check process bug, maybe McAfee

All questions related to installations, configurations and maintenance of Advanced Host Monitor (including additional tools such as RMA for Windows, RMA Manager, Web Servie, RCC).
Post Reply
ozaron
Posts: 10
Joined: Thu Mar 30, 2006 6:47 am

check process bug, maybe McAfee

Post by ozaron »

hi
We want to check a process on a remote server (Windows 2003 server and Windows advanced server 2000)
We have used the process test. We have turn on the remote registry service on the diffrent server. We also used the domain administrator account.
We have the following error " warning can't receive process list from...."

We have succefully check process on other server (2003 and 2000)

The only difference is that the difference between these server is that McAfee entreprise V8.0.0. is installed on the first server.

So, is there a probleme with HM and McAfee compatibility.

thanks
KS-Soft Europe
Posts: 2832
Joined: Tue May 16, 2006 4:41 am
Contact:

Post by KS-Soft Europe »

Some antivirus software, like NOD32, McAfee, etc. could modify the Winsock layer of Windows and it could lead to such problems. In case with McAfee you may try to adjust McAfee Winsock filter to figure it out.

Also you may try to execute "netsh winsock reset" in command line on remote system.

Regards,
Max
ozaron
Posts: 10
Joined: Thu Mar 30, 2006 6:47 am

Post by ozaron »

tanks for answer so fast;
we have tried your comand line and the answer is :
"command not found : winsock reset"
the new questions are : what port is used by HM to perform this tests
what are the winsockets used by HM to perform this test

thanks a lot
KS-Soft
Posts: 12821
Joined: Wed Apr 03, 2002 6:00 pm
Location: USA
Contact:

Post by KS-Soft »

HostMonitor does not uses winsock (directly) for this test. HostMonitor calls Windows API that uses RPC calls. RPC may use any port above 1023.

Both systems located in the same domain, remote registry service is started on targed system, there are no firewalls between 2 systems and you are using admin account to run HostMonitor, right?
Then make sure
1) RPC service is started
2) PerfProc.DLL is enabled on target system

Microsoft provides "Extensible Counter List" utility: http://www.microsoft.com/downloads/deta ... laylang=en
This utility displays list of DLLs that are used to support Performance Counters, using the utility you may disable/enable specific DLLs.

BTW: Do you use some other test methods to check that server? E.g. Service test? Does it work?

Regards
Alex
ozaron
Posts: 10
Joined: Thu Mar 30, 2006 6:47 am

Post by ozaron »

hi,
All the required conditions to perform "process test" are set up but HM can't receive process list.
The "service test" for the same server works fine.
Could McAfee be the origin of the problem ?
KS-Soft Europe
Posts: 2832
Joined: Tue May 16, 2006 4:41 am
Contact:

Post by KS-Soft Europe »

ozaron wrote:All the required conditions to perform "process test" are set up but HM can't receive process list.
Have you specified account for that server in Connection Manager for process test? (Profiles > Connection Manager)
ozaron wrote:The "service test" for the same server works fine.
Could McAfee be the origin of the problem ?
If "service test" works fine for that server, I do not think McAfee could lead to such problem, but you may check McAfee settings and try to adjust McAfee winsock filter.
Anyway, you may try to disable McAfee for several minutes to check that.


Regards,
Max
KS-Soft
Posts: 12821
Joined: Wed Apr 03, 2002 6:00 pm
Location: USA
Contact:

Post by KS-Soft »

Could you check the security of the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows_NT\CurrentVersion\Perflib
You can use the registry editor utility: Regedt32.exe
What accounts have access to the key?

Regards
Alex
Post Reply