[[SOLVED] ESMC logs]

15 hours ago, Marcos said:

Do you use a 3rd party plug-in for the ESMC server, e.g. ConnectWise?

 

No, Im not using any 3rd party plugins

[[SOLVED] ESMC logs]

Hey guys.

I started new thread as I want to read as many stuff members as possible. As You know, there are some bugs I have in new ESMC server. Yesterday I migrated my db to official VA as I wanted to eliminate possible errors caused by server configuration and I see errors. There was a topic in past and fix but I guess it will not work for newer version

2018-09-19 10:35:19 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:35:29 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:35:39 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:35:49 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:35:59 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:36:09 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:36:19 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:36:29 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:36:39 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:36:49 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:36:59 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:37:09 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:37:19 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:37:29 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:37:39 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:37:49 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:37:59 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:38:09 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:38:19 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:38:29 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:38:39 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:38:49 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:38:59 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:39:09 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:39:19 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:39:29 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:39:39 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:39:49 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:39:54 Warning: CReplicationModule [Thread 7f241aff5700]: VerifyDeviceAuthenticationToken: Verification of authentication token: d90bdec23e0594d31cb26cf70e2a3759b8cf22cbd34d4c5e64501dd6ceca4658 failed (error_code=INVALID_TOKEN, status=TOKEN_EXPIRED, msg=
2018-09-19 10:39:54 Warning: CReplicationModule [Thread 7f241aff5700]: RpcCheckReplicationConsistencyHandler: Token validation failure
2018-09-19 10:39:59 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:40:09 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:40:19 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:40:29 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:40:39 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:40:49 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:40:59 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:41:09 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:41:19 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:41:29 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:41:39 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:41:49 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:41:59 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor
2018-09-19 10:42:09 Error: NetworkModule [Thread 7f2472ffd700]: remote_endpoint: Bad file descriptor

 

older topic :

 

https://forum.eset.com/topic/8196-server-dies-regularly-with-remote_endpoint-bad-file-descriptor/

[ERA Agent V7 issues]

I can say that I had same situation today. I pulled my db from old debian server to official VA, and it happend. Rebooted server and problem was solved. I dont know how You guys, but I look at server logs, and I get plenty of warning logs :

2018-09-19 09:54:54 Warning: CReplicationModule [Thread 7f24177ee700]: RpcCheckReplicationConsistencyHandler: Token validation failure
2018-09-19 09:55:25 Warning: CReplicationModule [Thread 7f241aff5700]: VerifyDeviceAuthenticationToken: Verification of authentication token: e97553142e2d4fcf300f07ccb8ace7bf36d8ee08cdca73ec92d4b3844821fa5a failed (error_code=INVALID_TOKEN, status=TOKEN_EXPIRED, msg=
2018-09-19 09:55:25 Warning: CReplicationModule [Thread 7f241aff5700]: RpcCheckReplicationConsistencyHandler: Token validation failure
2018-09-19 09:56:14 Warning: CReplicationModule [Thread 7f24177ee700]: VerifyDeviceAuthenticationToken: Verification of authentication token: dec4abac002fb2d567428794519deeaf02128a642968e9c4166d3e9d9377df00 failed (error_code=INVALID_TOKEN, status=TOKEN_EXPIRED, msg=
2018-09-19 09:56:14 Warning: CReplicationModule [Thread 7f24177ee700]: RpcCheckReplicationConsistencyHandler: Token validation failure
2018-09-19 09:56:16 Warning: CReplicationModule [Thread 7f2417fef700]: VerifyDeviceAuthenticationToken: Verification of authentication token: 60948ac44f0860c1ec8552f928887f7e7cab7fb6a189bb56c8a22b99df549fdf failed (error_code=INVALID_TOKEN, status=TOKEN_EXPIRED, msg=
2018-09-19 09:56:16 Warning: CReplicationModule [Thread 7f2417fef700]: RpcCheckReplicationConsistencyHandler: Token validation failure
2018-09-19 09:56:53 Warning: CReplicationModule [Thread 7f241aff5700]: VerifyDeviceAuthenticationToken: Verification of authentication token: 21d9eb5ae615f67102079218f39763266ee8a4b2dbd6a33b4ae80b95d5cde065 failed (error_code=INVALID_TOKEN, status=TOKEN_EXPIRED, msg=

 

I wonder are these logs are caused by old agents ?

 

[Cannot uninstall ESET Management Agent 7 deployed via GPO]

32 minutes ago, Michał Mielech said:

1. You think I should upgrade ERA to ESMC ? Will it support older windows xp workstations ?

Quote

https://help.eset.com/era_install/65/en-US/windows.html

 

[ESMC Components Upgrade task failed.]

3 minutes ago, Haresh2015 said:

Run Command doesn't work. 

What error You have ?

[ESCM Installed Application problem]

38 minutes ago, LegacyConnectorSupport said:

Can You please PM me installation/upgrade 

If its not a problem I would like to send You logs tomorrow as Im on 10% of my Global objects when it comes to upgrade. This problems is currently my number 1 reason I didnt deployed upgrade global

[ESCM Installed Application problem]

Yeah it happens from time to time. I allready reported that problem to ESET Stuff.

My temporary solution is :

export registry entries for "ESET Management Agent " from machine that have info about installed agent. Then import them to machine with problems. You can make it via reg import command. On those computers with problems You can see, that ESMC Agent isnt on the list of installed software.

Use at Your own risk <- this solution isnt supported by ESET

[ESMC Components Upgrade task failed.]

Yeah You can try to make custom task with

Quote

del "C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Data\upgrade.json"

[ESMC Components Upgrade task failed.]

Please delete that mentioned file, it should be ok after re-run (had some similar problems on some stations in past)

[Endpoint Antivirus All in one installer problem]

Temporary solution would be to create dynamic groups that will sort servers and clients and attach client task run when joining DG. Less work, full automatic

[Unable to Login ESMC V7]

2018-08-30 12:13:48 Error: CDatabaseModule [Thread 3240]: Database connection down. Exception:[Microsoft][ODBC SQL Server Driver][DBNETLIB]General network error. Check your network documentation. (11)

2018-08-30 12:13:46 Error: Kernel [Thread 3038]: Preparing to stop module 'CDataMinersModule' failed with: [Microsoft][ODBC SQL Server Driver]

Login failed for user 'era_user'. (18456)

In my opinion there is credential error, You should be able to check Your used password in :
 

Quote

/tomcat7/webapps/era/WEB-INF/classes/sk/eset/era/g2webconsole/server/modules/config/EraWebServerConfig.properties

Check used password and re-run installer

[Upgraded from 6.5 to 7 can't resolve issue]

Glad everything is working now greetz

[Upgraded from 6.5 to 7 can't resolve issue]

try https:// instead https:\\

What o/s You are using for esmc and what is an error that You have when trying connect to console ?

[Error:2537 after migration to era ESMC]

1 hour ago, Momon said:

i should do this in my new ERA after migraton or before migration on my old era? 

Just do that now and You will be able to continue upgrade

[Security Alert after new Installation (HIPS and Anti Phishing)]

First You need to get of presentation mode (IMO it should be disabled by default). Check Your Policies for these products. You need to enable those modules. Last thing : is there reboot requirement ? If not, deal with policies first (presentation mode can be also disabled by a policy)

[Update to ERA Agent v7 not working.]

Didnt noticed You are still on version 6. I upgraded my era to esmc but I upgrade esmc agent didnt worked for me via task. I installed it manually after re-generate inside console. 

[Apache HTTP Proxy settings for replication]

You need to get out of authentication. Http proxy with credentials is not allowed at this moment

[Update to ERA Agent v7 not working.]

Didnt worked for me at all

[Update to ERA Agent v7 not working.]

Go to installers and generate new installer + ini (if on linux then You need only installer in sh). And launch it on server. You cant upgrade agent on server via client task

[Failed to activate EAV]

Just make new client task : software uninstall and point to security ones. This should work without any problem

[Cannot Upgrade Agents after Upgrade to ESMC 7]

I use msi + ini and deploy them via gpo. Just generate files (new msi and new ini) in console and it is ready to rock

[Failed to activate EAV]

licence is valid for 6.x - 7. Maybe You did same thing like I did in past : installed eset endpoint security instead eset endpoint antivirus... ?

[Remote Management Version 7]

after install of ESMC agent, policy run smooth.

[Email Notification on USB Storage Plug in]

Until today I was almost sure it can be done by policy :

• setup level of logging severity on warning (for device control)
• setup minimum verbosity for notifications on warnings

But unfortunetly it doesnt work. All You can do now is a report action. 

[error HTTP 404 – Not Found afeter upgrade era 6 to 7]

If Your era server is upgraded and You logged in, Then You can revoke privileges. No need to shutdown anything, Just execute command