We have a standalone Websense deployment with Network Agent. The Network Agent is experiencing frequent (every minute) crashes. We are running Triton 7.8.4 on windows 2012 r2 server. Network Agents (2) are running on dedicated windows 2012 r2 servers.
We tried natunining.ini on Network Agent servers with NbrHandlerThreads=1 or 4 and
eimserver.ini on filtering server with MaxWISPConnections=1000. Neither worked.
Event log on Network Agent server - followed by Network Agent general log:
Log Name: Application
Source: Application Error
Date: 11/19/2015 1:01:51 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: 0000SWEB8NA02.domain name
Description:
Faulting application name: NetworkAgent.exe, version: 7.8.4.1390, time stamp: 0x53da807d
Faulting module name: ntdll.dll, version: 6.3.9600.18007, time stamp: 0x55c4c16b
Exception code: 0xc0000374
Fault offset: 0x00000000000f1280
Faulting process id: 0xd8
Faulting application start time: 0x01d1230d7097bbdd
Faulting application path: C:\Program Files\Websense\Web Security\bin\NetworkAgent.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: c0e63197-8f00-11e5-80d7-98be943d09a4
Faulting package full name:
Faulting package-relative application ID:
NetworkAgent log:
[11/19/2015 12:29:03.062] (2576): Adding protocol Yahoo! Messenger attachments (id: 54)
[11/19/2015 12:29:03.062] (2576): Adding protocol MSN Messenger attachments (id: 55)
[11/19/2015 12:29:03.078] (2576): Adding protocol AOL Instant Messenger or ICQ attachments (id: 56)
[11/19/2015 12:29:03.281] (2576): Adding protocol Bot Networks (id: 92)
[11/19/2015 12:29:03.281] (2576): Adding protocol Email Borne Worms (id: 95)
[11/19/2015 12:29:03.281] (2576): Adding protocol Other (id: 97)
[11/19/2015 12:29:03.281] (2576): Adding protocol Brosix (id: 138)
[11/19/2015 12:29:03.281] (2576): Adding protocol Mail.Ru (id: 147)
[11/19/2015 12:29:03.281] (2576): Adding protocol Octoshape (id: 151)
[11/19/2015 12:29:03.281] (2576): Adding protocol Pandora (id: 148)
[11/19/2015 12:29:03.281] (2576): Adding protocol Instant Housecall (id: 152)
[11/19/2015 12:29:03.281] (2576): Adding protocol Voxox (id: 150)
[11/19/2015 12:29:03.281] (2576): Adding protocol Yuuguu (id: 145)
[11/19/2015 12:29:03.281] (2576): Adding protocol Joost (id: 149)
[11/19/2015 12:29:03.281] (2576): Adding protocol netFM Messenger (id: 146)
[11/19/2015 12:29:03.281] (2576): Adding protocol iSpQ (id: 139)
[11/19/2015 12:29:03.281] (2576): Adding protocol CrossLoop (id: 140)
[11/19/2015 12:29:03.281] (2576): Adding protocol NateOn Messenger Attachments (id: 141)
[11/19/2015 12:29:03.281] (2576): Adding protocol Globe7 (id: 142)
[11/19/2015 12:29:03.281] (2576): Adding protocol Chikka Messenger (id: 143)
[11/19/2015 12:29:03.281] (2576): Adding protocol Live Mesh (id: 144)
[11/19/2015 12:29:03.281] (2576): Adding protocol Revver (id: 155)
[11/19/2015 12:29:03.281] (2576): Adding protocol Hulu (id: 156)
[11/19/2015 12:29:03.281] (2576): Adding protocol ShareNow (id: 161)
[11/19/2015 12:29:03.281] (2576): Adding protocol Badongo Buddy (id: 163)
[11/19/2015 12:29:03.281] (2576): Adding protocol Spotify (id: 165)
[11/19/2015 12:29:03.281] (2576): Adding protocol ClipMoon (id: 157)
[11/19/2015 12:29:03.281] (2576): Adding protocol Comodo EasyVPN (id: 166)
[11/19/2015 12:29:03.281] (2576): Adding protocol MyPlay (id: 164)
[11/19/2015 12:29:03.281] (2576): Adding protocol Goober Messenger (id: 168)
[11/19/2015 12:29:03.281] (2576): Adding protocol Netease Popo (id: 101)
[11/19/2015 12:29:03.281] (2576): Adding protocol Mikogo (id: 167)
[11/19/2015 12:29:03.281] (2576): Adding protocol Opera Unite (id: 159)
[11/19/2015 12:29:03.281] (2576): Adding protocol Dailymotion (id: 160)
[11/19/2015 12:29:03.281] (2576): Adding protocol NateOn (id: 105)
[11/19/2015 12:29:03.281] (2576): Adding protocol YouSendIt (id: 154)
[11/19/2015 12:29:03.281] (2576): Adding protocol NateOn Remote Access (id: 153)
[11/19/2015 12:29:03.281] (2576): Adding protocol Vimeo (id: 158)
[11/19/2015 12:29:03.281] (2576): Adding protocol Palringo (id: 162)
[11/19/2015 12:29:03.281] (2576): Adding protocol Neos (id: 109)
[11/19/2015 12:29:03.281] (2576): Adding protocol Xfire (id: 125)
[11/19/2015 12:29:03.281] (2576): Adding protocol MSC Messenger (id: 126)
[11/19/2015 12:29:03.281] (2576): Adding protocol VZOchat (id: 133)
[11/19/2015 12:29:03.281] (2576): Adding protocol AOL Instant Messenger or ICQ (id: 21)
[11/19/2015 12:29:03.281] (2576): Adding protocol Yahoo! Messenger (id: 3)
[11/19/2015 12:29:03.281] (2576): Adding protocol TryFast Messenger (id: 132)
[11/19/2015 12:29:03.281] (2576): Adding protocol X-IM (id: 119)
[11/19/2015 12:29:03.281] (2576): Adding protocol Tencent QQ (see the Knowledge Base) (id: 49)
[11/19/2015 12:29:03.281] (2576): Adding protocol IRC (id: 5)
[11/19/2015 12:29:03.281] (2576): Adding protocol Gadu-Gadu (id: 66)
[11/19/2015 12:29:03.281] (2576): Adding protocol SIMP (Jabber) (id: 4)
[11/19/2015 12:29:03.281] (2576): Adding protocol Camfrog (id: 72)
[11/19/2015 12:29:03.281] (2576): Adding protocol IMVU (id: 124)
[11/19/2015 12:29:03.281] (2576): Adding protocol Meetro (id: 115)
[11/19/2015 12:29:03.281] (2576): Adding protocol MySpaceIM (id: 116)
[11/19/2015 12:29:03.281] (2576): Adding protocol Yahoo! Mail Chat (id: 127)
[11/19/2015 12:29:03.281] (2576): Adding protocol MSN Messenger (id: 2)
[11/19/2015 12:29:03.281] (2576): Adding protocol Google Talk (id: 79)
[11/19/2015 12:29:03.281] (2576): Adding protocol Wengo (id: 84)
[11/19/2015 12:29:03.281] (2576): Adding protocol HTTPS (id: 11)
[11/19/2015 12:29:03.281] (2576): Adding protocol SoonR (id: 110)
[11/19/2015 12:29:03.281] (2576): Adding protocol Vyew (id: 128)
[11/19/2015 12:29:03.281] (2576): Adding protocol Gizmo Project (id: 87)
[11/19/2015 12:29:03.281] (2576): Adding protocol Zolved (id: 135)
[11/19/2015 12:29:03.281] (2576): Adding protocol SoftEther PacketiX (id: 121)
[11/19/2015 12:29:03.281] (2576): Adding protocol Paltalk (id: 74)
[11/19/2015 12:29:03.281] (2576): Adding protocol BeInSync (id: 134)
[11/19/2015 12:29:03.281] (2576): Adding protocol WallCooler VPN (id: 137)
[11/19/2015 12:29:03.281] (2576): Adding protocol Woize (id: 99)
[11/19/2015 12:29:03.281] (2576): Adding protocol HTTP (id: 1)
[11/19/2015 12:29:03.281] (2576): Adding protocol Telnet (id: 17)
[11/19/2015 12:29:03.281] (2576): Adding protocol Eyeball Chat (id: 77)
[11/19/2015 12:29:03.281] (2576): Adding protocol Wavago (id: 90)
[11/19/2015 12:29:03.281] (2576): Adding protocol MyIVO (id: 102)
[11/19/2015 12:29:03.281] (2576): Adding protocol TeamViewer (id: 131)
[11/19/2015 12:29:03.281] (2576): Adding protocol Terminal Services (id: 38)
[11/19/2015 12:29:03.281] (2576): Adding protocol Citrix (id: 39)
[11/19/2015 12:29:03.281] (2576): Adding protocol Toonel (id: 106)
[11/19/2015 12:29:03.281] (2576): Adding protocol SocksOnline (id: 108)
[11/19/2015 12:29:03.281] (2576): Adding protocol Hopster (id: 65)
[11/19/2015 12:29:03.281] (2576): Adding protocol WebEx (PCNow & Support Center) (id: 85)
[11/19/2015 12:29:03.281] (2576): Adding protocol pcTELECOMMUTE (id: 36)
[11/19/2015 12:29:03.281] (2576): Adding protocol Tor (id: 71)
[11/19/2015 12:29:03.281] (2576): Adding protocol JAP (id: 88)
[11/19/2015 12:29:03.281] (2576): Adding protocol pptp (id: 32)
[11/19/2015 12:29:03.281] (2576): Adding protocol GhostSurf (id: 68)
[11/19/2015 12:29:03.297] (2576): Adding protocol RealTunnel (id: 80)
[11/19/2015 12:29:03.297] (2576): Adding protocol VNC (id: 37)
[11/19/2015 12:29:03.297] (2576): Adding protocol ssh (id: 33)
[11/19/2015 12:29:03.297] (2576): Adding protocol pcANYWHERE (id: 35)
[11/19/2015 12:29:03.297] (2576): Adding protocol LogMeIn (id: 81)
[11/19/2015 12:29:03.297] (2576): Adding protocol TongTongTong (id: 107)
[11/19/2015 12:29:03.297] (2576): Adding protocol Google Web Accelerator (id: 69)
[11/19/2015 12:29:03.297] (2576): Adding protocol BoxCloud (id: 111)
[11/19/2015 12:29:03.297] (2576): Adding protocol Metacafe (id: 130)
[11/19/2015 12:29:03.297] (2576): Adding protocol Windows Media (id: 6)
[11/19/2015 12:29:03.297] (2576): Adding protocol iTunes (id: 67)
[11/19/2015 12:29:03.297] (2576): Adding protocol Google Video (id: 76)
[11/19/2015 12:29:03.297] (2576): Adding protocol SHOUTcast (id: 70)
[11/19/2015 12:29:03.297] (2576): Adding protocol Liquid Audio (id: 46)
[11/19/2015 12:29:03.297] (2576): Adding protocol Social FM (id: 136)
[11/19/2015 12:29:03.297] (2576): Adding protocol Slingbox (id: 103)
[11/19/2015 12:29:03.297] (2576): Adding protocol Finetune (id: 129)
[11/19/2015 12:29:03.297] (2576): Adding protocol PeerCast (id: 82)
[11/19/2015 12:29:03.297] (2576): Adding protocol JetCast (id: 75)
[11/19/2015 12:29:03.297] (2576): Adding protocol AOL Radio (id: 86)
[11/19/2015 12:29:03.297] (2576): Adding protocol FastTrack (Kazaa iMesh) (id: 10)
[11/19/2015 12:29:03.297] (2576): Adding protocol Your Freedom (id: 91)
[11/19/2015 12:29:03.297] (2576): Adding protocol RTSP (QuickTime RealPlayer) (id: 7)
[11/19/2015 12:29:03.297] (2576): Adding protocol FolderShare (id: 100)
[11/19/2015 12:29:03.297] (2576): Adding protocol ClubBox (id: 104)
[11/19/2015 12:29:03.297] (2576): Adding protocol MindSpring (id: 123)
[11/19/2015 12:29:03.297] (2576): Adding protocol eDonkey (id: 42)
[11/19/2015 12:29:03.297] (2576): Adding protocol FTP (id: 12)
[11/19/2015 12:29:03.297] (2576): Adding protocol Gnutella (Morpheus Xolox) (id: 9)
[11/19/2015 12:29:03.297] (2576): Adding protocol Hotline Connect (id: 43)
[11/19/2015 12:29:03.297] (2576): Adding protocol Pando (id: 112)
[11/19/2015 12:29:03.297] (2576): Adding protocol Damaka (id: 113)
[11/19/2015 12:29:03.297] (2576): Adding protocol DirectConnect (id: 64)
[11/19/2015 12:29:03.297] (2576): Adding protocol BitTorrent (id: 48)
[11/19/2015 12:29:03.297] (2576): Adding protocol SoulSeek (id: 118)
[11/19/2015 12:29:03.297] (2576): Adding protocol Skype (id: 53)
[11/19/2015 12:29:03.297] (2576): Adding protocol GigaTribe (id: 114)
[11/19/2015 12:29:03.297] (2576): Adding protocol EZPeer (id: 58)
[11/19/2015 12:29:03.297] (2576): Adding protocol Hamachi (id: 89)
[11/19/2015 12:29:03.297] (2576): Adding protocol Raketu (id: 122)
[11/19/2015 12:29:03.297] (2576): Adding protocol Onshare (id: 117)
[11/19/2015 12:29:03.297] (2576): Adding protocol Qnext (id: 73)
[11/19/2015 12:29:03.297] (2576): Adding protocol Project Neon (id: 83)
[11/19/2015 12:29:03.297] (2576): Adding protocol SQL Net (id: 20)
[11/19/2015 12:29:03.297] (2576): Adding protocol POP3 (id: 15)
[11/19/2015 12:29:03.297] (2576): Adding protocol IMAP (id: 47)
[11/19/2015 12:29:03.297] (2576): Adding protocol Microsoft HTTPMail (id: 78)
[11/19/2015 12:29:03.297] (2576): Adding protocol ident (id: 28)
[11/19/2015 12:29:03.297] (2576): Adding protocol daytime (id: 26)
[11/19/2015 12:29:03.297] (2576): Adding protocol Gopher (id: 13)
[11/19/2015 12:29:03.297] (2576): Adding protocol Lotus Notes (id: 23)
[11/19/2015 12:29:03.297] (2576): Adding protocol WAIS (id: 41)
[11/19/2015 12:29:03.297] (2576): Adding protocol SMTP (id: 14)
[11/19/2015 12:29:03.297] (2576): Adding protocol NetMeeting (id: 25)
[11/19/2015 12:29:03.297] (2576): Adding protocol finger (id: 27)
[11/19/2015 12:29:03.297] (2576): Adding protocol LDAP (id: 29)
[11/19/2015 12:29:03.297] (2576): Adding protocol NTP (id: 30)
[11/19/2015 12:29:03.297] (2576): Adding protocol OpenWindows (id: 31)
[11/19/2015 12:29:03.297] (2576): Adding protocol SOCKS 5 (id: 18)
[11/19/2015 12:29:03.297] (2576): Adding protocol NFS (id: 34)
[11/19/2015 12:29:03.297] (2576): Adding protocol NNTP (id: 19)
[11/19/2015 12:29:03.297] (2576): Adding protocol Orsiso (id: 172)
[11/19/2015 12:29:03.297] (2576): Adding protocol MyGreenPC (id: 173)
[11/19/2015 12:29:03.297] (2576): Adding protocol Access Grid (id: 178)
[11/19/2015 12:29:03.297] (2576): Adding protocol Remote Control PC (id: 174)
[11/19/2015 12:29:03.297] (2576): Adding protocol Ares (id: 62)
[11/19/2015 12:29:03.297] (2576): Adding protocol MySpace Player (id: 176)
[11/19/2015 12:29:03.297] (2576): Adding protocol Baidu Hi (id: 171)
[11/19/2015 12:29:03.297] (2576): Adding protocol Nimbuzz (id: 170)
[11/19/2015 12:29:03.297] (2576): Adding protocol Gmail Chat (WSG Only) (id: 98)
[11/19/2015 12:29:03.297] (2576): Adding protocol BBC iPlayer (id: 179)
[11/19/2015 12:29:03.297] (2576): Adding protocol Google Wave (WSG Only) (id: 169)
[11/19/2015 12:29:03.297] (2576): Adding protocol Adobe Updater (WSG Only) (id: 175)
[11/19/2015 12:29:03.297] (2576): Adding protocol Solid State Delivery Platform (id: 177)
[11/19/2015 12:29:03.297] (2576): Total m_criteria is 422
[11/19/2015 12:29:03.297] (2576): Set protocol cache rules
[11/19/2015 12:29:03.312] (2576): Before load EIM uid:
[11/19/2015 12:29:03.312] (2576): After load EIM uid:aa974909-d4b6-11e4-b088-c9f0f895fb98
[11/19/2015 12:29:03.312] (2576): error: 0, before: FFFFFFFF, get uintIP = A1201E1
[11/19/2015 12:29:03.343] (2576): WARNING : WsNetworkAgent::GetThreadNumber() - Thread Number = 8 are decided by CPU number.
[11/19/2015 12:29:03.343] (2576): WsNetworkAgent::Start - Need reallocate memory for NA.
[11/19/2015 12:29:03.343] (2576): GENERAL : WsNetworkAgent::ReallocateMemoryResource() - monitor nic = 1.
[11/19/2015 12:29:03.343] (2576): WARNING : WsNetworkAgent::GetThreadNumber() - Thread Number = 8 are decided by CPU number.
[11/19/2015 12:29:03.343] (2576): GENERAL : WsNetworkAgent::ReallocateMemoryResource() - Thread Count = 8.
[11/19/2015 12:29:03.343] (2576): WARNING : WsNetworkAgent::GetThreadNumber() - Thread Number = 8 are decided by CPU number.
[11/19/2015 12:29:03.343] (2576): WsNetworkAgent::GetThreadByOptimizeSocket() - SocketPerThread = 15, Thread Count = 8.
[11/19/2015 12:29:03.343] (2576): WARNING : WsNetworkAgent::ReallocateMemoryResource() - Update Monitor NIC = 1, Thread Count = 8, SocketPerThread = 15 .
[11/19/2015 12:29:03.343] (2576): WsNetworkAgent::ReallocateMemoryResource() - Memory : Packet = 13194240, SessionSize = 7517888 and Transaction = 122434176
[11/19/2015 12:29:03.343] (2576): Entering UpdateCaptureConfig(NIC-1)
[11/19/2015 12:29:03.343] (2576): Enable capturing for NIC-1:
OperationMode: 3 (StandAlone: 1)
InjectNIC: NIC-2 (Dest MAC: auto)
HTTPOnAnyPort: 1 (Purchased: 1)
[11/19/2015 12:29:03.359] (2576): WsNICInject:: Destination MAC: auto (Type: 3)
[11/19/2015 12:29:03.359] (2576): WsNICInject::Device: \Device\Packet40_{F3B856A3-CBED-4326-BF39-88FFA0439201}
[11/19/2015 12:29:03.359] (2576): WsNICInject::Mac Spoofing: false
[11/19/2015 12:29:03.359] (2576): Inject NIC MAC: 98:be:94:3d:09:a3
[11/19/2015 12:29:03.359] (2576): Inject NIC's gateway MAC: 00:07:b4:00:02:02
[11/19/2015 12:29:03.359] (2576): Inject NIC's subnet: 10.18.1.0
[11/19/2015 12:29:03.359] (2576): Inject NIC of IPv6 MAC: 98:be:94:3d:09:a3
[11/19/2015 12:29:03.359] (2576): WsNICInject: IPv6 addr: 0000:0000:0000:0000:0000:0000:0000:0000, gateway addr: 0000:0000:0000:0000:0000:0000:0000:0000.
[11/19/2015 12:29:03.359] (2576): bind to local 0000:0000:0000:0000:0000:0000:0000:0000!
[11/19/2015 12:29:03.359] (2576): WSAIoctl SIO_RCVALL failed: 10022