<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 13/03/13 8:06 AM, Simmons Clint
wrote:<br>
</div>
<blockquote
cite="mid:1EAA870A6AB7754A8C197853A8FA6F110B0A381A@EXMBUS01.crifnet.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style>
<!--
@font-face
{font-family:Calibri}
@font-face
{font-family:Tahoma}
@font-face
{font-family:Verdana}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif"}
span.EmailStyle17
{font-family:"Calibri","sans-serif";
color:windowtext}
span.BalloonTextChar
{font-family:"Tahoma","sans-serif"}
.MsoChpDefault
{font-family:"Calibri","sans-serif"}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
div.WordSection1
{}
-->
</style>
<div class="WordSection1">
<p class="MsoNormal">We recently upgraded our Symantec AV
server, and started to cut the clients over from SEP client
11.x to SEP client 12.x. In doing so the service name changed
after a reboot from “Symantec Antivirus” to “SepMasterClient”</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">The BBWin agent on either 12.x or 13.x does
not send the new service name over to the Xymon server
properly and therefore is unable to match the service name.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">We are running all clients in a central
mode.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">This also does not appear to be a 32bit vs
64bit issue as we have noticed the issue persists on the 32bit
machines.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Has anyone else had this issue with the
BBWin agent not sending all windows services properly?
</p>
<p class="MsoNormal"> <br>
</p>
</div>
</blockquote>
Yes - the "MsMpSvc" (Microsoft Antimalware Service) - part of SCEP -
does not appear in the list of services BBWin reports.<br>
<br>
I worked around this by checking for 1 and only 1 running instance
on MsMpEng.exe in PROC in analysis.cfg<br>
<br>
PROC MsMpEng.exe 1 1<br>
<br>
This is also a way to check that a service that may not be installed
is not running (change "1 1" to "0 0")<br>
<br>
David.<br>
<pre class="moz-signature" cols="72">--
David Baldwin - Senior Systems Administrator (Datacentres + Networks)
Information and Communication Technology Services
Australian Sports Commission <a class="moz-txt-link-freetext" href="http://ausport.gov.au">http://ausport.gov.au</a>
Tel 02 62147830 Fax 02 62141830 PO Box 176 Belconnen ACT 2616
<a class="moz-txt-link-abbreviated" href="mailto:david.baldwin@ausport.gov.au">david.baldwin@ausport.gov.au</a> Leverrier Street Bruce ACT 2617
</pre>
<br>
<hr>
Keep up to date with what's happening in Australian sport visit <a href="http://www.ausport.gov.au">www.ausport.gov.au</a>
<br><br>
<font size="-2" face="arial">This message is intended for the addressee named and may contain confidential and privileged information. If you are not the intended recipient please note that any form of distribution, copying or use of this communication or the information in it is strictly prohibited and may be unlawful. If you receive this message in error, please delete it and notify the sender.</font>
<hr>
</body>
</html>