Excessive client checkins in Apache Access log
-
EDIT - I meant to post this to Fog Problems. Wasn’t paying attention.
Having a strange issue with one client PC in particular. It is flooding the Apache Access log with checkins to the tune of 3-4 times per second. Any idea why? I just deployed this thing recently to replace a PC that had been infected with Cryptowall.
-
Can you provide the fog.log file from the client that is doing this?
Or any client that is doing this.
-
Didn’t think to check there. Here you go:
7/15/2015 7:29 PM FOG::SnapinClient Attempting to connect to fog server... 7/15/2015 7:29 PM FOG::SnapinClient Module is active... 7/15/2015 7:29 PM FOG::SnapinClient Snapin Found: 7/15/2015 7:29 PM FOG::SnapinClient ID: 7 7/15/2015 7:29 PM FOG::SnapinClient RunWith: 7/15/2015 7:29 PM FOG::SnapinClient RunWithArgs: 7/15/2015 7:29 PM FOG::SnapinClient Name: 7/15/2015 7:29 PM FOG::SnapinClient Created: 2015-06-09 13:44:44 7/15/2015 7:29 PM FOG::SnapinClient Args: 7/15/2015 7:29 PM FOG::SnapinClient Reboot: No 7/15/2015 7:29 PM FOG::SnapinClient Starting FOG Snapin Download 7/15/2015 7:29 PM FOG::SnapinClient Failed to download file. 7/15/2015 7:29 PM FOG::SnapinClient An exception occurred during a WebClient request. 7/15/2015 7:29 PM FOG::SnapinClient at System.Net.WebClient.DownloadFile(Uri address, String fileName) at FOG.SnapinClient.startWatching()
This is repeated many times. Spam filter won’t let me post it all though.
-
I finally got a chance to control the PC in question and it appears that the FOG service that was installed was the legacy service from the previous image. In addition, it wasn’t even running (or at least the tray icon wasn’t present. I uninstalled and installed the new client service and the errors went away. I am only left with this now:
[Wed Jul 15 20:58:32.249637 2015] [:error] [pid 23877] [client 192.168.0.236:49190] PHP Warning: mcrypt_decrypt(): Key of size 0 not supported by this algorithm. Only keys of sizes 16, 24 or 32 supported in /var/www/html/fog/lib/fog/FOGBase.class.php on line 241