Status from hosts not showing up in PMC

J-C

Hi,

 

Since a couple of days ago a customer can no longer see status updates in PMC, e.g. when virus def etc. has been updated. The choice "Message pane" on view menu is "greyed out". Instead of showing "refresh" on the view menu, it shows "Resume initial status loading" and is also "greyed out".

 

 

I have checked the logs and also resources that the server uses to the best of my abilities but cannot see anything wrong.

 

They use version 9 of PMS and PMC.

 

Any help troubleshooting this issue is greatly appreciated.

 

Regards,

JC

MJ-perComp

Hi,

 

What version are the clients?

anything in logfile.log on one of the clients that indicates a problem?

 

J-C

Hi,

 

Thank you for responding. There are different client versions, 9.20 + 9.11 + 9.10 and also some old 8.01 clients waiting to be upgraded very soon.  

 

Anyway, there is no obvious (to me) connection between old hosts and new hosts, e.g. there are some 9.11 and 9.10 thats shows up normally and some show N/A. also the few 8.01 hosts shows up fine?

 

I´m thinking maybe there is some sort of performance problem because this morning I checked 1 domain which had about 50% of hosts showing N/A.  I logged on to 2-3 hosts, checking log files but could not find any errors in logfile.log.  When I returned to the PMC, there was only about 10 hosts showing N/A so a lot of hosts was now showing status correctl? The remaining ones have still not changed status from N/A though.

Another thing is that I have a "server domain" containing 12 subdomains. These contains a total of 200 servers running Antivirus for Servers 9.00 and none of these has any problems showing status.

 

 

 

Regards,
JC

MJ-perComp

PM Version 9 - Did you apply the PM hotfixes?

Is the PMS virtual?

What ressources does the server have?

 

Is PMC running on your desktop or in the same systema s PMS?

 

can you ping to the PMS

can you browse to the PMS (not http-proxy) form the hosts IE or FF?

 

Check access.log on PMS to find any access related errors

 

if you expect a performance problem, what processes are running next to the PMS?

 

BR

J-C

Hi,

 

Yes, all 4 hotfixes are applied. The server is in fact virtual, running on vmware. It has been "assigned" the following resources: 

4 x Xeon CPU, 4 GB RAM, 40 GB HDD (approx. 9 GB free) and Windows 2008 64-bit OS. PMC is running on same machine as PMS.

 

Should be enough for approx 5500 hosts?

 

Several hosts I logged onto that are not showing status in PMC can both ping and browse to the PMS but I found errors in access.log and another log file called error.log on the server.

I am not able to interpret these, see below and please advice.

 

Also, it "feels like" there is a problem with the PMC/PMS itself, response is pretty slow when using PMC in addition to the fact that hosts status does not show up.

 

access.log:

 

127.0.0.1 - - [25/Jan/2012:13:46:10 +0100] "GET /fsms/fsmsh.dll?FSMSCommand=GetVersion HTTP/1.1" 200 23 0 - - - "Java/1.6.0_17" mod_gzip: DECLINED:NO_ACCEPT_ENCODING CR:0pct.

127.0.0.1 - - [25/Jan/2012:13:46:11 +0100] "GET /fsms/fsmsh.dll?FSMSCommand=CompileName&Type=4&Identity0=cpd9-sd7n-1nsj-nevk&Encoding=UTF-8 HTTP/1.1" 200 97 0 - - - "Java/1.6.0_17" mod_gzip: DECLINED:NO_ACCEPT_ENCODING CR:0pct.
127.0.0.1 - - [25/Jan/2012:13:46:11 +0100] "GET /fsms/fsmsh.dll?FSMSCommand=DownloadPackage&Type=4&Filename=\policies\current\4lh.bpf&Counter=1327424275387 HTTP/1.1" 200 129056 2 - - - "Java/1.6.0_17" mod_gzip: DECLINED:NO_ACCEPT_ENCODING CR:0pct.
127.0.0.1 - - [25/Jan/2012:13:46:12 +0100] "POST /fsms/fsmsh.dll?FSMSCommand=UploadPackage&Type=5&Identity0=e2ea-6g2d-ja8c-7yhe&Encoding=UTF-8 HTTP/1.1" 200 20 0 - - 18902 "Java/1.6.0_17" mod_gzip: DECLINED:NO_ACCEPT_ENCODING CR:0pct.
127.0.0.1 - - [25/Jan/2012:13:46:12 +0100] "GET /fsms/fsmsh.dll?FSMSCommand=DownloadPackage&Type=4&Filename=\policies\current\11d.bpf&Counter=1327424275387 HTTP/1.1" 200 113623 7 - - - "Java/1.6.0_17" mod_gzip: DECLINED:NO_ACCEPT_ENCODING CR:0pct.

 

error.log:

 

[Wed Jan 25 12:17:51 2012] [info] [client 127.0.0.1] (10053)Unknown error: client stopped connection before rwrite completed
[Wed Jan 25 12:17:51 2012] [info] [client 127.0.0.1] closed connection, incomplete sent data (262144 != -1) for 'FSMSCommand=ReadPackage&Type=15&FileName=fsav&SessionID=8629735'

 

[Wed Jan 25 13:03:40 2012] [info] Upload denied: ongoing admin transaction -- '/fsms/fsmsh.dll?FSMSCommand=UploadPackage&Type=5&Identity0=qhqx-6zyq-634x-3y5u&Encoding=UTF-8'

 

[Wed Jan 25 13:29:29 2012] [error] (2)No such file or directory: no_such_host: IndexedPathGenerator::generate: couldn't find hosts -- get_error: ConcateCompiler::getoutputstream -- put_error: RepositoryAPI:utpackage: error while trying to get outputstream -- /fsms/fsmsh.dll?FSMSCommand=UploadPackage&Type=54&Identity0=nkj0454b0&Identity1=NKJ0454B0&Identity2=172_2E28_2E32_2E46&Identity3=379147d0_2Dfa95_2D76b8_2D9e60_2D00199951f1b6&Encoding=UTF-8&FileName=unknown_2Earp
[Wed Jan 25 13:42:36 2012] [info] [client 127.0.0.1] closed connection, incomplete sent data (32768 != 4091) for 'FSMSCommand=DownloadPackage&Type=4&Filename=\policies\current\257.bpf&Counter=1327424275387'
[Wed Jan 25 13:42:36 2012] [info] [client 127.0.0.1] (10053)Unknown error: client stopped connection before rputs completed
[Wed Jan 25 13:44:11 2012] [error] (2)No such file or directory: no_such_host: IndexedPathGenerator::generate: couldn't find hosts -- get_error: ConcateNameCompiler::getinputstream: -- get_error: RepositoryAPI::getpackage -- /fsms/fsmsh.dll?FSMSCommand=CompileName&Type=4&Identity0=711n7052b0&Identity1=711N7052B0&Identity2=172_2E18_2E52_2E30&Identity3=d13779cd_2D5e39_2Dda11_2D845f_2D003005aaa0da&Encoding=UTF-8
[Wed Jan 25 13:44:11 2012] [error] (2)No such file or directory: no_such_host: IndexedPathGenerator::generate: couldn't find hosts -- get_error: ConcateCompiler::getoutputstream -- put_error: RepositoryAPI:utpackage: error while trying to get outputstream -- /fsms/fsmsh.dll?FSMSCommand=UploadPackage&Type=5&Identity0=711n7052b0&Identity1=711N7052B0&Identity2=172_2E18_2E52_2E30&Identity3=d13779cd_2D5e39_2Dda11_2D845f_2D003005aaa0da&Encoding=UTF-8
[Wed Jan 25 13:46:01 2012] [info] (2)No such file or directory: requests: 117132, hits: 114779, misses: 148, invalid: 2205, error: 0, maxmem: 14615861, curmem: 10989052, files: 98
[Wed Jan 25 13:46:57 2012] [error] (2)No such file or directory: no_such_host: IndexedPathGenerator::generate: couldn't find hosts -- get_error: ConcateCompiler::getoutputstream -- put_error: RepositoryAPI:utpackage: error while trying to get outputstream -- /fsms/fsmsh.dll?FSMSCommand=UploadPackage&Type=5&Identity0=nkj0315b0&Identity1=NKJ0315B0&Identity2=172_2E28_2E11_2E238&Identity3=dc4fd975_2Dd64a_2D4965_2Da6ac_2D6a1caa63bd8e&Encoding=UTF-8

 

Thanks and regards,

JC

MJ-perComp

Hi,

 

the [info] lines are for information

 

but the [error] lines show that a host named "NKJ0454B0" with UUID "379147d0_2Dfa95_2D76b8_2D9e60_2D00199951f1b6" can not be found in the database.

 

[Wed Jan 25 13:29:29 2012] [error] (2)No such file or directory: no_such_host: IndexedPathGenerator::generate: couldn't find hosts -- get_error: ConcateCompiler::getoutputstream -- put_error: RepositoryAPI:utpackage: error while trying to get outputstream -- /fsms/fsmsh.dll?FSMSCommand=UploadPackage&Type=54&

Identity0=nkj0454b0&Identity1=NKJ0454B0&Identity2=172_2E28_2E32_2E46&Identity3=379147d0_2Dfa95_2D76b8_2D9e60_2D00199951f1b6&Encoding=UTF-8&FileName=unknown_2Earp

 

search for both identities, remove any appearance and distribute a policy. The host should now re-register.

 

Jetty log might give a better clue as it shows the IP of the hosts

 

BR

 

J-C

Hi,

 

My colleague contacted the vendor when I was away and after trying a few different solutions that did not work, they finally found the problem.

Turns out when checking commdir consistency, some domains were corrupted somehow.

 

The Domains Recovery Tool from F-secure fixed it!

 

Thanks and regards,

 

JC