we are experiencing frequent network agent crashes. Running 7.8.4 on windows 2012 r2 server.
We tried natunining.ini on Network Agent servers with NbrHandlerThreads=1 or 4 and
eimserver.ini on filtering server with MaxWISPConnections=1000. Neither worked.
event log on NA server:
Log Name: Application
Source: Application Error
Date: 11/19/2015 1:01:51 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: 0000SWEB8NA02.domain name
Description:
Faulting application name: NetworkAgent.exe, version: 7.8.4.1390, time stamp: 0x53da807d
Faulting module name: ntdll.dll, version: 6.3.9600.18007, time stamp: 0x55c4c16b
Exception code: 0xc0000374
Fault offset: 0x00000000000f1280
Faulting process id: 0xd8
Faulting application start time: 0x01d1230d7097bbdd
Faulting application path: C:\Program Files\Websense\Web Security\bin\NetworkAgent.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: c0e63197-8f00-11e5-80d7-98be943d09a4
Faulting package full name:
Faulting package-relative application ID:
NetworkAgent log:
[11/19/2015 12:29:03.062] (2576): Adding protocol Yahoo! Messenger attachments (id: 54)
[11/19/2015 12:29:03.062] (2576): Adding protocol MSN Messenger attachments (id: 55)
[11/19/2015 12:29:03.078] (2576): Adding protocol AOL Instant Messenger or ICQ attachments (id: 56)
[11/19/2015 12:29:03.281] (2576): Adding protocol Bot Networks (id: 92)
[11/19/2015 12:29:03.281] (2576): Adding protocol Email Borne Worms (id: 95)
[11/19/2015 12:29:03.281] (2576): Adding protocol Other (id: 97)
[11/19/2015 12:29:03.281] (2576): Adding protocol Brosix (id: 138)
[11/19/2015 12:29:03.281] (2576): Adding protocol Mail.Ru (id: 147)
[11/19/2015 12:29:03.281] (2576): Adding protocol Octoshape (id: 151)
[11/19/2015 12:29:03.281] (2576): Adding protocol Pandora (id: 148)
[11/19/2015 12:29:03.281] (2576): Adding protocol Instant Housecall (id: 152)
[11/19/2015 12:29:03.281] (2576): Adding protocol Voxox (id: 150)
[11/19/2015 12:29:03.281] (2576): Adding protocol Yuuguu (id: 145)
[11/19/2015 12:29:03.281] (2576): Adding protocol Joost (id: 149)
[11/19/2015 12:29:03.281] (2576): Adding protocol netFM Messenger (id: 146)
[11/19/2015 12:29:03.281] (2576): Adding protocol iSpQ (id: 139)
[11/19/2015 12:29:03.281] (2576): Adding protocol CrossLoop (id: 140)
[11/19/2015 12:29:03.281] (2576): Adding protocol NateOn Messenger Attachments (id: 141)
[11/19/2015 12:29:03.281] (2576): Adding protocol Globe7 (id: 142)
[11/19/2015 12:29:03.281] (2576): Adding protocol Chikka Messenger (id: 143)
[11/19/2015 12:29:03.281] (2576): Adding protocol Live Mesh (id: 144)
[11/19/2015 12:29:03.281] (2576): Adding protocol Revver (id: 155)
[11/19/2015 12:29:03.281] (2576): Adding protocol Hulu (id: 156)
[11/19/2015 12:29:03.281] (2576): Adding protocol ShareNow (id: 161)
[11/19/2015 12:29:03.281] (2576): Adding protocol Badongo Buddy (id: 163)
[11/19/2015 12:29:03.281] (2576): Adding protocol Spotify (id: 165)
[11/19/2015 12:29:03.281] (2576): Adding protocol ClipMoon (id: 157)
[11/19/2015 12:29:03.281] (2576): Adding protocol Comodo EasyVPN (id: 166)
[11/19/2015 12:29:03.281] (2576): Adding protocol MyPlay (id: 164)
[11/19/2015 12:29:03.281] (2576): Adding protocol Goober Messenger (id: 168)
[11/19/2015 12:29:03.281] (2576): Adding protocol Netease Popo (id: 101)
[11/19/2015 12:29:03.281] (2576): Adding protocol Mikogo (id: 167)
[11/19/2015 12:29:03.281] (2576): Adding protocol Opera Unite (id: 159)
[11/19/2015 12:29:03.281] (2576): Adding protocol Dailymotion (id: 160)
[11/19/2015 12:29:03.281] (2576): Adding protocol NateOn (id: 105)
[11/19/2015 12:29:03.281] (2576): Adding protocol YouSendIt (id: 154)
[11/19/2015 12:29:03.281] (2576): Adding protocol NateOn Remote Access (id: 153)
[11/19/2015 12:29:03.281] (2576): Adding protocol Vimeo (id: 158)
[11/19/2015 12:29:03.281] (2576): Adding protocol Palringo (id: 162)
[11/19/2015 12:29:03.281] (2576): Adding protocol Neos (id: 109)
[11/19/2015 12:29:03.281] (2576): Adding protocol Xfire (id: 125)
[11/19/2015 12:29:03.281] (2576): Adding protocol MSC Messenger (id: 126)
[11/19/2015 12:29:03.281] (2576): Adding protocol VZOchat (id: 133)
[11/19/2015 12:29:03.281] (2576): Adding protocol AOL Instant Messenger or ICQ (id: 21)
[11/19/2015 12:29:03.281] (2576): Adding protocol Yahoo! Messenger (id: 3)
[11/19/2015 12:29:03.281] (2576): Adding protocol TryFast Messenger (id: 132)
[11/19/2015 12:29:03.281] (2576): Adding protocol X-IM (id: 119)
[11/19/2015 12:29:03.281] (2576): Adding protocol Tencent QQ (see the Knowledge Base) (id: 49)
[11/19/2015 12:29:03.281] (2576): Adding protocol IRC (id: 5)
[11/19/2015 12:29:03.281] (2576): Adding protocol Gadu-Gadu (id: 66)
[11/19/2015 12:29:03.281] (2576): Adding protocol SIMP (Jabber) (id: 4)
[11/19/2015 12:29:03.281] (2576): Adding protocol Camfrog (id: 72)
[11/19/2015 12:29:03.281] (2576): Adding protocol IMVU (id: 124)
[11/19/2015 12:29:03.281] (2576): Adding protocol Meetro (id: 115)
[11/19/2015 12:29:03.281] (2576): Adding protocol MySpaceIM (id: 116)
[11/19/2015 12:29:03.281] (2576): Adding protocol Yahoo! Mail Chat (id: 127)
[11/19/2015 12:29:03.281] (2576): Adding protocol MSN Messenger (id: 2)
[11/19/2015 12:29:03.281] (2576): Adding protocol Google Talk (id: 79)
[11/19/2015 12:29:03.281] (2576): Adding protocol Wengo (id: 84)
[11/19/2015 12:29:03.281] (2576): Adding protocol HTTPS (id: 11)
[11/19/2015 12:29:03.281] (2576): Adding protocol SoonR (id: 110)
[11/19/2015 12:29:03.281] (2576): Adding protocol Vyew (id: 128)
[11/19/2015 12:29:03.281] (2576): Adding protocol Gizmo Project (id: 87)
[11/19/2015 12:29:03.281] (2576): Adding protocol Zolved (id: 135)
[11/19/2015 12:29:03.281] (2576): Adding protocol SoftEther PacketiX (id: 121)
[11/19/2015 12:29:03.281] (2576): Adding protocol Paltalk (id: 74)
[11/19/2015 12:29:03.281] (2576): Adding protocol BeInSync (id: 134)
[11/19/2015 12:29:03.281] (2576): Adding protocol WallCooler VPN (id: 137)
[11/19/2015 12:29:03.281] (2576): Adding protocol Woize (id: 99)
[11/19/2015 12:29:03.281] (2576): Adding protocol HTTP (id: 1)
[11/19/2015 12:29:03.281] (2576): Adding protocol Telnet (id: 17)
[11/19/2015 12:29:03.281] (2576): Adding protocol Eyeball Chat (id: 77)
[11/19/2015 12:29:03.281] (2576): Adding protocol Wavago (id: 90)
[11/19/2015 12:29:03.281] (2576): Adding protocol MyIVO (id: 102)
[11/19/2015 12:29:03.281] (2576): Adding protocol TeamViewer (id: 131)
[11/19/2015 12:29:03.281] (2576): Adding protocol Terminal Services (id: 38)
[11/19/2015 12:29:03.281] (2576): Adding protocol Citrix (id: 39)
[11/19/2015 12:29:03.281] (2576): Adding protocol Toonel (id: 106)
[11/19/2015 12:29:03.281] (2576): Adding protocol SocksOnline (id: 108)
[11/19/2015 12:29:03.281] (2576): Adding protocol Hopster (id: 65)
[11/19/2015 12:29:03.281] (2576): Adding protocol WebEx (PCNow & Support Center) (id: 85)
[11/19/2015 12:29:03.281] (2576): Adding protocol pcTELECOMMUTE (id: 36)
[11/19/2015 12:29:03.281] (2576): Adding protocol Tor (id: 71)
[11/19/2015 12:29:03.281] (2576): Adding protocol JAP (id: 88)
[11/19/2015 12:29:03.281] (2576): Adding protocol pptp (id: 32)
[11/19/2015 12:29:03.281] (2576): Adding protocol GhostSurf (id: 68)
[11/19/2015 12:29:03.297] (2576): Adding protocol RealTunnel (id: 80)
[11/19/2015 12:29:03.297] (2576): Adding protocol VNC (id: 37)
[11/19/2015 12:29:03.297] (2576): Adding protocol ssh (id: 33)
[11/19/2015 12:29:03.297] (2576): Adding protocol pcANYWHERE (id: 35)
[11/19/2015 12:29:03.297] (2576): Adding protocol LogMeIn (id: 81)
[11/19/2015 12:29:03.297] (2576): Adding protocol TongTongTong (id: 107)
[11/19/2015 12:29:03.297] (2576): Adding protocol Google Web Accelerator (id: 69)
[11/19/2015 12:29:03.297] (2576): Adding protocol BoxCloud (id: 111)
[11/19/2015 12:29:03.297] (2576): Adding protocol Metacafe (id: 130)
[11/19/2015 12:29:03.297] (2576): Adding protocol Windows Media (id: 6)
[11/19/2015 12:29:03.297] (2576): Adding protocol iTunes (id: 67)
[11/19/2015 12:29:03.297] (2576): Adding protocol Google Video (id: 76)
[11/19/2015 12:29:03.297] (2576): Adding protocol SHOUTcast (id: 70)
[11/19/2015 12:29:03.297] (2576): Adding protocol Liquid Audio (id: 46)
[11/19/2015 12:29:03.297] (2576): Adding protocol Social FM (id: 136)
[11/19/2015 12:29:03.297] (2576): Adding protocol Slingbox (id: 103)
[11/19/2015 12:29:03.297] (2576): Adding protocol Finetune (id: 129)
[11/19/2015 12:29:03.297] (2576): Adding protocol PeerCast (id: 82)
[11/19/2015 12:29:03.297] (2576): Adding protocol JetCast (id: 75)
[11/19/2015 12:29:03.297] (2576): Adding protocol AOL Radio (id: 86)
[11/19/2015 12:29:03.297] (2576): Adding protocol FastTrack (Kazaa iMesh) (id: 10)
[11/19/2015 12:29:03.297] (2576): Adding protocol Your Freedom (id: 91)
[11/19/2015 12:29:03.297] (2576): Adding protocol RTSP (QuickTime RealPlayer) (id: 7)
[11/19/2015 12:29:03.297] (2576): Adding protocol FolderShare (id: 100)
[11/19/2015 12:29:03.297] (2576): Adding protocol ClubBox (id: 104)
[11/19/2015 12:29:03.297] (2576): Adding protocol MindSpring (id: 123)
[11/19/2015 12:29:03.297] (2576): Adding protocol eDonkey (id: 42)
[11/19/2015 12:29:03.297] (2576): Adding protocol FTP (id: 12)
[11/19/2015 12:29:03.297] (2576): Adding protocol Gnutella (Morpheus Xolox) (id: 9)
[11/19/2015 12:29:03.297] (2576): Adding protocol Hotline Connect (id: 43)
[11/19/2015 12:29:03.297] (2576): Adding protocol Pando (id: 112)
[11/19/2015 12:29:03.297] (2576): Adding protocol Damaka (id: 113)
[11/19/2015 12:29:03.297] (2576): Adding protocol DirectConnect (id: 64)
[11/19/2015 12:29:03.297] (2576): Adding protocol BitTorrent (id: 48)
[11/19/2015 12:29:03.297] (2576): Adding protocol SoulSeek (id: 118)
[11/19/2015 12:29:03.297] (2576): Adding protocol Skype (id: 53)
[11/19/2015 12:29:03.297] (2576): Adding protocol GigaTribe (id: 114)
[11/19/2015 12:29:03.297] (2576): Adding protocol EZPeer (id: 58)
[11/19/2015 12:29:03.297] (2576): Adding protocol Hamachi (id: 89)
[11/19/2015 12:29:03.297] (2576): Adding protocol Raketu (id: 122)
[11/19/2015 12:29:03.297] (2576): Adding protocol Onshare (id: 117)
[11/19/2015 12:29:03.297] (2576): Adding protocol Qnext (id: 73)
[11/19/2015 12:29:03.297] (2576): Adding protocol Project Neon (id: 83)
[11/19/2015 12:29:03.297] (2576): Adding protocol SQL Net (id: 20)
[11/19/2015 12:29:03.297] (2576): Adding protocol POP3 (id: 15)
[11/19/2015 12:29:03.297] (2576): Adding protocol IMAP (id: 47)
[11/19/2015 12:29:03.297] (2576): Adding protocol Microsoft HTTPMail (id: 78)
[11/19/2015 12:29:03.297] (2576): Adding protocol ident (id: 28)
[11/19/2015 12:29:03.297] (2576): Adding protocol daytime (id: 26)
[11/19/2015 12:29:03.297] (2576): Adding protocol Gopher (id: 13)
[11/19/2015 12:29:03.297] (2576): Adding protocol Lotus Notes (id: 23)
[11/19/2015 12:29:03.297] (2576): Adding protocol WAIS (id: 41)
[11/19/2015 12:29:03.297] (2576): Adding protocol SMTP (id: 14)
[11/19/2015 12:29:03.297] (2576): Adding protocol NetMeeting (id: 25)
[11/19/2015 12:29:03.297] (2576): Adding protocol finger (id: 27)
[11/19/2015 12:29:03.297] (2576): Adding protocol LDAP (id: 29)
[11/19/2015 12:29:03.297] (2576): Adding protocol NTP (id: 30)
[11/19/2015 12:29:03.297] (2576): Adding protocol OpenWindows (id: 31)
[11/19/2015 12:29:03.297] (2576): Adding protocol SOCKS 5 (id: 18)
[11/19/2015 12:29:03.297] (2576): Adding protocol NFS (id: 34)
[11/19/2015 12:29:03.297] (2576): Adding protocol NNTP (id: 19)
[11/19/2015 12:29:03.297] (2576): Adding protocol Orsiso (id: 172)
[11/19/2015 12:29:03.297] (2576): Adding protocol MyGreenPC (id: 173)
[11/19/2015 12:29:03.297] (2576): Adding protocol Access Grid (id: 178)
[11/19/2015 12:29:03.297] (2576): Adding protocol Remote Control PC (id: 174)
[11/19/2015 12:29:03.297] (2576): Adding protocol Ares (id: 62)
[11/19/2015 12:29:03.297] (2576): Adding protocol MySpace Player (id: 176)
[11/19/2015 12:29:03.297] (2576): Adding protocol Baidu Hi (id: 171)
[11/19/2015 12:29:03.297] (2576): Adding protocol Nimbuzz (id: 170)
[11/19/2015 12:29:03.297] (2576): Adding protocol Gmail Chat (WSG Only) (id: 98)
[11/19/2015 12:29:03.297] (2576): Adding protocol BBC iPlayer (id: 179)
[11/19/2015 12:29:03.297] (2576): Adding protocol Google Wave (WSG Only) (id: 169)
[11/19/2015 12:29:03.297] (2576): Adding protocol Adobe Updater (WSG Only) (id: 175)
[11/19/2015 12:29:03.297] (2576): Adding protocol Solid State Delivery Platform (id: 177)
[11/19/2015 12:29:03.297] (2576): Total m_criteria is 422
[11/19/2015 12:29:03.297] (2576): Set protocol cache rules
[11/19/2015 12:29:03.312] (2576): Before load EIM uid:
[11/19/2015 12:29:03.312] (2576): After load EIM uid:aa974909-d4b6-11e4-b088-c9f0f895fb98
[11/19/2015 12:29:03.312] (2576): error: 0, before: FFFFFFFF, get uintIP = A1201E1
[11/19/2015 12:29:03.343] (2576): WARNING : WsNetworkAgent::GetThreadNumber() - Thread Number = 8 are decided by CPU number.
[11/19/2015 12:29:03.343] (2576): WsNetworkAgent::Start - Need reallocate memory for NA.
[11/19/2015 12:29:03.343] (2576): GENERAL : WsNetworkAgent::ReallocateMemoryResource() - monitor nic = 1.
[11/19/2015 12:29:03.343] (2576): WARNING : WsNetworkAgent::GetThreadNumber() - Thread Number = 8 are decided by CPU number.
[11/19/2015 12:29:03.343] (2576): GENERAL : WsNetworkAgent::ReallocateMemoryResource() - Thread Count = 8.
[11/19/2015 12:29:03.343] (2576): WARNING : WsNetworkAgent::GetThreadNumber() - Thread Number = 8 are decided by CPU number.
[11/19/2015 12:29:03.343] (2576): WsNetworkAgent::GetThreadByOptimizeSocket() - SocketPerThread = 15, Thread Count = 8.
[11/19/2015 12:29:03.343] (2576): WARNING : WsNetworkAgent::ReallocateMemoryResource() - Update Monitor NIC = 1, Thread Count = 8, SocketPerThread = 15 .
[11/19/2015 12:29:03.343] (2576): WsNetworkAgent::ReallocateMemoryResource() - Memory : Packet = 13194240, SessionSize = 7517888 and Transaction = 122434176
[11/19/2015 12:29:03.343] (2576): Entering UpdateCaptureConfig(NIC-1)
[11/19/2015 12:29:03.343] (2576): Enable capturing for NIC-1:
OperationMode: 3 (StandAlone: 1)
InjectNIC: NIC-2 (Dest MAC: auto)
HTTPOnAnyPort: 1 (Purchased: 1)
[11/19/2015 12:29:03.359] (2576): WsNICInject:: Destination MAC: auto (Type: 3)
[11/19/2015 12:29:03.359] (2576): WsNICInject::Device: \Device\Packet40_{F3B856A3-CBED-4326-BF39-88FFA0439201}
[11/19/2015 12:29:03.359] (2576): WsNICInject::Mac Spoofing: false
[11/19/2015 12:29:03.359] (2576): Inject NIC MAC: 98:be:94:3d:09:a3
[11/19/2015 12:29:03.359] (2576): Inject NIC's gateway MAC: 00:07:b4:00:02:02
[11/19/2015 12:29:03.359] (2576): Inject NIC's subnet: 10.18.1.0
[11/19/2015 12:29:03.359] (2576): Inject NIC of IPv6 MAC: 98:be:94:3d:09:a3
[11/19/2015 12:29:03.359] (2576): WsNICInject: IPv6 addr: 0000:0000:0000:0000:0000:0000:0000:0000, gateway addr: 0000:0000:0000:0000:0000:0000:0000:0000.
[11/19/2015 12:29:03.359] (2576): bind to local 0000:0000:0000:0000:0000:0000:0000:0000!
[11/19/2015 12:29:03.359] (2576): WSAIoctl SIO_RCVALL failed: 10022