
This is another problem that I have run into, my event logs will suddenly stop being collected. 

I have since reverted back to version 5.

(in reply to petestorm)
Post #: 15
Page:   [1] 2   next >   >>
All Forums >> [Networking & Security] >> GFI EventsManager >> 20061122 build also stops scanning Page: [1] 2   next >   >>
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts