avielc 56 Posted June 28, 2016 Share Posted June 28, 2016 Hi everyone I have two Macbooks in my company which won't let me run ERA Agent on them they both return a success when i try to install it via the ERA web console using a Server Task for Agent deployment but the computers won't show any information on the main computers window. I have moved further ahead to try and install manually using a live installer through SSH to the computers. both have failled with the weirdest error i have seen AmnonMB:/ itadmin$ sudo /Applications/ESET\ Remote\ Administrator\ Agent.app/Contents/MacOS/ERAAgent <-- Command to start the ERA Agent Loading kernel ! Failed to load library: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/Kernel.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/Kernel.dylib, 9): Library not loaded: Protobuf.dylib Referenced from: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/Kernel.dylib Reason: image not found Not found: Era::Kernel::CCoreModule Anyone has any idea what's that or how i fix it? Thanks. Link to comment Share on other sites More sharing options...
ESET Staff MartinK 383 Posted June 28, 2016 ESET Staff Share Posted June 28, 2016 (edited) Please provide system specification, especially version of OSX. We are also interested in list of installed files using: sudo ls -la "/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/" There should be file Protobuf.dylib in this directory side-by-side with ERAAgent executable, but it seems to be either missing, or there are some permissions issues. In case mentioned Protobuf.dylib will be present, please run also next commands in case required otool command line tool will be available on this machine: sudo otool -L "/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/Kernel.dylib" sudo otool -L "/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/Protobuf.dylib" Edited June 28, 2016 by MartinK Link to comment Share on other sites More sharing options...
avielc 56 Posted June 28, 2016 Author Share Posted June 28, 2016 (edited) As requested @MartinK AmnonMB:~ itadmin$ sudo ls -la "/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/" total 119040 dr-xr-xr-x 26 root wheel 884 Jan 11 17:19 . dr-xr-xr-x 8 root wheel 272 Jan 11 17:19 .. -r-xr-xr-x 1 root wheel 2302224 Jan 11 17:19 Automation.dylib -r-xr-xr-x 1 root wheel 1415760 Jan 11 17:19 Cleanup.dylib -r-xr-xr-x 1 root wheel 2146176 Jan 11 17:19 DALNativeSQLite.dylib -r-xr-xr-x 1 root wheel 2215760 Jan 11 17:19 DataMiners.dylib -r-xr-xr-x 1 root wheel 1546048 Jan 11 17:19 Database.dylib -r-xr-xr-x 1 root wheel 1118192 Jan 11 17:19 DiagnosticAgent -r-xr-xr-x 1 root wheel 1643968 Jan 11 17:19 DynamicGroups.dylib -r-xr-xr-x 1 root wheel 872416 Jan 11 17:19 ERAAgent -r-xr-xr-x 1 root wheel 4740656 Jan 11 17:19 ERAG1ClientConnector.dylib -r-xr-xr-x 1 root wheel 2608144 Jan 11 17:19 ESSConnector.dylib -r-xr-xr-x 1 root wheel 2462288 Jan 11 17:19 Kernel.dylib -r-xr-xr-x 1 root wheel 3719296 Jan 11 17:19 Network.dylib -r-xr-xr-x 1 root wheel 3267264 Jan 11 17:19 OSConnector.dylib -r-xr-xr-x 1 root wheel 1632784 Jan 11 17:19 Policies.dylib -r-xr-xr-x 1 root wheel 10263328 Jan 11 17:19 Protobuf.dylib -r-xr-xr-x 1 root wheel 2041376 Jan 11 17:19 ProxyConnector.dylib -r-xr-xr-x 1 root wheel 2071456 Jan 11 17:19 RDSensorConnector.dylib -r-xr-xr-x 1 root wheel 2555728 Jan 11 17:19 Replication.dylib -r-xr-xr-x 1 root wheel 1799472 Jan 11 17:19 Scheduler.dylib -r-xr-xr-x 1 root wheel 1820336 Jan 11 17:19 Security.dylib -r-xr-xr-x 1 root wheel 4847120 Jan 11 17:19 ServerApi.dylib -r-xr-xr-x 1 root wheel 1918336 Jan 11 17:19 Symbols.dylib -r-xr-xr-x 1 root wheel 1420416 Jan 11 17:19 Updates.dylib -r--r--r-- 1 root wheel 477120 Jan 11 17:19 updater.dylib AmnonMB:~ itadmin$ sw_vers ProductName: Mac OS X ProductVersion: 10.10.5 BuildVersion: 14F1713 AmnonMB:~ itadmin$ Similar issue also happens on ProductName: Mac OS X ProductVersion: 10.11.4 BuildVersion: 15E65 Edited June 28, 2016 by avielc Link to comment Share on other sites More sharing options...
avielc 56 Posted June 28, 2016 Author Share Posted June 28, 2016 (edited) Looks like i will need to install xcode on those machines. That could be very troublesome for the users. is there any chance to do it in another way? do i need to change any permissions there? what do they need to be? (from what i saw on a working mac the permissions look the same Edited June 28, 2016 by avielc Link to comment Share on other sites More sharing options...
avielc 56 Posted June 28, 2016 Author Share Posted June 28, 2016 *updated* Link to comment Share on other sites More sharing options...
ESET Staff MartinK 383 Posted June 28, 2016 ESET Staff Share Posted June 28, 2016 Permissions seems to be set properly. Please try to run AGENT manually, but this time from directory where it is installed: sudo cd "/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/" sudo ./ERAAgent Are there any system configuration differences in comparison with other Mac computers? Especially security configuration, and maybe also applications that may interfere - for example some kind of security applications? To be honest, we have not seen nor received reports with such an error to this time. Link to comment Share on other sites More sharing options...
avielc 56 Posted June 28, 2016 Author Share Posted June 28, 2016 I know Martin. I haven't seen such error as well. I tried running it Using the full path. And it doesn't want to work still. Any information I can find on some logs perhaps? There is only 1 kind of security on these computers. And that's the vault encryption by Apple (built in encryption. Much like bitlocker for Windows.) That's as far as I can tell. What else do you suggest we can do? Link to comment Share on other sites More sharing options...
avielc 56 Posted June 28, 2016 Author Share Posted June 28, 2016 Last login: Tue Jun 28 11:36:46 on ttys000 patma:~ pat.ma$ patma:~ pat.ma$ sudo cd "/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/" Password: patma:~ pat.ma$ pwd /Users/pat.ma patma:~ pat.ma$ sudo cd "/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/" patma:~ pat.ma$ patma:~ pat.ma$ cd /Applications/ESET\ Remote\ Administrator\ Agent.app/Contents/MacOS/ patma:MacOS pat.ma$ pwd /Applications/ESET Remote Administrator Agent.app/Contents/MacOS patma:MacOS pat.ma$ sudo ./ERAAgent Loading kernel Loading ESET modules from /Library/Application Support/com.eset.remoteadministrator.agent//Modules/ Logging to directory /Library/Application Support/com.eset.remoteadministrator.agent//Logs/ Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/EVSAConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/EVSAConnector.dylib, 9): image not found Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/ESLCConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/ESLCConnector.dylib, 9): image not found Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/MDMCoreConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/MDMCoreConnector.dylib, 9): image not found Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/VAHCoreConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/VAHCoreConnector.dylib, 9): image not found Running ... (Press ctrl+c to stop) This is the latest when the user was running it. perhaps something to do with the permission my user was running it? Link to comment Share on other sites More sharing options...
ESET Staff MartinK 383 Posted June 28, 2016 ESET Staff Share Posted June 28, 2016 This is the latest when the user was running it. perhaps something to do with the permission my user was running it? Latest log indicates that AGENT is running and most probably connecting to your SERVER -> there does not seems to be any principal problem and we have to find out why AGENT was not running as daemon. Stop manually started AGENT if you have not done that already. After that, check what is status of AGENT daemon: sudo launchctl list | grep eset You may also try to manually start AGENT's daemon using: sudo launchctl start com.eset.remoteadministrator.agent and check it's status after time either using previous list command or by checking whether ERAAgent process is running (pgrep ERAAgent). In case AGENT won't be running, check it's trace logs and status.html located in /Library/Application Support/com.eset.remoteadministrator.agent/Logs/. Link to comment Share on other sites More sharing options...
avielc 56 Posted June 29, 2016 Author Share Posted June 29, 2016 From what i see i get the following error in the trace `2016-06-29 09:25:49 Error: CReplicationModule [Thread 0xb0c41000]: CReplicationManager: Replication (network) connection to 'host: "DC2.HQ.LeadSpace.com" port: 2222' failed with: Unable to resolve any endpoints.resolve: Host not found (authoritative)` aside of that i can see the agent is running on the computer. (turns out it did. still don't understand why i don't see it in the web console. Link to comment Share on other sites More sharing options...
ESET Staff MartinK 383 Posted June 29, 2016 ESET Staff Share Posted June 29, 2016 From what i see i get the following error in the trace `2016-06-29 09:25:49 Error: CReplicationModule [Thread 0xb0c41000]: CReplicationManager: Replication (network) connection to 'host: "DC2.HQ.LeadSpace.com" port: 2222' failed with: Unable to resolve any endpoints.resolve: Host not found (authoritative)` aside of that i can see the agent is running on the computer. (turns out it did. still don't understand why i don't see it in the web console. Seems it is not able to resolve your SERVER's hostname to IP address. Could you try to ping/nslookup this hostname manualy and verify results? Link to comment Share on other sites More sharing options...
avielc 56 Posted June 29, 2016 Author Share Posted June 29, 2016 yep, it doesn't find the server by name, only by IP i'm trying to figure out the commands and dns check for the mac (very odd that it happens as all computers supposed to be configured the same) Link to comment Share on other sites More sharing options...
ESET Staff MartinK 383 Posted June 29, 2016 ESET Staff Share Posted June 29, 2016 yep, it doesn't find the server by name, only by IP i'm trying to figure out the commands and dns check for the mac (very odd that it happens as all computers supposed to be configured the same) Adding entry to /etc/hosts may be used as temporary workaround. You may also repair AGENT installation so that it will be connecting to IP address instead of hostname, but only in case your SERVER's certificate "host" field is ready for this, otherwise AGENT will reject connection during TLS handshake. Link to comment Share on other sites More sharing options...
avielc 56 Posted June 29, 2016 Author Share Posted June 29, 2016 So adding to /etc/host solved it although i am uncertain why the computer didn't get the dns record from the domain name servers. but that's a different issue i'll have to resolve in another place Thanks Martin! i'm going to see if the other computer has the same issue as this one regarding the dns record. (that will happen in about 5-7 hours from now.) Link to comment Share on other sites More sharing options...
avielc 56 Posted June 29, 2016 Author Share Posted June 29, 2016 HI Martin A different issue with a different Mac running the file using Root i get the following error SherrodMBA:MacOS root# ./ERAAgent Loading kernel Loading ESET modules from /Library/Application Support/com.eset.remoteadministrator.agent//Modules/ Logging to directory /Library/Application Support/com.eset.remoteadministrator.agent//Logs/ Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/EVSAConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/EVSAConnector.dylib, 9): image not found Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/ESLCConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/ESLCConnector.dylib, 9): image not found Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/MDMCoreConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/MDMCoreConnector.dylib, 9): image not found Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/VAHCoreConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/VAHCoreConnector.dylib, 9): image not found libc++abi.dylib: terminating with uncaught exception of type std::runtime_error: ~CLogMassWriter: You must stop before destructing it Created mini-dump: /Library/Application Support/com.eset.remoteadministrator.agent//Dumps//88352590-A95A-4651-9202-99812957E1A1.dmp SherrodMBA:MacOS root# Any ideas? All the files seems to be in the right permission level of Root/Wheel. Thanks Link to comment Share on other sites More sharing options...
avielc 56 Posted June 29, 2016 Author Share Posted June 29, 2016 (edited) Actually issue with the same mac is also on the table. No idea why patmamba:MacOS root# ./ERAAgentLoading kernel Loading ESET modules from /Library/Application Support/com.eset.remoteadministrator.agent//Modules/ Logging to directory /Library/Application Support/com.eset.remoteadministrator.agent//Logs/ Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/EVSAConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/EVSAConnector.dylib, 9): image not found Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/ESLCConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/ESLCConnector.dylib, 9): image not found Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/MDMCoreConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/MDMCoreConnector.dylib, 9): image not found Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/VAHCoreConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/VAHCoreConnector.dylib, 9): image not found libc++abi.dylib: terminating with uncaught exception of type std::runtime_error: ~CLogMassWriter: You must stop before destructing it Created mini-dump: /Library/Application Support/com.eset.remoteadministrator.agent//Dumps//2868BFD4-23FE-4B9E-8FF3-47E53EFC9AFC.dmp Edited June 29, 2016 by avielc Link to comment Share on other sites More sharing options...
ESET Staff MartinK 383 Posted June 29, 2016 ESET Staff Share Posted June 29, 2016 Are you sure there was no other ERAAgent process running when you started this one? Multiple running instances may be reason of previous and also this strange errorc causing premature stop or crash. There may be also more relevant information in trace.log. Link to comment Share on other sites More sharing options...
avielc 56 Posted June 29, 2016 Author Share Posted June 29, 2016 I looked up the log, it's not updated to the latest moment, only a while back This is what i get with launchctl, but i see no reports back on web console patmamba:MacOS root# launchctl list | grep eset - 5 com.eset.remoteadministrator.agent 52 0 com.eset.esets_daemon patmamba:MacOS root# pgrep returns the following patmamba:MacOS root# pgrep ERAAgent 1467 patmamba:MacOS root# kill 1467 -sh: kill: (1467) - No such process patmamba:MacOS root# pgrep ERAAgent patmamba:MacOS root# pgrep ERAAgent 1471 patmamba:MacOS root# pgrep ERAAgent patmamba:MacOS root# pgrep ERAAgent patmamba:MacOS root# which looks like it starts and stops all the time. launchctl stop doesn't seem to be effective (i still get the same window as the one on top. trace shows the following 2016-06-29 17:13:38 Warning: Kernel [Thread 0xa356a000]: Module library +EVSAConnector was not loaded 2016-06-29 17:13:38 Information: Kernel [Thread 0xa356a000]: Loading module library +ESLCConnector 2016-06-29 17:13:38 Warning: Kernel [Thread 0xa356a000]: Module library +ESLCConnector was not loaded 2016-06-29 17:13:38 Information: Kernel [Thread 0xa356a000]: Loading module library +ERAG1ClientConnector 2016-06-29 17:13:39 Information: Kernel [Thread 0xa356a000]: Loaded module library +ERAG1ClientConnector (used 900 KB) 2016-06-29 17:13:39 Information: Kernel [Thread 0xa356a000]: Loading module library +MDMCoreConnector 2016-06-29 17:13:39 Warning: Kernel [Thread 0xa356a000]: Module library +MDMCoreConnector was not loaded 2016-06-29 17:13:39 Information: Kernel [Thread 0xa356a000]: Loading module library +VAHCoreConnector 2016-06-29 17:13:39 Warning: Kernel [Thread 0xa356a000]: Module library +VAHCoreConnector was not loaded 2016-06-29 17:13:39 Information: Kernel [Thread 0xa356a000]: Loading module library +ProxyConnector 2016-06-29 17:13:39 Information: Kernel [Thread 0xa356a000]: Loaded module library +ProxyConnector (used 420 KB) 2016-06-29 17:13:39 Information: Kernel [Thread 0xa356a000]: Loading module library +RDSensorConnector 2016-06-29 17:13:39 Information: Kernel [Thread 0xa356a000]: Loaded module library +RDSensorConnector (used 448 KB) 2016-06-29 17:13:39 Information: Kernel [Thread 0xa356a000]: Used memory before modules load and initialization is 26080 KB 2016-06-29 17:13:39 Information: Kernel [Thread 0xa356a000]: Initializing module CUpdatesModule 2016-06-29 17:13:39 Information: Kernel [Thread 0xa356a000]: Initialized module CUpdatesModule (used 136 KB) 2016-06-29 17:13:39 Information: Kernel [Thread 0xa356a000]: Initializing module CSymbolsModule 2016-06-29 17:13:39 Information: Kernel [Thread 0xa356a000]: Initialized module CSymbolsModule (used 860 KB) 2016-06-29 17:13:39 Information: Kernel [Thread 0xa356a000]: Initializing module CDatabaseModule 2016-06-29 17:13:39 Information: CDatabaseModule [Thread 0xa356a000]: Startup configuration builder builds successfully ... Link to comment Share on other sites More sharing options...
avielc 56 Posted June 29, 2016 Author Share Posted June 29, 2016 libc++abi.dylib: terminating with uncaught exception of type std::runtime_error: ~CLogMassWriter: You must stop before destructing it This line looks somewhat suspicious, i think that's what crashing the others, yet, i can't tell what's causing it. Link to comment Share on other sites More sharing options...
ESET Staff MartinK 383 Posted June 29, 2016 ESET Staff Share Posted June 29, 2016 Daemon is automatically restarting in case it is stopped - even in case stop is requested by user. Seems it is crashing during initialization of AGENT's database, but hard to tell why - maybe we corrupted it by previous attempts.... There is a chance we will see more with enabled full trace logging of AGENT by creating dummy file: sudo touch "/Library/Application Support/com.eset.remoteadministrator.agent/Logs/traceAll" Please provide trace.log output after AGENT is restarted. Link to comment Share on other sites More sharing options...
avielc 56 Posted June 30, 2016 Author Share Posted June 30, 2016 (edited) I tried, it provided the same log patmamba:MacOS itadmin$ sudo ./ERAAgent Loading kernel Loading ESET modules from /Library/Application Support/com.eset.remoteadministrator.agent//Modules/ Logging to directory /Library/Application Support/com.eset.remoteadministrator.agent//Logs/ Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/EVSAConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/EVSAConnector.dylib, 9): image not found Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/ESLCConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/ESLCConnector.dylib, 9): image not found Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/MDMCoreConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/MDMCoreConnector.dylib, 9): image not found Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/VAHCoreConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/VAHCoreConnector.dylib, 9): image not found libc++abi.dylib: terminating with uncaught exception of type std::runtime_error: ~CLogMassWriter: You must stop before destructing it Created mini-dump: /Library/Application Support/com.eset.remoteadministrator.agent//Dumps//D9BEB2A8-EA48-4C76-BBF3-20F60A65F463.dmp patmamba:MacOS itadmin$ tail -100 /Library/Application\ Support/com.eset.remoteadministrator.agent/Logs/trace.log 2016-06-30 14:54:38 Information: Kernel [Thread 0xa356a000]: Loaded module library Cleanup (used 288 KB) 2016-06-30 14:54:38 Information: Kernel [Thread 0xa356a000]: Loading module library DataMiners 2016-06-30 14:54:38 Information: Kernel [Thread 0xa356a000]: Loaded module library DataMiners (used 524 KB) 2016-06-30 14:54:38 Information: Kernel [Thread 0xa356a000]: Loading module library DynamicGroups 2016-06-30 14:54:38 Information: Kernel [Thread 0xa356a000]: Loaded module library DynamicGroups (used 312 KB) 2016-06-30 14:54:38 Information: Kernel [Thread 0xa356a000]: Loading module library Replication 2016-06-30 14:54:38 Information: Kernel [Thread 0xa356a000]: Loaded module library Replication (used 696 KB) 2016-06-30 14:54:38 Information: Kernel [Thread 0xa356a000]: Loading module library Automation 2016-06-30 14:54:38 Information: Kernel [Thread 0xa356a000]: Loaded module library Automation (used 568 KB) 2016-06-30 14:54:38 Information: Kernel [Thread 0xa356a000]: Loading module library Policies 2016-06-30 14:54:38 Information: Kernel [Thread 0xa356a000]: Loaded module library Policies (used 340 KB) 2016-06-30 14:54:38 Information: Kernel [Thread 0xa356a000]: Loading module library OSConnector 2016-06-30 14:54:38 Information: Kernel [Thread 0xa356a000]: Loaded module library OSConnector (used 644 KB) 2016-06-30 14:54:38 Information: Kernel [Thread 0xa356a000]: Loading module library ESSConnector 2016-06-30 14:54:38 Information: Kernel [Thread 0xa356a000]: Loaded module library ESSConnector (used 696 KB) 2016-06-30 14:54:38 Information: Kernel [Thread 0xa356a000]: Loading module library +EVSAConnector 2016-06-30 14:54:38 Warning: Kernel [Thread 0xa356a000]: Module library +EVSAConnector was not loaded 2016-06-30 14:54:38 Information: Kernel [Thread 0xa356a000]: Loading module library +ESLCConnector 2016-06-30 14:54:38 Warning: Kernel [Thread 0xa356a000]: Module library +ESLCConnector was not loaded 2016-06-30 14:54:38 Information: Kernel [Thread 0xa356a000]: Loading module library +ERAG1ClientConnector 2016-06-30 14:54:39 Information: Kernel [Thread 0xa356a000]: Loaded module library +ERAG1ClientConnector (used 960 KB) 2016-06-30 14:54:39 Information: Kernel [Thread 0xa356a000]: Loading module library +MDMCoreConnector 2016-06-30 14:54:39 Warning: Kernel [Thread 0xa356a000]: Module library +MDMCoreConnector was not loaded 2016-06-30 14:54:39 Information: Kernel [Thread 0xa356a000]: Loading module library +VAHCoreConnector 2016-06-30 14:54:39 Warning: Kernel [Thread 0xa356a000]: Module library +VAHCoreConnector was not loaded 2016-06-30 14:54:39 Information: Kernel [Thread 0xa356a000]: Loading module library +ProxyConnector 2016-06-30 14:54:39 Information: Kernel [Thread 0xa356a000]: Loaded module library +ProxyConnector (used 424 KB) 2016-06-30 14:54:39 Information: Kernel [Thread 0xa356a000]: Loading module library +RDSensorConnector 2016-06-30 14:54:39 Information: Kernel [Thread 0xa356a000]: Loaded module library +RDSensorConnector (used 452 KB) 2016-06-30 14:54:39 Information: Kernel [Thread 0xa356a000]: Used memory before modules load and initialization is 25972 KB 2016-06-30 14:54:39 Information: Kernel [Thread 0xa356a000]: Initializing module CUpdatesModule 2016-06-30 14:54:39 Information: Kernel [Thread 0xa356a000]: Initialized module CUpdatesModule (used 136 KB) 2016-06-30 14:54:39 Information: Kernel [Thread 0xa356a000]: Initializing module CSymbolsModule 2016-06-30 14:54:39 Information: Kernel [Thread 0xa356a000]: Initialized module CSymbolsModule (used 988 KB) 2016-06-30 14:54:39 Information: Kernel [Thread 0xa356a000]: Initializing module CDatabaseModule 2016-06-30 14:54:39 Information: CDatabaseModule [Thread 0xa356a000]: Startup configuration builder builds successfully ... 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: Local time is 2016-06-30 07:59:19 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: InstallConfiguration: ProductLine: era 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: InstallConfiguration: ProductVersion: 6.3.110.0 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: InstallConfiguration: Locale: en_US 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: InstallConfiguration: ProductInstanceID: 00dfe884-71c6-4006-87d6-6dfcdc43daf1 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: InstallConfiguration: ProgramDataDirectory: /Library/Application Support/com.eset.remoteadministrator.agent// 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: InstallConfiguration: ProductConfigurationDirectory: /Library/Application Support/com.eset.remoteadministrator.agent/ 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: InstallConfiguration: ProgramLogsDirectory: /Library/Application Support/com.eset.remoteadministrator.agent//Logs/ 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: InstallConfiguration: TempDirectory: /tmp/ 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: InstallConfiguration: ProgramLibraryDirectory: /Applications/ESET Remote Administrator Agent.app//Contents/MacOS/ 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: InstallConfiguration: ProgramEsetUpdatableModulesDirectory: /Library/Application Support/com.eset.remoteadministrator.agent//Modules/ 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: InstallConfiguration: CrashDumpsDirectory: /Library/Application Support/com.eset.remoteadministrator.agent//Dumps/ 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: Hardware Fingerprint: 010001E4-1433-5C0A-8B23-C137CB46DE78 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: Loaded ESET modules: 1=1064,2=1472,18=1500,40=1277.6 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: Used memory before loaded module libraries is 17440 KB 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: Loading module library Updates 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: Loaded module library Updates (used 404 KB) 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: Loading module library Symbols 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: Loaded module library Symbols (used 412 KB) 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: Loading module library Database 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: Loaded module library Database (used 404 KB) 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: Loading module library Security 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: Loaded module library Security (used 440 KB) 2016-06-30 14:59:19 Information: Kernel [Thread 0xa356a000]: Loading module library Scheduler 2016-06-30 14:59:20 Information: Kernel [Thread 0xa356a000]: Loaded module library Scheduler (used 360 KB) 2016-06-30 14:59:20 Information: Kernel [Thread 0xa356a000]: Loading module library Network 2016-06-30 14:59:20 Information: Kernel [Thread 0xa356a000]: Loaded module library Network (used 848 KB) 2016-06-30 14:59:20 Information: Kernel [Thread 0xa356a000]: Loading module library Cleanup 2016-06-30 14:59:20 Information: Kernel [Thread 0xa356a000]: Loaded module library Cleanup (used 320 KB) 2016-06-30 14:59:20 Information: Kernel [Thread 0xa356a000]: Loading module library DataMiners 2016-06-30 14:59:20 Information: Kernel [Thread 0xa356a000]: Loaded module library DataMiners (used 520 KB) 2016-06-30 14:59:20 Information: Kernel [Thread 0xa356a000]: Loading module library DynamicGroups 2016-06-30 14:59:20 Information: Kernel [Thread 0xa356a000]: Loaded module library DynamicGroups (used 312 KB) 2016-06-30 14:59:20 Information: Kernel [Thread 0xa356a000]: Loading module library Replication 2016-06-30 14:59:20 Information: Kernel [Thread 0xa356a000]: Loaded module library Replication (used 680 KB) 2016-06-30 14:59:20 Information: Kernel [Thread 0xa356a000]: Loading module library Automation 2016-06-30 14:59:20 Information: Kernel [Thread 0xa356a000]: Loaded module library Automation (used 568 KB) 2016-06-30 14:59:20 Information: Kernel [Thread 0xa356a000]: Loading module library Policies 2016-06-30 14:59:20 Information: Kernel [Thread 0xa356a000]: Loaded module library Policies (used 340 KB) 2016-06-30 14:59:20 Information: Kernel [Thread 0xa356a000]: Loading module library OSConnector 2016-06-30 14:59:20 Information: Kernel [Thread 0xa356a000]: Loaded module library OSConnector (used 644 KB) 2016-06-30 14:59:20 Information: Kernel [Thread 0xa356a000]: Loading module library ESSConnector 2016-06-30 14:59:21 Information: Kernel [Thread 0xa356a000]: Loaded module library ESSConnector (used 700 KB) 2016-06-30 14:59:21 Information: Kernel [Thread 0xa356a000]: Loading module library +EVSAConnector 2016-06-30 14:59:21 Warning: Kernel [Thread 0xa356a000]: Module library +EVSAConnector was not loaded 2016-06-30 14:59:21 Information: Kernel [Thread 0xa356a000]: Loading module library +ESLCConnector 2016-06-30 14:59:21 Warning: Kernel [Thread 0xa356a000]: Module library +ESLCConnector was not loaded 2016-06-30 14:59:21 Information: Kernel [Thread 0xa356a000]: Loading module library +ERAG1ClientConnector 2016-06-30 14:59:21 Information: Kernel [Thread 0xa356a000]: Loaded module library +ERAG1ClientConnector (used 916 KB) 2016-06-30 14:59:21 Information: Kernel [Thread 0xa356a000]: Loading module library +MDMCoreConnector 2016-06-30 14:59:21 Warning: Kernel [Thread 0xa356a000]: Module library +MDMCoreConnector was not loaded 2016-06-30 14:59:21 Information: Kernel [Thread 0xa356a000]: Loading module library +VAHCoreConnector 2016-06-30 14:59:21 Warning: Kernel [Thread 0xa356a000]: Module library +VAHCoreConnector was not loaded 2016-06-30 14:59:21 Information: Kernel [Thread 0xa356a000]: Loading module library +ProxyConnector 2016-06-30 14:59:21 Information: Kernel [Thread 0xa356a000]: Loaded module library +ProxyConnector (used 420 KB) 2016-06-30 14:59:21 Information: Kernel [Thread 0xa356a000]: Loading module library +RDSensorConnector 2016-06-30 14:59:21 Information: Kernel [Thread 0xa356a000]: Loaded module library +RDSensorConnector (used 448 KB) 2016-06-30 14:59:21 Information: Kernel [Thread 0xa356a000]: Used memory before modules load and initialization is 26208 KB 2016-06-30 14:59:21 Information: Kernel [Thread 0xa356a000]: Initializing module CUpdatesModule 2016-06-30 14:59:21 Information: Kernel [Thread 0xa356a000]: Initialized module CUpdatesModule (used 136 KB) 2016-06-30 14:59:21 Information: Kernel [Thread 0xa356a000]: Initializing module CSymbolsModule 2016-06-30 14:59:21 Information: Kernel [Thread 0xa356a000]: Initialized module CSymbolsModule (used 900 KB) 2016-06-30 14:59:21 Information: Kernel [Thread 0xa356a000]: Initializing module CDatabaseModule 2016-06-30 14:59:21 Information: CDatabaseModule [Thread 0xa356a000]: Startup configuration builder builds successfully ... patmamba:MacOS itadmin$ Also, i have under launchctl the process is always shown without a PID as it it never actually starts. trace doesn't show anything new unless i'm looking in the wrong place Second computer : SherrodMBA:~ itadmin$ cd /Applications/ESET\ Remote\ Administrator\ Agent.app/Contents/MacOS/ SherrodMBA:MacOS itadmin$ sudo ./ERAAgent Loading kernel Loading ESET modules from /Library/Application Support/com.eset.remoteadministrator.agent//Modules/ Logging to directory /Library/Application Support/com.eset.remoteadministrator.agent//Logs/ Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/EVSAConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/EVSAConnector.dylib, 9): image not found Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/ESLCConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/ESLCConnector.dylib, 9): image not found Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/MDMCoreConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/MDMCoreConnector.dylib, 9): image not found Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/VAHCoreConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/VAHCoreConnector.dylib, 9): image not found libc++abi.dylib: terminating with uncaught exception of type std::runtime_error: ~CLogMassWriter: You must stop before destructing it Created mini-dump: /Library/Application Support/com.eset.remoteadministrator.agent//Dumps//560E5E59-B7F9-453F-9CFF-C86987B6C2CA.dmp SherrodMBA:MacOS itadmin$ tail -100 /Library/Application\ Support/com.eset.remoteadministrator.agent/ Dumps/ Modules/ config.cfg data.db-journal Logs/ _tmp_db_scripts/ data.db updates/ SherrodMBA:MacOS itadmin$ tail -100 /Library/Application\ Support/com.eset.remoteadministrator.agent/Logs/ last-error.html trace.log.0.gz trace.log.11.gz trace.log.4.gz trace.log.7.gz traceAll status.html trace.log.1.gz trace.log.2.gz trace.log.5.gz trace.log.8.gz trace.log trace.log.10.gz trace.log.3.gz trace.log.6.gz trace.log.9.gz SherrodMBA:MacOS itadmin$ tail -100 /Library/Application\ Support/com.eset.remoteadministrator.agent/Logs/ last-error.html trace.log.0.gz trace.log.11.gz trace.log.4.gz trace.log.7.gz traceAll status.html trace.log.1.gz trace.log.2.gz trace.log.5.gz trace.log.8.gz trace.log trace.log.10.gz trace.log.3.gz trace.log.6.gz trace.log.9.gz SherrodMBA:MacOS itadmin$ tail -100 /Library/Application\ Support/com.eset.remoteadministrator.agent/Logs/trace.log 2016-06-29 17:18:54 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library Cleanup (used 340 KB) 2016-06-29 17:18:54 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library DataMiners 2016-06-29 17:18:54 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library DataMiners (used 520 KB) 2016-06-29 17:18:54 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library DynamicGroups 2016-06-29 17:18:55 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library DynamicGroups (used 324 KB) 2016-06-29 17:18:55 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library Replication 2016-06-29 17:18:55 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library Replication (used 676 KB) 2016-06-29 17:18:55 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library Automation 2016-06-29 17:18:55 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library Automation (used 644 KB) 2016-06-29 17:18:55 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library Policies 2016-06-29 17:18:55 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library Policies (used 340 KB) 2016-06-29 17:18:55 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library OSConnector 2016-06-29 17:18:55 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library OSConnector (used 644 KB) 2016-06-29 17:18:55 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library ESSConnector 2016-06-29 17:18:56 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library ESSConnector (used 736 KB) 2016-06-29 17:18:56 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library +EVSAConnector 2016-06-29 17:18:56 Warning: Kernel [Thread 0xa0bbb1d4]: Module library +EVSAConnector was not loaded 2016-06-29 17:18:56 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library +ESLCConnector 2016-06-29 17:18:56 Warning: Kernel [Thread 0xa0bbb1d4]: Module library +ESLCConnector was not loaded 2016-06-29 17:18:56 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library +ERAG1ClientConnector 2016-06-29 17:18:56 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library +ERAG1ClientConnector (used 888 KB) 2016-06-29 17:18:56 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library +MDMCoreConnector 2016-06-29 17:18:56 Warning: Kernel [Thread 0xa0bbb1d4]: Module library +MDMCoreConnector was not loaded 2016-06-29 17:18:56 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library +VAHCoreConnector 2016-06-29 17:18:56 Warning: Kernel [Thread 0xa0bbb1d4]: Module library +VAHCoreConnector was not loaded 2016-06-29 17:18:56 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library +ProxyConnector 2016-06-29 17:18:56 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library +ProxyConnector (used 420 KB) 2016-06-29 17:18:56 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library +RDSensorConnector 2016-06-29 17:18:56 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library +RDSensorConnector (used 448 KB) 2016-06-29 17:18:56 Information: Kernel [Thread 0xa0bbb1d4]: Used memory before modules load and initialization is 25168 KB 2016-06-29 17:18:56 Information: Kernel [Thread 0xa0bbb1d4]: Initializing module CUpdatesModule 2016-06-29 17:18:56 Information: Kernel [Thread 0xa0bbb1d4]: Initialized module CUpdatesModule (used 136 KB) 2016-06-29 17:18:56 Information: Kernel [Thread 0xa0bbb1d4]: Initializing module CSymbolsModule 2016-06-29 17:18:56 Information: Kernel [Thread 0xa0bbb1d4]: Initialized module CSymbolsModule (used 812 KB) 2016-06-29 17:18:56 Information: Kernel [Thread 0xa0bbb1d4]: Initializing module CDatabaseModule 2016-06-29 17:18:56 Information: CDatabaseModule [Thread 0xa0bbb1d4]: Startup configuration builder builds successfully ... 2016-06-30 16:21:21 Information: Kernel [Thread 0xa0bbb1d4]: Local time is 2016-06-30 09:21:21 2016-06-30 16:21:21 Information: Kernel [Thread 0xa0bbb1d4]: InstallConfiguration: ProductLine: era 2016-06-30 16:21:21 Information: Kernel [Thread 0xa0bbb1d4]: InstallConfiguration: ProductVersion: 6.3.110.0 2016-06-30 16:21:21 Information: Kernel [Thread 0xa0bbb1d4]: InstallConfiguration: Locale: en_US 2016-06-30 16:21:21 Information: Kernel [Thread 0xa0bbb1d4]: InstallConfiguration: ProductInstanceID: 8052728e-8daa-4220-b6c4-49a05fc64ff9 2016-06-30 16:21:21 Information: Kernel [Thread 0xa0bbb1d4]: InstallConfiguration: ProgramDataDirectory: /Library/Application Support/com.eset.remoteadministrator.agent// 2016-06-30 16:21:21 Information: Kernel [Thread 0xa0bbb1d4]: InstallConfiguration: ProductConfigurationDirectory: /Library/Application Support/com.eset.remoteadministrator.agent/ 2016-06-30 16:21:21 Information: Kernel [Thread 0xa0bbb1d4]: InstallConfiguration: ProgramLogsDirectory: /Library/Application Support/com.eset.remoteadministrator.agent//Logs/ 2016-06-30 16:21:21 Information: Kernel [Thread 0xa0bbb1d4]: InstallConfiguration: TempDirectory: /tmp/ 2016-06-30 16:21:21 Information: Kernel [Thread 0xa0bbb1d4]: InstallConfiguration: ProgramLibraryDirectory: /Applications/ESET Remote Administrator Agent.app//Contents/MacOS/ 2016-06-30 16:21:21 Information: Kernel [Thread 0xa0bbb1d4]: InstallConfiguration: ProgramEsetUpdatableModulesDirectory: /Library/Application Support/com.eset.remoteadministrator.agent//Modules/ 2016-06-30 16:21:21 Information: Kernel [Thread 0xa0bbb1d4]: InstallConfiguration: CrashDumpsDirectory: /Library/Application Support/com.eset.remoteadministrator.agent//Dumps/ 2016-06-30 16:21:21 Information: Kernel [Thread 0xa0bbb1d4]: Hardware Fingerprint: 0100E59F-BAC2-EA8A-DF72-C0465A29D108 2016-06-30 16:21:21 Information: Kernel [Thread 0xa0bbb1d4]: Loaded ESET modules: 1=1060,2=1472,18=1434,40=1238B 2016-06-30 16:21:21 Information: Kernel [Thread 0xa0bbb1d4]: Used memory before loaded module libraries is 16188 KB 2016-06-30 16:21:21 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library Updates 2016-06-30 16:21:22 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library Updates (used 476 KB) 2016-06-30 16:21:22 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library Symbols 2016-06-30 16:21:22 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library Symbols (used 288 KB) 2016-06-30 16:21:22 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library Database 2016-06-30 16:21:22 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library Database (used 468 KB) 2016-06-30 16:21:22 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library Security 2016-06-30 16:21:22 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library Security (used 524 KB) 2016-06-30 16:21:22 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library Scheduler 2016-06-30 16:21:22 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library Scheduler (used 352 KB) 2016-06-30 16:21:22 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library Network 2016-06-30 16:21:23 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library Network (used 924 KB) 2016-06-30 16:21:23 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library Cleanup 2016-06-30 16:21:23 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library Cleanup (used 320 KB) 2016-06-30 16:21:23 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library DataMiners 2016-06-30 16:21:23 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library DataMiners (used 544 KB) 2016-06-30 16:21:23 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library DynamicGroups 2016-06-30 16:21:23 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library DynamicGroups (used 336 KB) 2016-06-30 16:21:23 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library Replication 2016-06-30 16:21:24 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library Replication (used 676 KB) 2016-06-30 16:21:24 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library Automation 2016-06-30 16:21:24 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library Automation (used 564 KB) 2016-06-30 16:21:24 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library Policies 2016-06-30 16:21:24 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library Policies (used 372 KB) 2016-06-30 16:21:24 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library OSConnector 2016-06-30 16:21:24 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library OSConnector (used 644 KB) 2016-06-30 16:21:24 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library ESSConnector 2016-06-30 16:21:24 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library ESSConnector (used 780 KB) 2016-06-30 16:21:24 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library +EVSAConnector 2016-06-30 16:21:24 Warning: Kernel [Thread 0xa0bbb1d4]: Module library +EVSAConnector was not loaded 2016-06-30 16:21:24 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library +ESLCConnector 2016-06-30 16:21:24 Warning: Kernel [Thread 0xa0bbb1d4]: Module library +ESLCConnector was not loaded 2016-06-30 16:21:24 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library +ERAG1ClientConnector 2016-06-30 16:21:25 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library +ERAG1ClientConnector (used 888 KB) 2016-06-30 16:21:25 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library +MDMCoreConnector 2016-06-30 16:21:25 Warning: Kernel [Thread 0xa0bbb1d4]: Module library +MDMCoreConnector was not loaded 2016-06-30 16:21:25 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library +VAHCoreConnector 2016-06-30 16:21:25 Warning: Kernel [Thread 0xa0bbb1d4]: Module library +VAHCoreConnector was not loaded 2016-06-30 16:21:25 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library +ProxyConnector 2016-06-30 16:21:25 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library +ProxyConnector (used 420 KB) 2016-06-30 16:21:25 Information: Kernel [Thread 0xa0bbb1d4]: Loading module library +RDSensorConnector 2016-06-30 16:21:25 Information: Kernel [Thread 0xa0bbb1d4]: Loaded module library +RDSensorConnector (used 456 KB) 2016-06-30 16:21:25 Information: Kernel [Thread 0xa0bbb1d4]: Used memory before modules load and initialization is 25252 KB 2016-06-30 16:21:25 Information: Kernel [Thread 0xa0bbb1d4]: Initializing module CUpdatesModule 2016-06-30 16:21:25 Information: Kernel [Thread 0xa0bbb1d4]: Initialized module CUpdatesModule (used 136 KB) 2016-06-30 16:21:25 Information: Kernel [Thread 0xa0bbb1d4]: Initializing module CSymbolsModule 2016-06-30 16:21:25 Information: Kernel [Thread 0xa0bbb1d4]: Initialized module CSymbolsModule (used 900 KB) 2016-06-30 16:21:25 Information: Kernel [Thread 0xa0bbb1d4]: Initializing module CDatabaseModule 2016-06-30 16:21:25 Information: CDatabaseModule [Thread 0xa0bbb1d4]: Startup configuration builder builds successfully ... Edited June 30, 2016 by avielc Link to comment Share on other sites More sharing options...
ESET Staff MartinK 383 Posted June 30, 2016 ESET Staff Share Posted June 30, 2016 Please send mi private message with few crash dumps that were created, for example this one: /Library/Application Support/com.eset.remoteadministrator.agent/Dumps//D9BEB2A8-EA48-4C76-BBF3-20F60A65F463.dmp so that I can check it tomorrow, maybe it will help us resolve this issue. From trace.log I can see that at least first AGENT worked previously, as It was able to update it's "updatable" modules from ESET servers. In the meantime I would suggest to re-install (uninstall + install) AGENT on one machine and check trace.log whether it gets further. There should be uninstallation script available in /Applications/ESET Remote Administrator Agent.app//Contents/Scripts/ or somewhere around (cannot verify now). For installation you may use remote installation task or live installers. Link to comment Share on other sites More sharing options...
avielc 56 Posted June 30, 2016 Author Share Posted June 30, 2016 Well, good news and bad news. Uninstalling and reinstalling worked for the 2 computers 1 computer just doesn't want to register and i can't seem to find a trace on why or what is the matter. pgrep ERAAgent returns the pid of the process (so its up) sudo launchctl also shows it AmnonMB:MacOS itadmin$ sudo launchctl list | grep eset sudo: cannot get working directory 15020 0 com.eset.remoteadministrator.agent - 2 com.eset.esets_daemon but nothing registers on the web console when i try to manually run it it gets stuck AmnonMB:~ itadmin$ cd /Applications/ESET\ Remote\ Administrator\ Agent.app/Contents/MacOS/ AmnonMB:MacOS itadmin$ sudo ./ERAAgent Loading kernel Loading ESET modules from /Library/Application Support/com.eset.remoteadministrator.agent//Modules/ Logging to directory /Library/Application Support/com.eset.remoteadministrator.agent//Logs/ Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/EVSAConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/EVSAConnector.dylib, 9): image not found Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/ESLCConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/ESLCConnector.dylib, 9): image not found Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/MDMCoreConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/MDMCoreConnector.dylib, 9): image not found Optional library was not loaded: /Applications/ESET Remote Administrator Agent.app/Contents/MacOS/VAHCoreConnector.dylib, error: dlopen(/Applications/ESET Remote Administrator Agent.app/Contents/MacOS/VAHCoreConnector.dylib, 9): image not found and tracelog shows the following (with traceAll as mentioned earlier) AmnonMB:MacOS itadmin$ tail -50 /Library/Application\ Support/com.eset.remoteadministrator.agent/Logs/trace.log 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Loading module library +ERAG1ClientConnector 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Loaded module library +ERAG1ClientConnector (used 884 KB) 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Loading module library +MDMCoreConnector 2016-06-30 17:20:38 Warning: Kernel [Thread 0xa11661d4]: Module library +MDMCoreConnector was not loaded 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Loading module library +VAHCoreConnector 2016-06-30 17:20:38 Warning: Kernel [Thread 0xa11661d4]: Module library +VAHCoreConnector was not loaded 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Loading module library +ProxyConnector 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Loaded module library +ProxyConnector (used 440 KB) 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Loading module library +RDSensorConnector 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Loaded module library +RDSensorConnector (used 448 KB) 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Used memory before modules load and initialization is 25460 KB 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initializing module CUpdatesModule 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initialized module CUpdatesModule (used 136 KB) 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initializing module CSymbolsModule 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initialized module CSymbolsModule (used 812 KB) 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initializing module CDatabaseModule 2016-06-30 17:20:38 Information: CDatabaseModule [Thread 0xa11661d4]: Startup configuration builder builds successfully ... 2016-06-30 17:20:38 Information: CDatabaseModule [Thread 0xa11661d4]: Startup connection pool created ... 2016-06-30 17:20:38 Information: CDatabaseModule [Thread 0xa11661d4]: Builder rebuilds successfully ... 2016-06-30 17:20:38 Information: CDatabaseModule [Thread 0xa11661d4]: Connection pool recreated ... 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initialized module CDatabaseModule (used 1800 KB) 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initializing module CAgentSecurityModule 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initialized module CAgentSecurityModule (used 272 KB) 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initializing module SchedulerModule 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initialized module SchedulerModule (used 112 KB) 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initializing module NetworkModule 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initialized module NetworkModule (used 48 KB) 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initializing module CCleanupModule 2016-06-30 17:20:38 Information: CCleanupModule [Thread 0xa11661d4]: Module initialized 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initialized module CCleanupModule (used 32 KB) 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initializing module CDataMinersModule 2016-06-30 17:20:38 Information: CDataMinersModule [Thread 0xa11661d4]: DataMinerCompletionHandler: Starting completion handler worker thread 2016-06-30 17:20:38 Information: CDataMinersModule [Thread 0xa11661d4]: DataMinerCompletionHandler: Starting completion handler worker thread 2016-06-30 17:20:38 Information: CDataMinersModule [Thread 0xa11661d4]: CStatusLogDataMiner: Initializing local status log cache 2016-06-30 17:20:38 Information: CDataMinersModule [Thread 0xa11661d4]: CStatusLogDataMiner: Finished initialization of status log cache 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initialized module CDataMinersModule (used 872 KB) 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initializing module CDynamicGroupsModule 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initialized module CDynamicGroupsModule (used 40 KB) 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initializing module CReplicationModule 2016-06-30 17:20:38 Information: CReplicationModule [Thread 0xa11661d4]: CReplicationModuleBase: Starting module initialization 2016-06-30 17:20:38 Information: CReplicationModule [Thread 0xa11661d4]: CReplicationModuleBase: Initializing message processing 2016-06-30 17:20:38 Information: CReplicationModule [Thread 0xa11661d4]: CReplicationModuleBase: Module initialization done 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initialized module CReplicationModule (used 180 KB) 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initializing module AutomationModule 2016-06-30 17:20:38 Information: AutomationModule [Thread 0xa11661d4]: TaskResumeHandler: There are 0 pending task resume requests. 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initialized module AutomationModule (used 224 KB) 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initializing module CPoliciesModule 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initialized module CPoliciesModule (used 116 KB) 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initializing module CSystemConnectorModule 2016-06-30 17:20:38 Information: Kernel [Thread 0xa11661d4]: Initialized module CSystemConnectorModule (used 48 KB) I'm done. Would you like me to do anything now? Link to comment Share on other sites More sharing options...
ESET Staff MartinK 383 Posted June 30, 2016 ESET Staff Share Posted June 30, 2016 I'm done. Would you like me to do anything now? Any chance it has recovered after some time? In case no, is there any activity visible in performance monitor for ERAAgent process? I would try to restart it (kill if necessary) if not tried already. Link to comment Share on other sites More sharing options...
avielc 56 Posted July 1, 2016 Author Share Posted July 1, 2016 I have tried to kill the process and restart it, either using "kill -8 PID" or "kill PID" or launchctl stop and start. from what i see the process looks to be up but nothing happens. i would point to one thing though, if starting the process manually doesn't show the "running press Ctrl+C to close" message. it might be stuck before it has completely loaded. question is, how can i find a log that tells me what's the cause of it? or perhaps you are aware of some reason a MacBook (yea, the 12" new ones) would freeze that task like that. didn't check performance monitor, but then again no log has shown why it hasn't fully loaded and such. and on another note, why does traceAll, doesn't seem to provide any extra information? Link to comment Share on other sites More sharing options...
Recommended Posts