check process bug, maybe McAfee

ozaron · Joined: 30 Mar 2006 Posts: 10

hi
We want to check a process on a remote server (Windows 2003 server and Windows advanced server 2000)
We have used the process test. We have turn on the remote registry service on the diffrent server. We also used the domain administrator account.
We have the following error " warning can't receive process list from...."

We have succefully check process on other server (2003 and 2000)

The only difference is that the difference between these server is that McAfee entreprise V8.0.0. is installed on the first server.

So, is there a probleme with HM and McAfee compatibility.

thanks

KS-Soft Europe · Joined: 16 May 2006 Posts: 2832

Some antivirus software, like NOD32, McAfee, etc. could modify the Winsock layer of Windows and it could lead to such problems. In case with McAfee you may try to adjust McAfee Winsock filter to figure it out.

Also you may try to execute "netsh winsock reset" in command line on remote system.

Regards,
Max

ozaron · Joined: 30 Mar 2006 Posts: 10

tanks for answer so fast;
we have tried your comand line and the answer is :
"command not found : winsock reset"
the new questions are : what port is used by HM to perform this tests
what are the winsockets used by HM to perform this test

thanks a lot

KS-Soft · Joined: 03 Apr 2002 Posts: 12793 Location: USA

HostMonitor does not uses winsock (directly) for this test. HostMonitor calls Windows API that uses RPC calls. RPC may use any port above 1023.

Both systems located in the same domain, remote registry service is started on targed system, there are no firewalls between 2 systems and you are using admin account to run HostMonitor, right?
Then make sure
1) RPC service is started
2) PerfProc.DLL is enabled on target system

Microsoft provides "Extensible Counter List" utility: http://www.microsoft.com/downloads/details.aspx?FamilyID=7ff99683-b7ec-4da6-92ab-793193604ba4&displaylang=en
This utility displays list of DLLs that are used to support Performance Counters, using the utility you may disable/enable specific DLLs.

BTW: Do you use some other test methods to check that server? E.g. Service test? Does it work?

Regards
Alex

ozaron · Joined: 30 Mar 2006 Posts: 10

hi,
All the required conditions to perform "process test" are set up but HM can't receive process list.
The "service test" for the same server works fine.
Could McAfee be the origin of the problem ?

KS-Soft Europe · Joined: 16 May 2006 Posts: 2832

KS-Soft · Joined: 03 Apr 2002 Posts: 12793 Location: USA

Could you check the security of the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows_NT\CurrentVersion\Perflib
You can use the registry editor utility: Regedt32.exe
What accounts have access to the key?

Regards
Alex