j.hoffmann 0 Posted June 24, 2015 Posted June 24, 2015 Hi, since a few days, most of my clients can't connect to the era server (era 6 virtual appliance). Here is the Diagnostioc Logfile from a client: 2015-06-15 07:09:49 Information: Kernel [Thread 778]: Initialized module CSystemConnectorModule (used 496 KB)2015-06-15 07:09:49 Information: Kernel [Thread 778]: Initializing module CEssConnectorModule2015-06-15 07:09:49 Information: CEssConnectorModule [Thread 778]: Product version 6.1.2227.3 matches pattern 6.0.2004.02015-06-15 07:09:49 Information: Kernel [Thread 778]: Initialized module CEssConnectorModule (used 0 KB)2015-06-15 07:09:49 Information: Kernel [Thread 778]: Initializing module ERAG1ClientConnector2015-06-15 07:09:49 Information: ERAG1ClientConnector [Thread 778]: <CONNECTOR_MODULE> Product for ERAG1ClientConnector not detected (version: 6.1.2227.3).2015-06-15 07:09:51 Information: ERAG1ClientConnector [Thread 778]: Connector was deactivated. No tasks will be processed and no logs will be produced.2015-06-15 07:09:51 Information: Kernel [Thread 778]: Initialized module ERAG1ClientConnector (used 0 KB)2015-06-15 07:09:51 Information: Kernel [Thread 778]: Initializing module CMDMCoreConnectorModule2015-06-15 07:09:51 Information: CMDMCoreConnectorModule [Thread 778]: Connector was deactivated. No tasks will be processed and no logs will be produced.2015-06-15 07:09:51 Information: Kernel [Thread 778]: Initialized module CMDMCoreConnectorModule (used 0 KB)2015-06-15 07:09:51 Information: Kernel [Thread 778]: Initializing module CVAHCoreConnectorModule2015-06-15 07:09:51 Information: CVAHCoreConnectorModule [Thread 778]: Connector was deactivated. No tasks will be processed and no logs will be produced.2015-06-15 07:09:51 Information: Kernel [Thread 778]: Initialized module CVAHCoreConnectorModule (used 0 KB)2015-06-15 07:09:51 Information: Kernel [Thread 778]: Initializing module AgentToProxyConnectorModule2015-06-15 07:09:51 Information: AgentToProxyConnectorModule [Thread 778]: Connector was deactivated. No tasks will be processed and no logs will be produced.2015-06-15 07:09:51 Information: Kernel [Thread 778]: Initialized module AgentToProxyConnectorModule (used 0 KB)2015-06-15 07:09:51 Information: Kernel [Thread 778]: Initializing module CRDSensorConnectorModule2015-06-15 07:09:51 Information: CRDSensorConnectorModule [Thread 778]: Connector was deactivated. No tasks will be processed and no logs will be produced.2015-06-15 07:09:51 Information: Kernel [Thread 778]: Initialized module CRDSensorConnectorModule (used 0 KB)2015-06-15 07:09:51 Information: Kernel [Thread 778]: Starting crash dumps sending thread2015-06-15 07:09:51 Information: Kernel [Thread 778]: Used memory before modules start-up is 21492 KB2015-06-15 07:09:51 Information: Kernel [Thread b44]: Initiating crash dumps sender for directory: "C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Dumps\" Anybody an idea whats wrong?
Administrators Marcos 5,468 Posted June 24, 2015 Administrators Posted June 24, 2015 Do you see any dumps in the C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Dumps folder ? If possible, please compress them, upload the archive to a safe location and pm me the download link.
j.hoffmann 0 Posted June 24, 2015 Author Posted June 24, 2015 Do you see any dumps in the C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Dumps folder ? No, this folder is empty.
j.hoffmann 0 Posted June 29, 2015 Author Posted June 29, 2015 What should i do next? Can i manually create dumps/logs?
Administrators Marcos 5,468 Posted June 29, 2015 Administrators Posted June 29, 2015 If you open the file C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Logs\status.html, is everything green? Could you drop me a pm with the whole Agent trace log C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Logs\trace.log attached?
j.hoffmann 0 Posted June 30, 2015 Author Posted June 30, 2015 Thank you Marcos. In "C:\ProgramData\ESET\RemoteAdministrator\Agent\EraAgentApplicationData\Logs\status.html" i see this error: hxxp://abload.de/img/eset300649jgi.png It seems to be a problem with the certificate?!
Administrators Marcos 5,468 Posted June 30, 2015 Administrators Posted June 30, 2015 It seems to be a problem with the certificate?! It seems so. I'd suggest generating an Agent Live installer and running it on the client to reinstall agent using correct certificates.
Recommended Posts