single 2012r2 not reporting to console

Hello Ben@ryehills,

that's the Agent log, isn't it? What's in the Router log?

Christian

Hi QC,

Yes, that is the Agent log, Below is the Router log.

Most of the log is like below:

03.01.2019 12:22:49 0DB0 T Added host network address:(correct:clinet-ip):0
03.01.2019 12:22:49 0DB0 T Added host network address:127.0.0.1:0
03.01.2019 12:22:49 0DB0 T IPAddressSet::InitialiseWithHost() returns
03.01.2019 12:22:51 06A4 T GetterThread::Process() checking table

but the top part is:

03.01.2019 10:29:00 0E60 I SOF: C:\ProgramData/Sophos/Remote Management System/3/Router/Logs/Router-20190103-102900.log
03.01.2019 10:29:00 0E60 I Sophos Messaging Router 4.1.1.127 starting...
03.01.2019 10:29:00 0E60 I Setting ACE_FD_SETSIZE to 138
03.01.2019 10:29:00 0E60 I Initializing CORBA...
03.01.2019 10:29:00 0E60 I Connection cache limit is 10
03.01.2019 10:29:01 0E60 D New context options = 1000004
03.01.2019 10:29:01 0E60 I Router::ConfigureSslContext: keeping legacy compatibility of TLS 1 and TLS 1.1.
03.01.2019 10:29:01 0E60 T IPAddressSet::InitialiseWithHost() called
03.01.2019 10:29:01 0E60 T Added host network address:(correct:ip)
03.01.2019 10:29:01 0E60 T Added host network address:127.0.0.1:0
03.01.2019 10:29:01 0E60 T IPAddressSet::InitialiseWithHost() returns
03.01.2019 10:29:01 0E60 D Creating ORB...
03.01.2019 10:29:01 0E60 I Creating ORB runner with 4 threads
03.01.2019 10:29:01 0E60 I Compliant certificate hashing algorithm.
03.01.2019 10:29:01 0E60 D Not requesting a new certificate.
03.01.2019 10:29:01 0E60 D Resolving the root object adapter...
03.01.2019 10:29:01 0E60 T >>> StatusReporting::StatusReporter::WriteReport
03.01.2019 10:29:01 0A50 D RunORB thread started
03.01.2019 10:29:01 0B74 D RunORB thread started
03.01.2019 10:29:01 0C08 D RunORB thread started
03.01.2019 10:29:01 0A64 D RunORB thread started
03.01.2019 10:29:01 0E60 I This computer is part of the domain (correct:domain)
03.01.2019 10:29:01 0E60 T >>> StatusReporting::StatusReporter::WriteAsXML
03.01.2019 10:29:01 0E60 T >>> StatusReporting::DNSSection::WriteAsXML
03.01.2019 10:29:01 0E60 T <<< StatusReporting::DNSSection::WriteAsXML
03.01.2019 10:29:01 0E60 T >>> StatusReporting::CertificationSection::WriteAsXML
03.01.2019 10:29:01 0E60 T <<< StatusReporting::CertificationSection::WriteAsXML
03.01.2019 10:29:01 0E60 T >>> StatusReporting::IncomingSection::WriteAsXML
03.01.2019 10:29:01 0E60 T <<< StatusReporting::IncomingSection::WriteAsXML
03.01.2019 10:29:01 0E60 T >>> StatusReporting::OutgoingSection::WriteAsXML
03.01.2019 10:29:01 0E60 T <<< StatusReporting::OutgoingSection::WriteAsXML
03.01.2019 10:29:01 0E60 T <<< StatusReporting::StatusReporter::WriteAsXML
03.01.2019 10:29:01 0E60 T <<< StatusReporting::StatusReporter::WriteReport
03.01.2019 10:29:01 0E60 D Creating object adapters...
03.01.2019 10:29:01 0E60 D Creating MessageRouter CORBA object...
03.01.2019 10:29:01 0E60 I This router's IOR:
IOR:010000002600000049444c3a536f70686f734d6573736167696e672f4d657373616765526f757465723a312e300000000100000000000000a4000000010102000c00000031302e32312e38302e323500012000004100000014010f004e5550000000210000000001000000526f6f74504f4100526f7574657250657273697374656e740003000000010000004d657373616765526f7574657200000003000000000000000800000001003801004f4154010000001800000001003801010001000100000001000105090101000000000014000000080000000100a60086000220
03.01.2019 10:29:01 0E60 T MessageRouter::validateIOR called
03.01.2019 10:29:01 0E60 T Endpoint found: (correct:ip):8193
03.01.2019 10:29:01 0E60 I Successfully validated this router's IOR
03.01.2019 10:29:01 0E60 T >>> StatusReporting::StatusReporter::Done
03.01.2019 10:29:01 0E60 T DNS            : problem 0, changed 0, already reported 0
03.01.2019 10:29:01 0E60 T Certification  : problem 0, changed 0, already reported 0
03.01.2019 10:29:01 0E60 T Incoming       : problem 0, changed 0, already reported 0
03.01.2019 10:29:01 0E60 T Outgoing       : problem 0, changed 0, already reported 0
03.01.2019 10:29:01 0E60 T <<< StatusReporting::StatusReporter::Done
03.01.2019 10:29:01 0E60 D Setting NotificationThresholdInitialRetrySecs to 3600
03.01.2019 10:29:01 0E60 D Setting NotificationThresholdMaxRetrySecs to 172800
03.01.2019 10:29:01 0E60 I Reading router table file
03.01.2019 10:29:01 0E60 D Loading envelopes from persistent storage...
03.01.2019 10:29:01 0E60 D Activating CORBA objects...
03.01.2019 10:29:01 0E60 I Host name: (correct:server name)
03.01.2019 10:29:01 0E60 T IPAddressSet::InitialiseWithHost() called
03.01.2019 10:29:01 0E60 T Added host network address:(correct:ip)
03.01.2019 10:29:01 0E60 T Added host network address:127.0.0.1:0
03.01.2019 10:29:01 0E60 T IPAddressSet::InitialiseWithHost() returns
03.01.2019 10:29:01 0E60 I Local IP addresses: (correct:ip)
03.01.2019 10:29:01 0E60 I Resolved name: (correct:domian)
03.01.2019 10:29:01 0E60 I Resolved alias/es:
03.01.2019 10:29:01 0E60 I Resolved IP addresses: (correct:ip)
03.01.2019 10:29:01 0E60 I Resolved reverse names/aliases: (correct:domian)
03.01.2019 10:29:01 0E60 T Router::doStartRouting() called
03.01.2019 10:29:01 0E60 T Total time for retrying ACE socket connection 300
03.01.2019 10:29:01 0E60 T Number of retries when retrying ACE socket connection 100
03.01.2019 10:29:01 0E60 T Pause between retries when retrying ACE socket connection 2000
03.01.2019 10:29:01 0E60 T Pause variation percentage range 0
03.01.2019 10:29:01 0E60 D Router will not restart when it detects an EM or parent sender thread has failed to send 5000 messages.
03.01.2019 10:29:01 0E60 D Initialising router with 0 notification threshold worker threads
03.01.2019 10:29:01 0E60 I Waiting for messages...
03.01.2019 10:29:01 0E60 D Reducing Size
03.01.2019 10:29:01 0E60 D RouterSystemCheck: percentageThreshold 85, minimumPortNumToCount 1024, checkIntervalSecs 3600, reportIntervalSecs 86400
03.01.2019 10:29:01 0E60 T RouterSystemCheck::getMaxUserPort()
03.01.2019 10:29:01 0E60 D RouterSystemCheck::getMaxUserPort(), no MaxUserPort value in Registry
03.01.2019 10:29:01 0E60 D RouterSystemCheck::getMaxUserPort(), value (0) is too low, assuming 16384
03.01.2019 10:29:01 0E60 I RouterSystemCheck::onInfoPortsUsed() - number of user ports 5, max number of user ports 15360
03.01.2019 10:29:01 0E60 T CertificateRegenerationChecker::IsItTimeToRefreshCertificate(): key size and hashing algorithm are valid.
03.01.2019 10:29:01 0F14 T +++ class MessageRouter::SenderWorker derived from BasicThreadHelper: starting.
03.01.2019 10:29:01 0EBC T +++ class MessageRouter::SenderWorker derived from BasicThreadHelper: starting.
03.01.2019 10:29:01 0468 T +++ class MessageRouter::SenderWorker derived from BasicThreadHelper: starting.
03.01.2019 10:29:01 0A08 T +++ class MessageRouter::RouterThread derived from BasicThreadHelper: starting.
03.01.2019 10:29:01 06A4 T +++ class MessageRouter::GetterThread derived from BasicThreadHelper: starting.
03.01.2019 10:29:01 06A4 T GetterThread::Process() checking table
03.01.2019 10:29:01 0CA8 T +++ class MessageRouter::TimeoutThread derived from BasicThreadHelper: starting.
03.01.2019 10:29:01 0CA8 T TimeoutThread::Process() checking table
03.01.2019 10:29:01 053C T +++ class MessageRouter::IOR_Sender derived from BasicThreadHelper: starting.
03.01.2019 10:29:01 0530 T +++ class MessageRouter::ParentLogon derived from BasicThreadHelper: starting.
03.01.2019 10:29:01 0530 I Getting parent router IOR from (correct:clinet-ip):8192
03.01.2019 10:29:01 0530 T >>> StatusReporting::StatusReporter::Done
03.01.2019 10:29:01 0530 T DNS            : problem 0, changed 0, already reported 0
03.01.2019 10:29:01 0530 T Certification  : problem 0, changed 0, already reported 0
03.01.2019 10:29:01 0530 T Incoming       : problem 0, changed 0, already reported 0
03.01.2019 10:29:01 0530 T Outgoing       : problem 0, changed 0, already reported 0
03.01.2019 10:29:01 0530 T <<< StatusReporting::StatusReporter::Done
03.01.2019 10:29:01 0DB0 T +++ class MessageRouter::HostIPAddressMonitor<class ACEHelpers::IPAddressSet> derived from BasicThreadHelper: starting.
03.01.2019 10:29:01 0DB0 T HostIPAddressMonitor::Process started
03.01.2019 10:29:01 0FB8 T +++ class MessageRouter::GetterWorker derived from BasicThreadHelper: starting.
03.01.2019 10:29:01 0A1C T +++ class MessageRouter::GetterWorker derived from BasicThreadHelper: starting.
03.01.2019 10:29:01 0F8C T +++ class MessageRouter::TimeoutWorker derived from BasicThreadHelper: starting.
03.01.2019 10:29:01 0530 T >>> StatusReporting::StatusReporter::SetActualParent
03.01.2019 10:29:01 0530 D Actual parent is `(correct:clinet-ip)`
03.01.2019 10:29:01 0530 T <<< StatusReporting::StatusReporter::SetActualParent
03.01.2019 10:29:01 0530 T >>> StatusReporting::StatusReporter::Done
03.01.2019 10:29:01 0530 T DNS            : problem 0, changed 0, already reported 0
03.01.2019 10:29:01 0530 T Certification  : problem 0, changed 0, already reported 0
03.01.2019 10:29:01 0530 T Incoming       : problem 0, changed 0, already reported 0
03.01.2019 10:29:01 0530 T Outgoing       : problem 0, changed 0, already reported 0
03.01.2019 10:29:01 0530 T <<< StatusReporting::StatusReporter::Done
03.01.2019 10:29:01 0530 T >>> StatusReporting::StatusReporter::Done
03.01.2019 10:29:01 0530 T DNS            : problem 0, changed 0, already reported 0
03.01.2019 10:29:01 0530 T Certification  : problem 0, changed 0, already reported 0
03.01.2019 10:29:01 0530 T Incoming       : problem 0, changed 0, already reported 0
03.01.2019 10:29:01 0530 T Outgoing       : problem 0, changed 0, already reported 0
03.01.2019 10:29:01 0530 T <<< StatusReporting::StatusReporter::Done
03.01.2019 10:29:01 0530 I Received parent router's IOR:
IOR:010000002600000049444c3a536f70686f734d6573736167696e672f4d657373616765526f757465723a312e300000000100000000000000a4000000010102000c00000031302e32312e38302e323400012000004100000014010f004e5550000000210000000001000000526f6f74504f4100526f7574657250657273697374656e740003000000010000004d657373616765526f7574657200000003000000000000000800000001001b01004f4154010000001800000001001b01010001000100000001000105090101000000000014000000080000000100a60086000220
03.01.2019 10:29:01 0530 T MessageRouter::validateIOR called
03.01.2019 10:29:01 0530 T Endpoint found: (correct:clinet-ip):8193
03.01.2019 10:29:01 0530 T >>> StatusReporting::StatusReporter::Done
03.01.2019 10:29:01 0530 T DNS            : problem 0, changed 0, already reported 0
03.01.2019 10:29:01 0530 T Certification  : problem 0, changed 0, already reported 0
03.01.2019 10:29:01 0530 T Incoming       : problem 0, changed 0, already reported 0
03.01.2019 10:29:01 0530 T Outgoing       : problem 0, changed 0, already reported 0
03.01.2019 10:29:01 0530 T <<< StatusReporting::StatusReporter::Done
03.01.2019 10:29:01 0530 I Successfully validated parent router's IOR
03.01.2019 10:29:01 0530 I Accessing parent
03.01.2019 10:29:02 0530 I SSL handshake done, local IP address = (correct:ip)
03.01.2019 10:29:02 0530 I Parent is Router$(SOPHOS-SRV)
03.01.2019 10:29:02 0530 D Already registered with parent router
03.01.2019 10:29:02 0530 T RouterTableEntry::LogonToParentRouter
03.01.2019 10:29:02 0530 I RouterTableEntry::LogonToParentRouter() - logging on as active consumer
03.01.2019 10:29:02 0530 D RouterTableEntry::unsafe_enablePolling(): set polling interval to 1242 seconds for Router$(SOPHOS-SRV)
03.01.2019 10:29:02 0530 I RouterTableEntry state (router, logging on): Router$(SOPHOS-SRV) is passive consumer, passive supplier
03.01.2019 10:29:02 0530 D RouterTableEntry::readyForNotifiedPoll(): await poll of Router$(SOPHOS-SRV)
03.01.2019 10:29:02 0530 I Logged on to parent router as Router$(correct:server name):108037
03.01.2019 10:29:02 0530 T >>> StatusReporting::StatusReporter::WriteReport
03.01.2019 10:29:02 0FB8 D GetterWorker::ProcessEntry() - polling Router$(SOPHOS-SRV)
03.01.2019 10:29:02 0530 I This computer is part of the domain (correct:domain)
03.01.2019 10:29:02 0530 T >>> StatusReporting::StatusReporter::WriteAsXML
03.01.2019 10:29:02 0530 T >>> StatusReporting::DNSSection::WriteAsXML
03.01.2019 10:29:02 0530 T <<< StatusReporting::DNSSection::WriteAsXML
03.01.2019 10:29:02 0530 T >>> StatusReporting::CertificationSection::WriteAsXML
03.01.2019 10:29:02 0530 T <<< StatusReporting::CertificationSection::WriteAsXML
03.01.2019 10:29:02 0530 T >>> StatusReporting::IncomingSection::WriteAsXML
03.01.2019 10:29:02 0530 T <<< StatusReporting::IncomingSection::WriteAsXML
03.01.2019 10:29:02 0530 T >>> StatusReporting::OutgoingSection::WriteAsXML
03.01.2019 10:29:02 0530 T <<< StatusReporting::OutgoingSection::WriteAsXML
03.01.2019 10:29:02 0530 T <<< StatusReporting::StatusReporter::WriteAsXML
03.01.2019 10:29:02 0530 T <<< StatusReporting::StatusReporter::WriteReport
03.01.2019 10:29:02 0FB8 D RouterTableEntry::successfulGet(): re-started polling interval for Router$(SOPHOS-SRV)
03.01.2019 10:29:02 0FB8 D ~~~ IncomingSection: 0 strikes.
03.01.2019 10:29:02 0FB8 T >>> StatusReporting::StatusReporter::Done
03.01.2019 10:29:02 0FB8 T DNS            : problem 0, changed 0, already reported 0
03.01.2019 10:29:02 0FB8 T Certification  : problem 0, changed 0, already reported 0
03.01.2019 10:29:02 0FB8 T Incoming       : problem 0, changed 0, already reported 0
03.01.2019 10:29:02 0FB8 T Outgoing       : problem 0, changed 0, already reported 0
03.01.2019 10:29:02 0FB8 T <<< StatusReporting::StatusReporter::Done

Hello Ben@ryehills,

the init part looks ok. Just these four lines repeat or is there something else in between?
I'm not sure if the parts of the logs in your posts indicate that the Agent is not talking to the Router, I think that in this case the debug trace is rather obscuring the interesting information. With or without the elevated trace level snippets from the Agent and Router logs that cover the same interval (10 minutes perhaps) would be helpful.

Christian

ok, one sec I will post more of the Agent log

The Agent log just displays the following in a loop:

03.01.2019 16:27:01 06C8 I Initializing ...
03.01.2019 16:27:01 06C8 I Running certificate verification...
03.01.2019 16:27:01 06C8 I Compliant certificate hashing algorithm.
03.01.2019 16:27:43 06C8 E CORBA::Exception: Caught CORBA system exception, ID 'IDL:omg.org/CORBA/TRANSIENT:1.0'
OMG minor code (2), described as '*unknown description*', completed = NO
 ClientConnection::Reconnect()

03.01.2019 16:27:48 06C8 I Initializing ...
03.01.2019 16:27:48 06C8 I Running certificate verification...
03.01.2019 16:27:48 06C8 I Compliant certificate hashing algorithm.
03.01.2019 16:28:31 06C8 E CORBA::Exception: Caught CORBA system exception, ID 'IDL:omg.org/CORBA/TRANSIENT:1.0'
OMG minor code (2), described as '*unknown description*', completed = NO
 ClientConnection::Reconnect()

03.01.2019 16:28:36 06C8 I Initializing ...
03.01.2019 16:28:36 06C8 I Running certificate verification...
03.01.2019 16:28:36 06C8 I Compliant certificate hashing algorithm.
03.01.2019 16:29:18 06C8 E CORBA::Exception: Caught CORBA system exception, ID 'IDL:omg.org/CORBA/TRANSIENT:1.0'
OMG minor code (2), described as '*unknown description*', completed = NO
 ClientConnection::Reconnect()

03.01.2019 16:29:20 06A0 I SAUAdapter - SAU IPCListener::Wait received message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSStartUpdate" />
03.01.2019 16:29:20 06A0 I SAUAdapter - SAU StartingUpdate has been set
03.01.2019 16:29:20 06A0 I SAUAdapter - SAU IPCListener::Wait Waiting for more messages
03.01.2019 16:29:23 06C8 I Initializing ...
03.01.2019 16:29:23 06C8 I Running certificate verification...
03.01.2019 16:29:23 06C8 I Compliant certificate hashing algorithm.
03.01.2019 16:29:27 06A0 I SAUAdapter - SAU IPCListener::Wait received message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate" />
03.01.2019 16:29:27 06A0 I SAUAdapter - SAU FinishedUpdate has been set
03.01.2019 16:29:27 06A0 I SAUAdapter - SAU ReportStatus::FinishedUpdate: Failed to read UpdateSource value in the UpdateStatus registry key.
03.01.2019 16:29:27 06A0 I SAUAdapter - SAU Update status information saved to C:\ProgramData\Sophos\AutoUpdate\data\status\AUAdapter.xml
03.01.2019 16:29:27 06A0 I SAUAdapter - SAU IPCListener::Wait Waiting for more messages
03.01.2019 16:30:06 06C8 E CORBA::Exception: Caught CORBA system exception, ID 'IDL:omg.org/CORBA/TRANSIENT:1.0'
OMG minor code (2), described as '*unknown description*', completed = NO
 ClientConnection::Reconnect()

03.01.2019 16:30:11 06C8 I Initializing ...
03.01.2019 16:30:11 06C8 I Running certificate verification...
03.01.2019 16:30:11 06C8 I Compliant certificate hashing algorithm.
03.01.2019 16:30:54 06C8 E CORBA::Exception: Caught CORBA system exception, ID 'IDL:omg.org/CORBA/TRANSIENT:1.0'
OMG minor code (2), described as '*unknown description*', completed = NO
 ClientConnection::Reconnect()

03.01.2019 16:30:59 06C8 I Initializing ...
03.01.2019 16:30:59 06C8 I Running certificate verification...
03.01.2019 16:30:59 06C8 I Compliant certificate hashing algorithm.
03.01.2019 16:31:41 06C8 E CORBA::Exception: Caught CORBA system exception, ID 'IDL:omg.org/CORBA/TRANSIENT:1.0'
OMG minor code (2), described as '*unknown description*', completed = NO
 ClientConnection::Reconnect()

03.01.2019 16:31:46 06C8 I Initializing ...
03.01.2019 16:31:46 06C8 I Running certificate verification...
03.01.2019 16:31:46 06C8 I Compliant certificate hashing algorithm.

The server looks like its updating ok but just not reporting back.

Apologies, I had done one for the router logs but not the Agent log in the registry. :-S

Just sorting it now

Agent Log:

03.01.2019 16:48:35 0764 I SOF: C:\ProgramData/Sophos/Remote Management System/3/Agent/Logs/Agent-20190103-164835.log
03.01.2019 16:48:35 0764 I Sophos Management Agent 4.1.1.127 starting...
03.01.2019 16:48:35 0764 T Starting adapter manager...
03.01.2019 16:48:35 0764 I Starting AdapterManager ...
03.01.2019 16:48:35 0764 T Entering void AdapterMonitor::Init(IEnvironment * env, IAdapterManager * adapterManager , ILoader * adapterLoader)
03.01.2019 16:48:35 0764 T CpuUsageMonitorDataProvider::GetNumberOfProcessor(): number of processors = 1
03.01.2019 16:48:35 0764 T Starting CPU usage monitor...
03.01.2019 16:48:35 0E10 T +++ class AdapterManager::AdapterMonitor derived from BasicThreadHelper: starting.
03.01.2019 16:48:35 0E10 T Entering AdapterMonitor::Process(void)
03.01.2019 16:48:35 0E10 I Starting AdapterMonitor thread ...
03.01.2019 16:48:35 0E10 T AdapterMonitor::UpdateAdapters() : something changed in config
03.01.2019 16:48:35 0E10 T Entering void AdapterMonitor::ReadAdaptersFromConfig()
03.01.2019 16:48:35 0E10 T Entering GetAdapterList()
03.01.2019 16:48:35 0E10 T Entering void AdapterMonitor::LoadAllAdapters()
03.01.2019 16:48:35 0E10 T Entering GetAdapterList()
03.01.2019 16:48:35 0E10 I Loading new adapters: 4 registered adapters; 0 loaded adapters.
03.01.2019 16:48:35 0E10 I Detected new adapter ALC.
03.01.2019 16:48:35 0E10 T Entering void AdapterManager::LoadAdapter( std::string& ALC, std::string& C:\Program Files (x86)\Sophos\AutoUpdate\AUAdapter.dll)
03.01.2019 16:48:35 0E10 I Loading adapter ALC ...
03.01.2019 16:48:35 0E10 T Loading adapter DLL C:\Program Files (x86)\Sophos\AutoUpdate\AUAdapter.dll
03.01.2019 16:48:35 0E10 T Loaded adapter DLL C:\Program Files (x86)\Sophos\AutoUpdate\AUAdapter.dll
03.01.2019 16:48:35 0E10 T Getting adapter version for ALC
03.01.2019 16:48:35 0E10 T Getting adapter factory for ALC
03.01.2019 16:48:35 0E10 T AdapterManager::Services - constructing
03.01.2019 16:48:35 0E10 T Services::InitStorage()
03.01.2019 16:48:35 0E10 T StateObserver::StateObserver()
03.01.2019 16:48:35 0E10 T EventObserver::EventObserver()
03.01.2019 16:48:35 0E10 T ActionOutcomeObserver created for ALC
03.01.2019 16:48:35 0E10 T EventObserver::~EventObserver()
03.01.2019 16:48:35 0E10 T StateObserver::~StateObserver()
03.01.2019 16:48:35 0E10 T EventObserver::~EventObserver()
03.01.2019 16:48:35 0E10 T StateObserver::~StateObserver()
03.01.2019 16:48:35 0E10 T Initialising adapter factory.
03.01.2019 16:48:35 0E10 I SAUAdapter - SAU RegistryWatcher: Failed to open registry key SOFTWARE\Sophos\AutoUpdate\UpdateStatus\Details with error 2
03.01.2019 16:48:35 0E10 I SAUAdapter - SAU IPCBase::IPCBase: Initialising shared memory A32951C539924a12B3C8F2FDA5A268E4
03.01.2019 16:48:35 0E10 T Services::GetAdapterData()
03.01.2019 16:48:35 0E10 T Services::ValidateAdapterDataName()
03.01.2019 16:48:35 0E10 T Services::GetPersistentStore()
03.01.2019 16:48:35 0E10 W Services::GetAdapterData(), data item name SAUPolicy is unknown
03.01.2019 16:48:35 0E10 I SAUAdapter - SAU AdapterImpl: Could not construct the adapter. MalformedXML: Empty document
03.01.2019 16:48:35 0E10 I SAUAdapter - SAU Returning Adapter: 005E6F48
03.01.2019 16:48:35 0E10 T Initialised adapter factory.
03.01.2019 16:48:35 0E10 T Registering State Observer
03.01.2019 16:48:35 0E10 I SAUAdapter - SAU RegisterStateObserver : 00C7E158
03.01.2019 16:48:35 0E10 I SAUAdapter - SAU RegisterConfigStateObserver : 00C7E15C
03.01.2019 16:48:35 0E10 T Registering Event Observer
03.01.2019 16:48:35 0E10 I SAUAdapter - SAU RegisterEventObserver : 00C7E180
03.01.2019 16:48:35 0E10 T Registering Action Outcome Observer
03.01.2019 16:48:35 0E10 I Adapter ALC has been loaded successfully.
03.01.2019 16:48:35 0E10 I Detected new adapter SAV.
03.01.2019 16:48:35 0E10 T Entering void AdapterManager::LoadAdapter( std::string& SAV, std::string& C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdapter.dll)
03.01.2019 16:48:35 0E10 I Loading adapter SAV ...
03.01.2019 16:48:35 0E10 T Loading adapter DLL C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdapter.dll
03.01.2019 16:48:35 0E10 T Loaded adapter DLL C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdapter.dll
03.01.2019 16:48:35 0E10 T Getting adapter version for SAV
03.01.2019 16:48:35 0E10 T Getting adapter factory for SAV
03.01.2019 16:48:35 0E10 T AdapterManager::Services - constructing
03.01.2019 16:48:35 0E10 T Services::InitStorage()
03.01.2019 16:48:35 0E10 T StateObserver::StateObserver()
03.01.2019 16:48:35 0E10 T EventObserver::EventObserver()
03.01.2019 16:48:35 0E10 T ActionOutcomeObserver created for SAV
03.01.2019 16:48:35 0E10 T EventObserver::~EventObserver()
03.01.2019 16:48:35 0E10 T StateObserver::~StateObserver()
03.01.2019 16:48:35 0E10 T EventObserver::~EventObserver()
03.01.2019 16:48:35 0E10 T StateObserver::~StateObserver()
03.01.2019 16:48:35 0E10 T Initialising adapter factory.
03.01.2019 16:48:35 0E10 D SAVXP Adapter: SavAdapter created
03.01.2019 16:48:35 0E10 T SAVXP Adapter: Entering SAVConfig::CSAVConfigData::CSAVConfigData
03.01.2019 16:48:35 0E10 T SAVXP Adapter: Entering SAVConfig::CSAVConfigData::CSAVConfigData
03.01.2019 16:48:35 0E10 T SAVXP Adapter: Entering SAVConfig::CSAVConfigData::CSAVConfigData
03.01.2019 16:48:35 0E10 D SAVXP Adapter: Failed to get compliance data from NAC registry key 'Complies'
03.01.2019 16:48:35 0E10 D SAVXP Adapter: Failed to get compliance data from NAC registry key 'AppControlComplies'
03.01.2019 16:48:35 0E10 D SAVXP Adapter: Failed to get compliance data from NAC registry key 'TPComplies'
03.01.2019 16:48:35 0E10 D SAVXP Adapter: Failed to get compliance data from NAC registry key 'DataControlComplies'
03.01.2019 16:48:35 0E10 D SAVXP Adapter: Failed to get compliance data from NAC registry key 'DevControlComplies'
03.01.2019 16:48:35 0E10 T Services::GetAdapterData()
03.01.2019 16:48:35 0E10 T Services::ValidateAdapterDataName()
03.01.2019 16:48:35 0E10 T Services::GetPersistentStore()
03.01.2019 16:48:35 0E10 W Services::GetAdapterData(), data item name SAVAdapterConfig is unknown
03.01.2019 16:48:35 0E10 T Services::GetAdapterData()
03.01.2019 16:48:35 0E10 T Services::ValidateAdapterDataName()
03.01.2019 16:48:35 0E10 T Services::GetPersistentStore()
03.01.2019 16:48:35 0E10 W Services::GetAdapterData(), data item name APPCAdapterConfig is unknown
03.01.2019 16:48:35 0E10 T Services::GetAdapterData()
03.01.2019 16:48:35 0E10 T Services::ValidateAdapterDataName()
03.01.2019 16:48:35 0E10 T Services::GetPersistentStore()
03.01.2019 16:48:35 0E10 W Services::GetAdapterData(), data item name TPAdapterConfig is unknown
03.01.2019 16:48:35 0E10 T Services::GetAdapterData()
03.01.2019 16:48:35 0E10 T Services::ValidateAdapterDataName()
03.01.2019 16:48:35 0E10 T Services::GetPersistentStore()
03.01.2019 16:48:35 0E10 W Services::GetAdapterData(), data item name DATCAdapterConfig is unknown
03.01.2019 16:48:35 0E10 T Services::GetAdapterData()
03.01.2019 16:48:35 0E10 T Services::ValidateAdapterDataName()
03.01.2019 16:48:35 0E10 T Services::GetPersistentStore()
03.01.2019 16:48:35 0E10 W Services::GetAdapterData(), data item name DEVCAdapterConfig is unknown
03.01.2019 16:48:35 0E10 T Initialised adapter factory.
03.01.2019 16:48:35 0E10 T Registering State Observer
03.01.2019 16:48:35 0E10 D SAVXP Adapter: RegisterStateObserver : 00C7E300
03.01.2019 16:48:35 0E10 D SAVXP Adapter: RegisterConfigStateObserver : 00C7E304
03.01.2019 16:48:35 0E10 T Registering Event Observer
03.01.2019 16:48:35 0E10 D SAVXP Adapter: RegisterEventObserver : 00C7E328
03.01.2019 16:48:35 0E10 T Registering Action Outcome Observer
03.01.2019 16:48:35 0E10 I Adapter SAV has been loaded successfully.
03.01.2019 16:48:35 0E10 I Detected new adapter SED.
03.01.2019 16:48:35 0E10 T Entering void AdapterManager::LoadAdapter( std::string& SED, std::string& C:\Program Files\Sophos\Endpoint Defense\SEDAdapter.dll)
03.01.2019 16:48:35 0E10 I Loading adapter SED ...
03.01.2019 16:48:35 0E10 T Loading adapter DLL C:\Program Files\Sophos\Endpoint Defense\SEDAdapter.dll
03.01.2019 16:48:35 0E10 T Loaded adapter DLL C:\Program Files\Sophos\Endpoint Defense\SEDAdapter.dll
03.01.2019 16:48:35 0E10 T Getting adapter version for SED
03.01.2019 16:48:35 0E10 T Getting adapter factory for SED
03.01.2019 16:48:35 0E10 T AdapterManager::Services - constructing
03.01.2019 16:48:35 0E10 T Services::InitStorage()
03.01.2019 16:48:35 0E10 T StateObserver::StateObserver()
03.01.2019 16:48:35 0E10 T EventObserver::EventObserver()
03.01.2019 16:48:35 0E10 T ActionOutcomeObserver created for SED
03.01.2019 16:48:35 0E10 T EventObserver::~EventObserver()
03.01.2019 16:48:35 0E10 T StateObserver::~StateObserver()
03.01.2019 16:48:35 0E10 T EventObserver::~EventObserver()
03.01.2019 16:48:35 0E10 T StateObserver::~StateObserver()
03.01.2019 16:48:35 0E10 T Initialising adapter factory.
03.01.2019 16:48:35 0E10 I SedAdapter: Initialising
03.01.2019 16:48:35 0E10 T Services::GetAdapterData()
03.01.2019 16:48:35 0E10 T Services::ValidateAdapterDataName()
03.01.2019 16:48:35 0E10 T Services::GetPersistentStore()
03.01.2019 16:48:35 0E10 W Services::GetAdapterData(), data item name policy is unknown
03.01.2019 16:48:35 0E10 I SedAdapter: Initialization complete
03.01.2019 16:48:35 0E10 T Initialised adapter factory.
03.01.2019 16:48:35 0E10 T Registering State Observer
03.01.2019 16:48:35 0E10 I SED adapter registering state observer
03.01.2019 16:48:35 0E10 T Registering Event Observer
03.01.2019 16:48:35 0E10 T Registering Action Outcome Observer
03.01.2019 16:48:35 0E10 I Adapter SED has been loaded successfully.
03.01.2019 16:48:35 0E10 I Detected new adapter SWC.
03.01.2019 16:48:35 0E10 T Entering void AdapterManager::LoadAdapter( std::string& SWC, std::string& C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll)
03.01.2019 16:48:35 0E10 I Loading adapter SWC ...
03.01.2019 16:48:35 0E10 T Loading adapter DLL C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll
03.01.2019 16:48:35 0E10 T Loaded adapter DLL C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll
03.01.2019 16:48:35 0E10 T Getting adapter version for SWC
03.01.2019 16:48:35 0E10 T Getting adapter factory for SWC
03.01.2019 16:48:35 0E10 T AdapterManager::Services - constructing
03.01.2019 16:48:35 0E10 T Services::InitStorage()
03.01.2019 16:48:35 0E10 T StateObserver::StateObserver()
03.01.2019 16:48:35 0E10 T EventObserver::EventObserver()
03.01.2019 16:48:35 0E10 T ActionOutcomeObserver created for SWC
03.01.2019 16:48:35 0E10 T EventObserver::~EventObserver()
03.01.2019 16:48:35 0E10 T StateObserver::~StateObserver()
03.01.2019 16:48:35 0E10 T EventObserver::~EventObserver()
03.01.2019 16:48:35 0E10 T StateObserver::~StateObserver()
03.01.2019 16:48:35 0E10 T Initialising adapter factory.
03.01.2019 16:48:35 0E10 I Creating SwcAdapter
03.01.2019 16:48:35 0E10 T Services::GetAdapterData()
03.01.2019 16:48:35 0E10 T Services::ValidateAdapterDataName()
03.01.2019 16:48:35 0E10 T Services::GetPersistentStore()
03.01.2019 16:48:35 0E10 W Services::GetAdapterData(), data item name SWCPolicy is unknown
03.01.2019 16:48:35 0E10 T Initialised adapter factory.
03.01.2019 16:48:35 0E10 T Registering State Observer
03.01.2019 16:48:35 0E10 I Registering state observer
03.01.2019 16:48:35 0E10 T Registering Event Observer
03.01.2019 16:48:35 0E10 I Registering event observer
03.01.2019 16:48:35 0E10 I saving event observer
03.01.2019 16:48:35 0E10 T Registering Action Outcome Observer
03.01.2019 16:48:35 0E10 I Adapter SWC has been loaded successfully.
03.01.2019 16:48:35 0464 T +++ class RMS::CpuUsageMonitor derived from BasicThreadHelper: starting.
03.01.2019 16:48:35 0464 T CpuUsageMonitorDataProvider::GetTime(): count = 798980288663
03.01.2019 16:48:35 0464 T CpuUsageMonitorDataProvider::GetTime(): frequency = 10000000
03.01.2019 16:48:35 0464 T CpuUsageMonitorDataProvider::GetTime(): time = 79898028 ms
03.01.2019 16:48:35 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process kernel time = 62 ms
03.01.2019 16:48:35 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process user time = 46 ms
03.01.2019 16:48:35 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process time = 108 ms
03.01.2019 16:48:35 0F1C I SAUAdapter - SAU AdapterImpl::Notify Notifying agent of configuration change...
03.01.2019 16:48:35 0F1C I ALC state observer received a configuration
03.01.2019 16:48:35 0700 I SAUAdapter - SAU IPCListener::Wait started
03.01.2019 16:48:35 0700 I SAUAdapter - SAU IPCListener::Wait Waiting for more messages
03.01.2019 16:48:35 0F1C I SAUAdapter - SAU AdapterImpl: Notifying agent of status change: <?xml version="1.0" encoding="utf-8" ?><status xmlns="com.sophos\mansys\status" type="sau"><CompRes xmlns="com.sophos\msys\csc" Res="NoRef" policyType="1" /><autoUpdate xmlns="http://www.sophos.com/xml/mansys/AutoUpdateStatus.xsd"><endpoint id="41de5d7f-265e-5eed-a782-770c5dda2ad4" /></autoUpdate></status>
03.01.2019 16:48:35 0F1C I ALC state observer notified that ALC is running
03.01.2019 16:48:35 0F1C I ALC state observer received a status: <?xml version="1.0" encoding="utf-8" ?><status xmlns="com.sophos\mansys\status" type="sau"><CompRes xmlns="com.sophos\msys\csc" Res="NoRef" policyType="1" /><autoUpdate xmlns="http://www.sophos.com/xml/mansys/AutoUpdateStatus.xsd"><endpoint id="41de5d7f-265e-5eed-a782-770c5dda2ad4" /></autoUpdate></status>
03.01.2019 16:48:35 0AA0 D SAVXP Adapter: CSAVMonitor::Started monitoring SAV up to date state registry for changes
03.01.2019 16:48:35 0AA0 D SAVXP Adapter: --RefreshConfigData--
03.01.2019 16:48:35 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetGlobalObjects
03.01.2019 16:48:35 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetTemplateObjects
03.01.2019 16:48:36 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetTemplateObjects
03.01.2019 16:48:36 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetOnDemandTemplateObjects
03.01.2019 16:48:36 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetTemplateObjects
03.01.2019 16:48:36 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetRightClickTemplateObjects
03.01.2019 16:48:36 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetTemplateObjects
03.01.2019 16:48:36 0764 T Initialising ORB...
03.01.2019 16:48:36 0764 T CertificateRegenerationChecker::CertificateRegenerationChecker(): m_timeToForceCertRefresh = 17560144
03.01.2019 16:48:36 0764 T MSClient::InitORB(argc,argv) called.
03.01.2019 16:48:36 0764 T MSClient::InitORB() called.
03.01.2019 16:48:36 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetOnAccessTemplateObjects
03.01.2019 16:48:36 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetTemplateObjects
03.01.2019 16:48:36 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetSIPSTemplateObjects
03.01.2019 16:48:36 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetTemplateObjects
03.01.2019 16:48:36 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetWebTemplateObjects
03.01.2019 16:48:36 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetTemplateObjects
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetSWITemplateObjects
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetTemplateObjects
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetDataControlTemplateObjects
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetTemplateObjects
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetDeviceControlTemplateObjects
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetTemplateObjects
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigData::CSAVConfigData
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::ReadConfigFromService
03.01.2019 16:48:37 0AA0 D SAVXP Adapter: Entering CSAVConfigDataLoader::Load()
03.01.2019 16:48:37 0AA0 D SAVXP Adapter: Alerts
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadAlerts
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadAlertsSmtpConfig
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadAlertsSnmpConfig
03.01.2019 16:48:37 0AA0 D SAVXP Adapter: OnAccess
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadOnAccess
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadFromVEA
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::CScanBehaviourLoaderSaver::ReadConfigFromService
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadFromFOP
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadOnAccessFromDriverExclusions
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadOnAccessFromDriverExtensions
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadOnAccessFromDriverOP
03.01.2019 16:48:37 0AA0 D SAVXP Adapter: OnDemand
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadOnDemand
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadOnDemandFromExclusions
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadOnDemandFromExtensions
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadWorkstationScans
03.01.2019 16:48:37 0AA0 D SAVXP Adapter: RTInspect
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadRTInspection
03.01.2019 16:48:37 0AA0 D SAVXP Adapter: AuthorisedList
03.01.2019 16:48:37 0AA0 D SAVXP Adapter: SIPSApprovedList
03.01.2019 16:48:37 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadSIPSApprovedList
03.01.2019 16:48:37 0764 D New context options = 1000004
03.01.2019 16:48:38 0764 T Initialising client library...
03.01.2019 16:48:38 0764 I InitialiseClientLibraryLocal Agent, SOFTWARE\Sophos\Remote Management System\ManagementAgent\Private, , 1,  ...
03.01.2019 16:48:38 0764 T Regulator::Init(), NotificationDelay 20, MaxDelay 300
03.01.2019 16:48:38 0764 T Regulator::Init(), NotificationDelay 30, MaxDelay 3600
03.01.2019 16:48:38 0764 T Connecting to router...
03.01.2019 16:48:38 0AA0 D SAVXP Adapter: WebScanning
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadWebScanning
03.01.2019 16:48:38 0AA0 D SAVXP Adapter: WebFiltering
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadWebFiltering
03.01.2019 16:48:38 0AA0 D SAVXP Adapter: DetectionFeedback
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadDetectionFeedback
03.01.2019 16:48:38 0AA0 D SAVXP Adapter: FileReputation
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadFileReputation
03.01.2019 16:48:38 0AA0 D SAVXP Adapter: ContScan
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadContScan
03.01.2019 16:48:38 0D18 T +++ class MessagingSystemClientLib::ClientConnection derived from BasicThreadHelper: starting.
03.01.2019 16:48:38 0D18 T ClientConnection::Process: Calling Reconnect
03.01.2019 16:48:38 0D18 T ClientConnection::Reconnect: Calling connect
03.01.2019 16:48:38 0D18 D MSClient::Connect().
03.01.2019 16:48:38 0D18 I Initializing ...
03.01.2019 16:48:38 0D18 T MSClient::InitORB() called.
03.01.2019 16:48:38 0D18 I Running certificate verification...
03.01.2019 16:48:38 0D18 D Verifying certificate and key integrity ...
03.01.2019 16:48:38 0D18 D The certificate hashing algorithm is sha256WithRSAEncryption.
03.01.2019 16:48:38 0D18 D The key size is 2048.
03.01.2019 16:48:38 0D18 I Compliant certificate hashing algorithm.
03.01.2019 16:48:38 0D18 D Certificate verification passed
03.01.2019 16:48:38 0D18 D Setting up SSL context for client interface.
03.01.2019 16:48:38 0164 T +++ class MessagingSystemClientLib::ConnectionNotifier derived from BasicThreadHelper: starting.
03.01.2019 16:48:38 0AA0 D SAVXP Adapter: AutoExclusions
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadAutoExclusions
03.01.2019 16:48:38 0AA0 D SAVXP Adapter: AppDetection
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigDataLoader::LoadAppDetection
03.01.2019 16:48:38 0AA0 D SAVXP Adapter: Joy!
03.01.2019 16:48:38 0AA0 D SAVXP Adapter: RefreshConfigData: sav is empty. Updated? 1
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CSAVConfigData::~CSAVConfigData
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CAPPCConfigDataLoader::ReadConfigFromService
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CAPPCConfigDataLoader::LoadAlerts
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CAPPCConfigDataLoader::LoadAlertsSmtpConfig
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CAPPCConfigDataLoader::LoadAlertsDesktopConfig
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CAPPCConfigDataLoader::LoadAlertsSnmpConfig
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CAPPCConfigDataLoader::LoadAuthorisationData
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CAPPCConfigDataLoader::LoadSettings
03.01.2019 16:48:38 0D18 D Private key size: 2048 bits
03.01.2019 16:48:38 0D18 D Set up SSL context for client interface.
03.01.2019 16:48:38 0D18 D Getting the client interface.
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CAPPCConfigDataLoader::LoadOnDemand
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::IsOnDemandAppCSet
03.01.2019 16:48:38 0AA0 D SAVXP Adapter: RefreshConfigData: appc is empty. Updated? 1
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::TPConfigDataLoader::ReadConfigFromService
03.01.2019 16:48:38 0AA0 D SAVXP Adapter: RefreshConfigData: TP is empty. Updated? 1
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CDATCConfigDataLoader::ReadConfigFromService
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CDATCConfigDataLoader::LoadAlerts
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CDATCConfigDataLoader::LoadAlertsDesktopConfig
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CDATCConfigDataLoader::LoadAlertsSmtpConfig
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CDATCConfigDataLoader::LoadAlertsSnmpConfig
03.01.2019 16:48:38 0AA0 D SAVXP Adapter: RefreshConfigData: datc is empty. Updated? 1
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CDEVCConfigDataLoader::ReadConfigFromService
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CDEVCConfigDataLoader::LoadAlerts
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CDEVCConfigDataLoader::LoadAlertsDesktopConfig
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CDEVCConfigDataLoader::LoadAlertsSmtpConfig
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::CDEVCConfigDataLoader::LoadAlertsSnmpConfig
03.01.2019 16:48:38 0AA0 D SAVXP Adapter: RefreshConfigData: devc is empty. Updated? 1
03.01.2019 16:48:38 0AA0 D SAVXP Adapter: isQMReportInStatusEnabledInSAVPolicy is false, QM Status from the QM will not be collected.
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetGlobalObjects
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetTemplateObjects
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetTemplateObjects
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetOnDemandTemplateObjects
03.01.2019 16:48:38 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetTemplateObjects
03.01.2019 16:48:39 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetRightClickTemplateObjects
03.01.2019 16:48:39 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetTemplateObjects
03.01.2019 16:48:39 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetOnAccessTemplateObjects
03.01.2019 16:48:39 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetTemplateObjects
03.01.2019 16:48:39 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetSIPSTemplateObjects
03.01.2019 16:48:39 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetTemplateObjects
03.01.2019 16:48:39 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetWebTemplateObjects
03.01.2019 16:48:39 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetTemplateObjects
03.01.2019 16:48:39 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetSWITemplateObjects
03.01.2019 16:48:39 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetTemplateObjects
03.01.2019 16:48:39 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetDataControlTemplateObjects
03.01.2019 16:48:39 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetTemplateObjects
03.01.2019 16:48:39 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetDeviceControlTemplateObjects
03.01.2019 16:48:39 0AA0 T SAVXP Adapter: Entering SAVConfig::ConfigItemPointerMess::GetTemplateObjects
03.01.2019 16:48:39 0AA0 D SAVXP Adapter: StateChanged()
03.01.2019 16:48:39 0AA0 D SAVXP Adapter: Match state: NoComparison
03.01.2019 16:48:39 0AA0 D SAVXP Adapter: Match state: NoComparison
03.01.2019 16:48:39 0AA0 D SAVXP Adapter: Match state: NoComparison
03.01.2019 16:48:39 0AA0 D SAVXP Adapter: Match state: NoComparison
03.01.2019 16:48:39 0AA0 D SAVXP Adapter: Match state: NoComparison
03.01.2019 16:48:39 0AA0 D SAVXP Adapter: QMReportedInStatus is disabled, status xml will not contain QMList.
03.01.2019 16:48:39 0AA0 I SAV state observer notified that SAV is running
03.01.2019 16:48:39 0AA0 I SAV state observer received a status: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<status xmlns="http://www.sophos.com/EE/EESavStatus"><csc:CompRes xmlns:csc="com.sophos\msys\csc" Res="NoRef" RevID="" policyType="2"/><csc:CompRes xmlns:csc="com.sophos\msys\csc" Res="NoRef" RevID="" policyType="7"/><ac:onAccess xmlns:ac="com.sophos\mansys\applicationcontrol" value="0"/><csc:CompRes xmlns:csc="com.sophos\msys\csc" Res="NoRef" RevID="" policyType="19"/><tp:tamperProtectionStatus xmlns:tp="http://www.sophos.com/xml/msys/tamperprotectionstatus.xsd" scanningState="off"/><csc:CompRes xmlns:csc="com.sophos\msys\csc" Res="NoRef" RevID="" policyType="15"/><dat:dataControlStatus xmlns:dat="http://www.sophos.com/xml/msys/datacontrol.xsd" scanningState="off"/><csc:CompRes xmlns:csc="com.sophos\msys\csc" Res="NoRef" RevID="" policyType="16"/><dev:deviceControlStatus xmlns:dev="http://www.sophos.com/xml/msys/devicecontrol.xsd" scanningState="off"/><entity><productId>SAVEEXP</productId><product-version>10.8.2 VE3.73.0</product-version><entityInfo>SAVXP.10.8.2 VE3.73.0</entityInfo></entity><vdl-info><virus-engine-version>3.73.0</virus-engine-version><virus-data-version>5.58</virus-data-version><idelist><ide>age-baef.ide</ide><ide>age-bafb.ide</ide><ide>age-bafd.ide</ide><ide>age-bagh.ide</ide><ide>age-baig.ide</ide><ide>age-baij.ide</ide><ide>age-bair.ide</ide><ide>age-bake.ide</ide><ide>auto-chk.ide</ide><ide>bank-gxl.ide</ide><ide>batdl-af.ide</ide><ide>bckdo-ak.ide</ide><ide>bdoo-bhh.ide</ide><ide>betab-bs.ide</ide><ide>blada-lb.ide</ide><ide>blada-lx.ide</ide><ide>bokbot-b.ide</ide><ide>cryakl-q.ide</ide><ide>cryakl-u.ide</ide><ide>cryakl-w.ide</ide><ide>darkc-ib.ide</ide><ide>delf-gzt.ide</ide><ide>delf-had.ide</ide><ide>dharma-c.ide</ide><ide>docd-qmw.ide</ide><ide>docd-qsr.ide</ide><ide>docd-qve.ide</ide><ide>docd-qzt.ide</ide><ide>docd-rdi.ide</ide><ide>docd-rgz.ide</ide><ide>docd-rhg.ide</ide><ide>docph-cj.ide</ide><ide>drid-aak.ide</ide><ide>drid-aap.ide</ide><ide>drop-ahu.ide</ide><ide>dwnl-wzk.ide</ide><ide>emot-ajp.ide</ide><ide>emot-ake.ide</ide><ide>emot-akh.ide</ide><ide>emot-ako.ide</ide><ide>emot-akt.ide</ide><ide>emot-aku.ide</ide><ide>emot-alh.ide</ide><ide>emot-alq.ide</ide><ide>emot-alr.ide</ide><ide>emot-amc.ide</ide><ide>emot-ams.ide</ide><ide>emot-amy.ide</ide><ide>emot-anj.ide</ide><ide>emot-anm.ide</ide><ide>emot-ann.ide</ide><ide>emot-anq.ide</ide><ide>emot-anr.ide</ide><ide>emot-ans.ide</ide><ide>emot-aop.ide</ide><ide>emot-aox.ide</ide><ide>emot-apc.ide</ide><ide>emot-aqj.ide</ide><ide>emot-ara.ide</ide><ide>emot-ari.ide</ide><ide>emot-arn.ide</ide><ide>emot-aro.ide</ide><ide>emot-asr.ide</ide><ide>emot-asw.ide</ide><ide>encdo-et.ide</ide><ide>encdo-fz.ide</ide><ide>encdo-hc.ide</ide><ide>encdo-hn.ide</ide><ide>fare-gds.ide</ide><ide>fare-gea.ide</ide><ide>fare-geg.ide</ide><ide>fare-gei.ide</ide><ide>fare-gem.ide</ide><ide>fare-geq.ide</ide><ide>fare-ges.ide</ide><ide>fare-gex.ide</ide><ide>fare-gfo.ide</ide><ide>fare-ggz.ide</ide><ide>fare-ghu.ide</ide><ide>fare-gip.ide</ide><ide>fare-gjf.ide</ide><ide>fare-gji.ide</ide><ide>fare-gjm.ide</ide><ide>fare-gjn.ide</ide><ide>fare-gjx.ide</ide><ide>fare-gkc.ide</ide><ide>fare-gkj.ide</ide><ide>fare-gkk.ide</ide><ide>fare-gkp.ide</ide><ide>fare-gkq.ide</ide><ide>fare-gkt.ide</ide><ide>formb-gj.ide</ide><ide>formb-go.ide</ide><ide>fuerbo-w.ide</ide><ide>gootki-n.ide</ide><ide>gootki-o.ide</ide><ide>gootki-y.ide</ide><ide>hawke-ss.ide</ide><ide>htmld-kj.ide</ide><ide>htmld-kt.ide</ide><ide>icedid-c.ide</ide><ide>inje-dqo.ide</ide><ide>inje-dqx.ide</ide><ide>inje-dsf.ide</ide><ide>inje-dsj.ide</ide><ide>inje-dsp.ide</ide><ide>inje-dsr.ide</ide><ide>inje-dsu.ide</ide><ide>inje-dsv.ide</ide><ide>keylo-vo.ide</ide><ide>lnk-bc.ide</ide><ide>lnkrun-x.ide</ide><ide>loit-w.ide</ide><ide>lokib-bn.ide</ide><ide>miner-qa.ide</ide><ide>miner-qo.ide</ide><ide>msil-lyd.ide</ide><ide>msil-lye.ide</ide><ide>msil-lyf.ide</ide><ide>msil-lyi.ide</ide><ide>msil-lyt.ide</ide><ide>msil-lyu.ide</ide><ide>msil-lzb.ide</ide><ide>msil-lzh.ide</ide><ide>nanoc-bi.ide</ide><ide>n
03.01.2019 16:48:39 0AA0 D SAVXP Adapter: StateChanged()
03.01.2019 16:48:39 0AA0 D SAVXP Adapter: Match state: NoComparison
03.01.2019 16:48:39 0AA0 D SAVXP Adapter: Match state: NoComparison
03.01.2019 16:48:39 0AA0 D SAVXP Adapter: Match state: NoComparison
03.01.2019 16:48:39 0AA0 D SAVXP Adapter: Match state: NoComparison
03.01.2019 16:48:39 0AA0 D SAVXP Adapter: Match state: NoComparison
03.01.2019 16:48:39 0AA0 D SAVXP Adapter: QMReportedInStatus is disabled, status xml will not contain QMList.
03.01.2019 16:48:39 0AA0 I SAV state observer notified that SAV is running
03.01.2019 16:48:39 0AA0 I SAV state observer received a status: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<status xmlns="http://www.sophos.com/EE/EESavStatus"><csc:CompRes xmlns:csc="com.sophos\msys\csc" Res="NoRef" RevID="" policyType="2"/><csc:CompRes xmlns:csc="com.sophos\msys\csc" Res="NoRef" RevID="" policyType="7"/><ac:onAccess xmlns:ac="com.sophos\mansys\applicationcontrol" value="0"/><csc:CompRes xmlns:csc="com.sophos\msys\csc" Res="NoRef" RevID="" policyType="19"/><tp:tamperProtectionStatus xmlns:tp="http://www.sophos.com/xml/msys/tamperprotectionstatus.xsd" scanningState="off"/><csc:CompRes xmlns:csc="com.sophos\msys\csc" Res="NoRef" RevID="" policyType="15"/><dat:dataControlStatus xmlns:dat="http://www.sophos.com/xml/msys/datacontrol.xsd" scanningState="off"/><csc:CompRes xmlns:csc="com.sophos\msys\csc" Res="NoRef" RevID="" policyType="16"/><dev:deviceControlStatus xmlns:dev="http://www.sophos.com/xml/msys/devicecontrol.xsd" scanningState="off"/><entity><productId>SAVEEXP</productId><product-version>10.8.2 VE3.73.0</product-version><entityInfo>SAVXP.10.8.2 VE3.73.0</entityInfo></entity><vdl-info><virus-engine-version>3.73.0</virus-engine-version><virus-data-version>5.58</virus-data-version><idelist><ide>age-baef.ide</ide><ide>age-bafb.ide</ide><ide>age-bafd.ide</ide><ide>age-bagh.ide</ide><ide>age-baig.ide</ide><ide>age-baij.ide</ide><ide>age-bair.ide</ide><ide>age-bake.ide</ide><ide>auto-chk.ide</ide><ide>bank-gxl.ide</ide><ide>batdl-af.ide</ide><ide>bckdo-ak.ide</ide><ide>bdoo-bhh.ide</ide><ide>betab-bs.ide</ide><ide>blada-lb.ide</ide><ide>blada-lx.ide</ide><ide>bokbot-b.ide</ide><ide>cryakl-q.ide</ide><ide>cryakl-u.ide</ide><ide>cryakl-w.ide</ide><ide>darkc-ib.ide</ide><ide>delf-gzt.ide</ide><ide>delf-had.ide</ide><ide>dharma-c.ide</ide><ide>docd-qmw.ide</ide><ide>docd-qsr.ide</ide><ide>docd-qve.ide</ide><ide>docd-qzt.ide</ide><ide>docd-rdi.ide</ide><ide>docd-rgz.ide</ide><ide>docd-rhg.ide</ide><ide>docph-cj.ide</ide><ide>drid-aak.ide</ide><ide>drid-aap.ide</ide><ide>drop-ahu.ide</ide><ide>dwnl-wzk.ide</ide><ide>emot-ajp.ide</ide><ide>emot-ake.ide</ide><ide>emot-akh.ide</ide><ide>emot-ako.ide</ide><ide>emot-akt.ide</ide><ide>emot-aku.ide</ide><ide>emot-alh.ide</ide><ide>emot-alq.ide</ide><ide>emot-alr.ide</ide><ide>emot-amc.ide</ide><ide>emot-ams.ide</ide><ide>emot-amy.ide</ide><ide>emot-anj.ide</ide><ide>emot-anm.ide</ide><ide>emot-ann.ide</ide><ide>emot-anq.ide</ide><ide>emot-anr.ide</ide><ide>emot-ans.ide</ide><ide>emot-aop.ide</ide><ide>emot-aox.ide</ide><ide>emot-apc.ide</ide><ide>emot-aqj.ide</ide><ide>emot-ara.ide</ide><ide>emot-ari.ide</ide><ide>emot-arn.ide</ide><ide>emot-aro.ide</ide><ide>emot-asr.ide</ide><ide>emot-asw.ide</ide><ide>encdo-et.ide</ide><ide>encdo-fz.ide</ide><ide>encdo-hc.ide</ide><ide>encdo-hn.ide</ide><ide>fare-gds.ide</ide><ide>fare-gea.ide</ide><ide>fare-geg.ide</ide><ide>fare-gei.ide</ide><ide>fare-gem.ide</ide><ide>fare-geq.ide</ide><ide>fare-ges.ide</ide><ide>fare-gex.ide</ide><ide>fare-gfo.ide</ide><ide>fare-ggz.ide</ide><ide>fare-ghu.ide</ide><ide>fare-gip.ide</ide><ide>fare-gjf.ide</ide><ide>fare-gji.ide</ide><ide>fare-gjm.ide</ide><ide>fare-gjn.ide</ide><ide>fare-gjx.ide</ide><ide>fare-gkc.ide</ide><ide>fare-gkj.ide</ide><ide>fare-gkk.ide</ide><ide>fare-gkp.ide</ide><ide>fare-gkq.ide</ide><ide>fare-gkt.ide</ide><ide>formb-gj.ide</ide><ide>formb-go.ide</ide><ide>fuerbo-w.ide</ide><ide>gootki-n.ide</ide><ide>gootki-o.ide</ide><ide>gootki-y.ide</ide><ide>hawke-ss.ide</ide><ide>htmld-kj.ide</ide><ide>htmld-kt.ide</ide><ide>icedid-c.ide</ide><ide>inje-dqo.ide</ide><ide>inje-dqx.ide</ide><ide>inje-dsf.ide</ide><ide>inje-dsj.ide</ide><ide>inje-dsp.ide</ide><ide>inje-dsr.ide</ide><ide>inje-dsu.ide</ide><ide>inje-dsv.ide</ide><ide>keylo-vo.ide</ide><ide>lnk-bc.ide</ide><ide>lnkrun-x.ide</ide><ide>loit-w.ide</ide><ide>lokib-bn.ide</ide><ide>miner-qa.ide</ide><ide>miner-qo.ide</ide><ide>msil-lyd.ide</ide><ide>msil-lye.ide</ide><ide>msil-lyf.ide</ide><ide>msil-lyi.ide</ide><ide>msil-lyt.ide</ide><ide>msil-lyu.ide</ide><ide>msil-lzb.ide</ide><ide>msil-lzh.ide</ide><ide>nanoc-bi.ide</ide><ide>n
03.01.2019 16:48:45 0AA0 D SAVXP Adapter: CSAVMonitor::HandleQMStatusTimer - m_serviceRunning is false(is 1) OR IsQMReportInStatusEnabledInSAVPolicy is OFF

03.01.2019 16:48:50 0464 T CpuUsageMonitorDataProvider::GetTime(): count = 799130406334
03.01.2019 16:48:50 0464 T CpuUsageMonitorDataProvider::GetTime(): frequency = 10000000
03.01.2019 16:48:50 0464 T CpuUsageMonitorDataProvider::GetTime(): time = 79913040 ms
03.01.2019 16:48:50 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process kernel time = 484 ms
03.01.2019 16:48:50 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process user time = 1328 ms
03.01.2019 16:48:50 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process time = 1812 ms
03.01.2019 16:48:50 0464 T CpuUsageMonitor: usage = 1704 ms
03.01.2019 16:48:50 0464 T CpuUsageMonitor: duration = 15012 ms
03.01.2019 16:48:50 0464 T CpuUsageMonitor: percent = 11
03.01.2019 16:48:55 0AA0 D SAVXP Adapter: CSAVMonitor::HandleQMStatusTimer - m_serviceRunning is false(is 1) OR IsQMReportInStatusEnabledInSAVPolicy is OFF

03.01.2019 16:49:05 0464 T CpuUsageMonitorDataProvider::GetTime(): count = 799280500102
03.01.2019 16:49:05 0464 T CpuUsageMonitorDataProvider::GetTime(): frequency = 10000000
03.01.2019 16:49:05 0464 T CpuUsageMonitorDataProvider::GetTime(): time = 79928050 ms
03.01.2019 16:49:05 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process kernel time = 484 ms
03.01.2019 16:49:05 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process user time = 1328 ms
03.01.2019 16:49:05 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process time = 1812 ms
03.01.2019 16:49:05 0464 T CpuUsageMonitor: usage = 0 ms
03.01.2019 16:49:05 0464 T CpuUsageMonitor: duration = 15010 ms
03.01.2019 16:49:05 0464 T CpuUsageMonitor: percent = 0
03.01.2019 16:49:05 0AA0 D SAVXP Adapter: CSAVMonitor::HandleQMStatusTimer - m_serviceRunning is false(is 1) OR IsQMReportInStatusEnabledInSAVPolicy is OFF

03.01.2019 16:49:16 0AA0 D SAVXP Adapter: CSAVMonitor::HandleQMStatusTimer - m_serviceRunning is false(is 1) OR IsQMReportInStatusEnabledInSAVPolicy is OFF

03.01.2019 16:49:20 0D18 E CORBA::Exception: Caught CORBA system exception, ID 'IDL:omg.org/CORBA/TRANSIENT:1.0'
OMG minor code (2), described as '*unknown description*', completed = NO
 ClientConnection::Reconnect()

03.01.2019 16:49:20 0D18 T ClientConnection::Reconnect: Calling disconnect
03.01.2019 16:49:20 0D18 D MSClient::Disconnect().
03.01.2019 16:49:20 0D18 D MSClient::Shutdown().
03.01.2019 16:49:20 0D18 T MSClient::CleanUpORB() called.
03.01.2019 16:49:20 0D18 T ClientConnection::Process: Starting to wait for termination condition
03.01.2019 16:49:20 0700 I SAUAdapter - SAU IPCListener::Wait received message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSStartUpdate" />
03.01.2019 16:49:20 0700 I SAUAdapter - SAU StartingUpdate has been set
03.01.2019 16:49:20 0700 I SAUAdapter - SAU IPCListener::Wait Waiting for more messages
03.01.2019 16:49:20 0464 T CpuUsageMonitorDataProvider::GetTime(): count = 799430781222
03.01.2019 16:49:20 0464 T CpuUsageMonitorDataProvider::GetTime(): frequency = 10000000
03.01.2019 16:49:20 0464 T CpuUsageMonitorDataProvider::GetTime(): time = 79943078 ms
03.01.2019 16:49:20 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process kernel time = 484 ms
03.01.2019 16:49:20 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process user time = 1328 ms
03.01.2019 16:49:20 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process time = 1812 ms
03.01.2019 16:49:20 0464 T CpuUsageMonitor: usage = 0 ms
03.01.2019 16:49:20 0464 T CpuUsageMonitor: duration = 15028 ms
03.01.2019 16:49:20 0464 T CpuUsageMonitor: percent = 0
03.01.2019 16:49:25 0D18 T ClientConnection::Process: Wokeup from termination condition
03.01.2019 16:49:25 0D18 T ClientConnection::Process: Calling Reconnect
03.01.2019 16:49:25 0D18 T ClientConnection::Reconnect: Calling connect
03.01.2019 16:49:25 0D18 D MSClient::Connect().
03.01.2019 16:49:25 0D18 I Initializing ...
03.01.2019 16:49:25 0D18 T MSClient::InitORB() called.
03.01.2019 16:49:25 0D18 I Running certificate verification...
03.01.2019 16:49:25 0D18 D Verifying certificate and key integrity ...
03.01.2019 16:49:25 0D18 D The certificate hashing algorithm is sha256WithRSAEncryption.
03.01.2019 16:49:25 0D18 D The key size is 2048.
03.01.2019 16:49:25 0D18 I Compliant certificate hashing algorithm.
03.01.2019 16:49:25 0D18 D Certificate verification passed
03.01.2019 16:49:25 0D18 D Setting up SSL context for client interface.
03.01.2019 16:49:26 0AA0 D SAVXP Adapter: CSAVMonitor::HandleQMStatusTimer - m_serviceRunning is false(is 1) OR IsQMReportInStatusEnabledInSAVPolicy is OFF

03.01.2019 16:49:26 0D18 D Private key size: 2048 bits
03.01.2019 16:49:26 0D18 D Set up SSL context for client interface.
03.01.2019 16:49:26 0D18 D Getting the client interface.
03.01.2019 16:49:27 0700 I SAUAdapter - SAU IPCListener::Wait received message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate" />
03.01.2019 16:49:27 0700 I SAUAdapter - SAU FinishedUpdate has been set
03.01.2019 16:49:27 0700 I SAUAdapter - SAU ReportStatus::FinishedUpdate: Failed to read UpdateSource value in the UpdateStatus registry key.
03.01.2019 16:49:27 0700 I SAUAdapter - SAU AdapterImpl:: Notifing agent of xml change: <?xml version="1.0" encoding="utf-8" ?><event xmlns="http://www.sophos.com/EE/AUEvent" type="sophos.mgt.entityAppEvent"><timestamp>20190103 164927</timestamp><user><userId></userId><domain></domain></user><appInfo><number>0</number><message><message_inserts><insert></insert><insert></insert><insert></insert><insert></insert><insert></insert></message_inserts></message><updateSource></updateSource></appInfo><entityInfo xmlns="http://www.sophos.com/EntityInfo">AGENT:WIN:1.0.0</entityInfo></event>
03.01.2019 16:49:27 0700 T EventObserver::Notify()
03.01.2019 16:49:27 0700 I ALC event observer received an event: <?xml version="1.0" encoding="utf-8" ?><event xmlns="http://www.sophos.com/EE/AUEvent" type="sophos.mgt.entityAppEvent"><timestamp>20190103 164927</timestamp><user><userId></userId><domain></domain></user><appInfo><number>0</number><message><message_inserts><insert></insert><insert></insert><insert></insert><insert></insert><insert></insert></message_inserts></message><updateSource></updateSource></appInfo><entityInfo xmlns="http://www.sophos.com/EntityInfo">AGENT:WIN:1.0.0</entityInfo></event>
03.01.2019 16:49:27 0700 T NewEventJob ctr called:adapter=ALC
03.01.2019 16:49:27 0700 I SAUAdapter - SAU Update status information saved to C:\ProgramData\Sophos\AutoUpdate\data\status\AUAdapter.xml
03.01.2019 16:49:27 0700 I SAUAdapter - SAU IPCListener::Wait Waiting for more messages
03.01.2019 16:49:35 0464 T CpuUsageMonitorDataProvider::GetTime(): count = 799580814922
03.01.2019 16:49:35 0464 T CpuUsageMonitorDataProvider::GetTime(): frequency = 10000000
03.01.2019 16:49:35 0464 T CpuUsageMonitorDataProvider::GetTime(): time = 79958081 ms
03.01.2019 16:49:35 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process kernel time = 484 ms
03.01.2019 16:49:35 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process user time = 1828 ms
03.01.2019 16:49:35 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process time = 2312 ms
03.01.2019 16:49:35 0464 T CpuUsageMonitor: usage = 500 ms
03.01.2019 16:49:35 0464 T CpuUsageMonitor: duration = 15003 ms
03.01.2019 16:49:35 0464 T CpuUsageMonitor: percent = 3
03.01.2019 16:49:36 0AA0 D SAVXP Adapter: CSAVMonitor::HandleQMStatusTimer - m_serviceRunning is false(is 1) OR IsQMReportInStatusEnabledInSAVPolicy is OFF

03.01.2019 16:49:46 0AA0 D SAVXP Adapter: CSAVMonitor::HandleQMStatusTimer - m_serviceRunning is false(is 1) OR IsQMReportInStatusEnabledInSAVPolicy is OFF

03.01.2019 16:49:50 0464 T CpuUsageMonitorDataProvider::GetTime(): count = 799730970291
03.01.2019 16:49:50 0464 T CpuUsageMonitorDataProvider::GetTime(): frequency = 10000000
03.01.2019 16:49:50 0464 T CpuUsageMonitorDataProvider::GetTime(): time = 79973097 ms
03.01.2019 16:49:50 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process kernel time = 484 ms
03.01.2019 16:49:50 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process user time = 1828 ms
03.01.2019 16:49:50 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process time = 2312 ms
03.01.2019 16:49:50 0464 T CpuUsageMonitor: usage = 0 ms
03.01.2019 16:49:50 0464 T CpuUsageMonitor: duration = 15016 ms
03.01.2019 16:49:50 0464 T CpuUsageMonitor: percent = 0
03.01.2019 16:49:56 0AA0 D SAVXP Adapter: CSAVMonitor::HandleQMStatusTimer - m_serviceRunning is false(is 1) OR IsQMReportInStatusEnabledInSAVPolicy is OFF

03.01.2019 16:50:05 0464 T CpuUsageMonitorDataProvider::GetTime(): count = 799881076164
03.01.2019 16:50:05 0464 T CpuUsageMonitorDataProvider::GetTime(): frequency = 10000000
03.01.2019 16:50:05 0464 T CpuUsageMonitorDataProvider::GetTime(): time = 79988107 ms
03.01.2019 16:50:05 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process kernel time = 484 ms
03.01.2019 16:50:05 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process user time = 1828 ms
03.01.2019 16:50:05 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process time = 2312 ms
03.01.2019 16:50:05 0464 T CpuUsageMonitor: usage = 0 ms
03.01.2019 16:50:05 0464 T CpuUsageMonitor: duration = 15010 ms
03.01.2019 16:50:05 0464 T CpuUsageMonitor: percent = 0
03.01.2019 16:50:06 0AA0 D SAVXP Adapter: CSAVMonitor::HandleQMStatusTimer - m_serviceRunning is false(is 1) OR IsQMReportInStatusEnabledInSAVPolicy is OFF

03.01.2019 16:50:08 0D18 E CORBA::Exception: Caught CORBA system exception, ID 'IDL:omg.org/CORBA/TRANSIENT:1.0'
OMG minor code (2), described as '*unknown description*', completed = NO
 ClientConnection::Reconnect()

03.01.2019 16:50:08 0D18 T ClientConnection::Reconnect: Calling disconnect
03.01.2019 16:50:08 0D18 D MSClient::Disconnect().
03.01.2019 16:50:08 0D18 D MSClient::Shutdown().
03.01.2019 16:50:08 0D18 T MSClient::CleanUpORB() called.
03.01.2019 16:50:08 0D18 T ClientConnection::Process: Starting to wait for termination condition
03.01.2019 16:50:13 0D18 T ClientConnection::Process: Wokeup from termination condition
03.01.2019 16:50:13 0D18 T ClientConnection::Process: Calling Reconnect
03.01.2019 16:50:13 0D18 T ClientConnection::Reconnect: Calling connect
03.01.2019 16:50:13 0D18 D MSClient::Connect().
03.01.2019 16:50:13 0D18 I Initializing ...
03.01.2019 16:50:13 0D18 T MSClient::InitORB() called.
03.01.2019 16:50:13 0D18 I Running certificate verification...
03.01.2019 16:50:13 0D18 D Verifying certificate and key integrity ...
03.01.2019 16:50:13 0D18 D The certificate hashing algorithm is sha256WithRSAEncryption.
03.01.2019 16:50:13 0D18 D The key size is 2048.
03.01.2019 16:50:13 0D18 I Compliant certificate hashing algorithm.
03.01.2019 16:50:13 0D18 D Certificate verification passed
03.01.2019 16:50:13 0D18 D Setting up SSL context for client interface.
03.01.2019 16:50:13 0D18 D Private key size: 2048 bits
03.01.2019 16:50:13 0D18 D Set up SSL context for client interface.
03.01.2019 16:50:13 0D18 D Getting the client interface.
03.01.2019 16:50:16 0AA0 D SAVXP Adapter: CSAVMonitor::HandleQMStatusTimer - m_serviceRunning is false(is 1) OR IsQMReportInStatusEnabledInSAVPolicy is OFF

03.01.2019 16:50:20 0464 T CpuUsageMonitorDataProvider::GetTime(): count = 800031143089
03.01.2019 16:50:20 0464 T CpuUsageMonitorDataProvider::GetTime(): frequency = 10000000
03.01.2019 16:50:20 0464 T CpuUsageMonitorDataProvider::GetTime(): time = 80003114 ms
03.01.2019 16:50:20 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process kernel time = 484 ms
03.01.2019 16:50:20 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process user time = 2343 ms
03.01.2019 16:50:20 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process time = 2827 ms
03.01.2019 16:50:20 0464 T CpuUsageMonitor: usage = 515 ms
03.01.2019 16:50:20 0464 T CpuUsageMonitor: duration = 15007 ms
03.01.2019 16:50:20 0464 T CpuUsageMonitor: percent = 3
03.01.2019 16:50:26 0AA0 D SAVXP Adapter: CSAVMonitor::HandleQMStatusTimer - m_serviceRunning is false(is 1) OR IsQMReportInStatusEnabledInSAVPolicy is OFF

03.01.2019 16:50:35 0464 T CpuUsageMonitorDataProvider::GetTime(): count = 800181286039
03.01.2019 16:50:35 0464 T CpuUsageMonitorDataProvider::GetTime(): frequency = 10000000
03.01.2019 16:50:35 0464 T CpuUsageMonitorDataProvider::GetTime(): time = 80018128 ms
03.01.2019 16:50:35 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process kernel time = 484 ms
03.01.2019 16:50:35 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process user time = 2343 ms
03.01.2019 16:50:35 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process time = 2827 ms
03.01.2019 16:50:35 0464 T CpuUsageMonitor: usage = 0 ms
03.01.2019 16:50:35 0464 T CpuUsageMonitor: duration = 15014 ms
03.01.2019 16:50:35 0464 T CpuUsageMonitor: percent = 0
03.01.2019 16:50:36 0AA0 D SAVXP Adapter: CSAVMonitor::HandleQMStatusTimer - m_serviceRunning is false(is 1) OR IsQMReportInStatusEnabledInSAVPolicy is OFF

03.01.2019 16:50:46 0AA0 D SAVXP Adapter: CSAVMonitor::HandleQMStatusTimer - m_serviceRunning is false(is 1) OR IsQMReportInStatusEnabledInSAVPolicy is OFF

03.01.2019 16:50:51 0464 T CpuUsageMonitorDataProvider::GetTime(): count = 800331440509
03.01.2019 16:50:51 0464 T CpuUsageMonitorDataProvider::GetTime(): frequency = 10000000
03.01.2019 16:50:51 0464 T CpuUsageMonitorDataProvider::GetTime(): time = 80033144 ms
03.01.2019 16:50:51 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process kernel time = 484 ms
03.01.2019 16:50:51 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process user time = 2343 ms
03.01.2019 16:50:51 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process time = 2827 ms
03.01.2019 16:50:51 0464 T CpuUsageMonitor: usage = 0 ms
03.01.2019 16:50:51 0464 T CpuUsageMonitor: duration = 15016 ms
03.01.2019 16:50:51 0464 T CpuUsageMonitor: percent = 0
03.01.2019 16:50:55 0D18 E CORBA::Exception: Caught CORBA system exception, ID 'IDL:omg.org/CORBA/TRANSIENT:1.0'
OMG minor code (2), described as '*unknown description*', completed = NO
 ClientConnection::Reconnect()

03.01.2019 16:50:55 0D18 T ClientConnection::Reconnect: Calling disconnect
03.01.2019 16:50:55 0D18 D MSClient::Disconnect().
03.01.2019 16:50:55 0D18 D MSClient::Shutdown().
03.01.2019 16:50:55 0D18 T MSClient::CleanUpORB() called.
03.01.2019 16:50:55 0D18 T ClientConnection::Process: Starting to wait for termination condition
03.01.2019 16:50:56 0AA0 D SAVXP Adapter: CSAVMonitor::HandleQMStatusTimer - m_serviceRunning is false(is 1) OR IsQMReportInStatusEnabledInSAVPolicy is OFF

03.01.2019 16:51:00 0D18 T ClientConnection::Process: Wokeup from termination condition
03.01.2019 16:51:00 0D18 T ClientConnection::Process: Calling Reconnect
03.01.2019 16:51:00 0D18 T ClientConnection::Reconnect: Calling connect
03.01.2019 16:51:00 0D18 D MSClient::Connect().
03.01.2019 16:51:00 0D18 I Initializing ...
03.01.2019 16:51:00 0D18 T MSClient::InitORB() called.
03.01.2019 16:51:00 0D18 I Running certificate verification...
03.01.2019 16:51:00 0D18 D Verifying certificate and key integrity ...
03.01.2019 16:51:01 0D18 D The certificate hashing algorithm is sha256WithRSAEncryption.
03.01.2019 16:51:01 0D18 D The key size is 2048.
03.01.2019 16:51:01 0D18 I Compliant certificate hashing algorithm.
03.01.2019 16:51:01 0D18 D Certificate verification passed
03.01.2019 16:51:01 0D18 D Setting up SSL context for client interface.
03.01.2019 16:51:01 0D18 D Private key size: 2048 bits
03.01.2019 16:51:01 0D18 D Set up SSL context for client interface.
03.01.2019 16:51:01 0D18 D Getting the client interface.
03.01.2019 16:51:06 0464 T CpuUsageMonitorDataProvider::GetTime(): count = 800481469193
03.01.2019 16:51:06 0464 T CpuUsageMonitorDataProvider::GetTime(): frequency = 10000000
03.01.2019 16:51:06 0464 T CpuUsageMonitorDataProvider::GetTime(): time = 80048146 ms
03.01.2019 16:51:06 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process kernel time = 484 ms
03.01.2019 16:51:06 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process user time = 2843 ms
03.01.2019 16:51:06 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process time = 3327 ms
03.01.2019 16:51:06 0464 T CpuUsageMonitor: usage = 500 ms
03.01.2019 16:51:06 0464 T CpuUsageMonitor: duration = 15002 ms
03.01.2019 16:51:06 0464 T CpuUsageMonitor: percent = 3
03.01.2019 16:51:06 0AA0 D SAVXP Adapter: CSAVMonitor::HandleQMStatusTimer - m_serviceRunning is false(is 1) OR IsQMReportInStatusEnabledInSAVPolicy is OFF

03.01.2019 16:51:16 0AA0 D SAVXP Adapter: CSAVMonitor::HandleQMStatusTimer - m_serviceRunning is false(is 1) OR IsQMReportInStatusEnabledInSAVPolicy is OFF

03.01.2019 16:51:21 0464 T CpuUsageMonitorDataProvider::GetTime(): count = 800631481557
03.01.2019 16:51:21 0464 T CpuUsageMonitorDataProvider::GetTime(): frequency = 10000000
03.01.2019 16:51:21 0464 T CpuUsageMonitorDataProvider::GetTime(): time = 80063148 ms
03.01.2019 16:51:21 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process kernel time = 484 ms
03.01.2019 16:51:21 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process user time = 2843 ms
03.01.2019 16:51:21 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process time = 3327 ms
03.01.2019 16:51:21 0464 T CpuUsageMonitor: usage = 0 ms
03.01.2019 16:51:21 0464 T CpuUsageMonitor: duration = 15002 ms
03.01.2019 16:51:21 0464 T CpuUsageMonitor: percent = 0
03.01.2019 16:51:26 0AA0 D SAVXP Adapter: CSAVMonitor::HandleQMStatusTimer - m_serviceRunning is false(is 1) OR IsQMReportInStatusEnabledInSAVPolicy is OFF

03.01.2019 16:51:36 0464 T CpuUsageMonitorDataProvider::GetTime(): count = 800781586413
03.01.2019 16:51:36 0464 T CpuUsageMonitorDataProvider::GetTime(): frequency = 10000000
03.01.2019 16:51:36 0464 T CpuUsageMonitorDataProvider::GetTime(): time = 80078158 ms
03.01.2019 16:51:36 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process kernel time = 484 ms
03.01.2019 16:51:36 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process user time = 2843 ms
03.01.2019 16:51:36 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process time = 3327 ms
03.01.2019 16:51:36 0464 T CpuUsageMonitor: usage = 0 ms
03.01.2019 16:51:36 0464 T CpuUsageMonitor: duration = 15010 ms
03.01.2019 16:51:36 0464 T CpuUsageMonitor: percent = 0
03.01.2019 16:51:36 0AA0 D SAVXP Adapter: CSAVMonitor::HandleQMStatusTimer - m_serviceRunning is false(is 1) OR IsQMReportInStatusEnabledInSAVPolicy is OFF

03.01.2019 16:51:43 0D18 E CORBA::Exception: Caught CORBA system exception, ID 'IDL:omg.org/CORBA/TRANSIENT:1.0'
OMG minor code (2), described as '*unknown description*', completed = NO
 ClientConnection::Reconnect()

03.01.2019 16:51:43 0D18 T ClientConnection::Reconnect: Calling disconnect
03.01.2019 16:51:43 0D18 D MSClient::Disconnect().
03.01.2019 16:51:43 0D18 D MSClient::Shutdown().
03.01.2019 16:51:43 0D18 T MSClient::CleanUpORB() called.
03.01.2019 16:51:43 0D18 T ClientConnection::Process: Starting to wait for termination condition
03.01.2019 16:51:46 0AA0 D SAVXP Adapter: CSAVMonitor::HandleQMStatusTimer - m_serviceRunning is false(is 1) OR IsQMReportInStatusEnabledInSAVPolicy is OFF

03.01.2019 16:51:48 0D18 T ClientConnection::Process: Wokeup from termination condition
03.01.2019 16:51:48 0D18 T ClientConnection::Process: Calling Reconnect
03.01.2019 16:51:48 0D18 T ClientConnection::Reconnect: Calling connect
03.01.2019 16:51:48 0D18 D MSClient::Connect().
03.01.2019 16:51:48 0D18 I Initializing ...
03.01.2019 16:51:48 0D18 T MSClient::InitORB() called.
03.01.2019 16:51:48 0D18 I Running certificate verification...
03.01.2019 16:51:48 0D18 D Verifying certificate and key integrity ...
03.01.2019 16:51:48 0D18 D The certificate hashing algorithm is sha256WithRSAEncryption.
03.01.2019 16:51:48 0D18 D The key size is 2048.
03.01.2019 16:51:48 0D18 I Compliant certificate hashing algorithm.
03.01.2019 16:51:48 0D18 D Certificate verification passed
03.01.2019 16:51:48 0D18 D Setting up SSL context for client interface.
03.01.2019 16:51:48 0D18 D Private key size: 2048 bits
03.01.2019 16:51:48 0D18 D Set up SSL context for client interface.
03.01.2019 16:51:48 0D18 D Getting the client interface.
03.01.2019 16:51:51 0464 T CpuUsageMonitorDataProvider::GetTime(): count = 800931644697
03.01.2019 16:51:51 0464 T CpuUsageMonitorDataProvider::GetTime(): frequency = 10000000
03.01.2019 16:51:51 0464 T CpuUsageMonitorDataProvider::GetTime(): time = 80093164 ms
03.01.2019 16:51:51 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process kernel time = 484 ms
03.01.2019 16:51:51 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process user time = 3281 ms
03.01.2019 16:51:51 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process time = 3765 ms
03.01.2019 16:51:51 0464 T CpuUsageMonitor: usage = 438 ms
03.01.2019 16:51:51 0464 T CpuUsageMonitor: duration = 15006 ms
03.01.2019 16:51:51 0464 T CpuUsageMonitor: percent = 2
03.01.2019 16:51:56 0AA0 D SAVXP Adapter: CSAVMonitor::HandleQMStatusTimer - m_serviceRunning is false(is 1) OR IsQMReportInStatusEnabledInSAVPolicy is OFF

03.01.2019 16:52:06 0464 T CpuUsageMonitorDataProvider::GetTime(): count = 801082051494
03.01.2019 16:52:06 0464 T CpuUsageMonitorDataProvider::GetTime(): frequency = 10000000
03.01.2019 16:52:06 0464 T CpuUsageMonitorDataProvider::GetTime(): time = 80108205 ms
03.01.2019 16:52:06 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process kernel time = 484 ms
03.01.2019 16:52:06 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process user time = 3281 ms
03.01.2019 16:52:06 0464 T CpuUsageMonitorDataProvider::GetTotalProcessCpuUsage(): process time = 3765 ms
03.01.2019 16:52:06 0464 T CpuUsageMonitor: usage = 0 ms
03.01.2019 16:52:06 0464 T CpuUsageMonitor: duration = 15041 ms
03.01.2019 16:52:06 0464 T CpuUsageMonitor: percent = 0
03.01.2019 16:52:06 0AA0 D SAVXP Adapter: CSAVMonitor::HandleQMStatusTimer - m_serviceRunning is false(is 1) OR IsQMReportInStatusEnabledInSAVPolicy is OFF

Hello Ben@ryehills,

the Router log should show "something" around 16:29:27 - the Agent should forward the status from AU to the Router which passes it to SEC. There should be a localhost connection between Agent and Router. Can't give more details right now (writing this from don't ask-where and off the top of my head).

Is the server appearing as manged and connected and  just not reporting its status? If so, make some request from the console (Update, Full Scan) and check the logs.

Christian

QC said:

Hello Ben@ryehills,

the Router log should show "something" around 16:29:27 - the Agent should forward the status from AU to the Router which passes it to SEC. There should be a localhost connection between Agent and Router. Can't give more details right now (writing this from don't ask-where and off the top of my head).

Is the server appearing as manged and connected and  just not reporting its status? If so, make some request from the console (Update, Full Scan) and check the logs.

Christian

 

After uninstalling Sophos off the server completely the last time, restarting when asked and renaming the Sophos folder under program file for a fresh install. I then used SEC to push Sophos to the server and as far as I know it install ok and all components look like they are there.

It seems to be updating ok (what I can see) but under task scheduler there is no scan schedule, so I'm guessing it not pushing the policy's out and its not reporting back to SEC. the icon is just greyed out like its not installed/reporting

Ben

QC said:

Hello Ben@ryehills,

the Router log should show "something" around 16:29:27 - the Agent should forward the status from AU to the Router which passes it to SEC. There should be a localhost connection between Agent and Router. Can't give more details right now (writing this from don't ask-where and off the top of my head).

Is the server appearing as manged and connected and  just not reporting its status? If so, make some request from the console (Update, Full Scan) and check the logs.

Christian

 

After uninstalling Sophos off the server completely the last time, restarting when asked and renaming the Sophos folder under program file for a fresh install. I then used SEC to push Sophos to the server and as far as I know it install ok and all components look like they are there.

It seems to be updating ok (what I can see) but under task scheduler there is no scan schedule, so I'm guessing it not pushing the policy's out and its not reporting back to SEC. the icon is just greyed out like its not installed/reporting

Ben

Hello Ben,

it seems the Agent isn't talking to the Router and v.v. The Router log from the same time might give some insight. IIRC (don't have a Windows machine within reach) the Agent connects to the Router via TCP. There's a post that suggests that this might fail under certain circumstances.

Christian