Hi
Unter C:\Program Files\CISCO\AMP\<Version>\ you find a log file called sfc.exe.log.
As usual in a log-file also some error-messages can be found. What I cannot find is a description somewhere what these error messages mean. Is there somewhere a guide or another place where to find those?
Here are some examples:
(7788046, +0 ms) Apr 07 14:07:54 [11160] ERROR: CDBBase::Execute NFMUrlFileMapDB: table nfm_url_file_map already exists
(7788046, +0 ms) Apr 07 14:07:54 [9864] ERROR: CDBBase::Prepare NFMUrlFileMapDB: failure preparing: CREATE TABLE nfm_url_file_map (hash binary(32) PRIMARY KEY, url varchar(255), created_at timestamp, ttl integer, direction integer, localip integer, remoteip integer, localport integer, remoteport integer, protocol integer );(1) : 183 : Cannot create a file when that file already exists."
(7788046, +0 ms) Apr 07 14:07:54 [9864] ERROR: CDBBase::Execute NFMUrlFileMapDB: table nfm_url_file_map already exists
(7788046, +0 ms) Apr 07 14:07:54 [2316] ERROR: ProcessEnumerateProcs: OpenProcess failed for PID 1644.
(7788265, +219 ms) Apr 07 14:07:55 [8564] ERROR: WSC::SetStateOnUpdate : status update failed, hr = 0x80070307
(7791781, +1438 ms) Apr 07 14:07:58 [6192] ERROR: Event::SlowProcessor unable to calculate hash using handle(\\?\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco AMP for Endpoints Connector\Cisco AMP for Endpoints Connector.lnk)
(7791781, +0 ms) Apr 07 14:07:58 [6192] ERROR: Event::SlowProcessor unable to calculate hash using handle(\\?\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco AMP for Endpoints Connector\Support Diagnostic Tool.lnk)
(7791781, +0 ms) Apr 07 14:07:58 [6192] ERROR: Event::SlowProcessor unable to calculate hash using handle(\\?\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco AMP for Endpoints Connector\Timed Diagnostic Tool.lnk)
(7879062, +0 ms) Apr 07 14:09:25 [10512] ERROR: Event::HandleIncomingConnection : unable to perform network cloud lookup for hash: 7fd065bac18c5278777ae44908101cdfed72d26fa741367f0ad4d02020787ab6, ret: 0x6 : 183 : Cannot create a file when that file already exists.
(7947531, +0 ms) Apr 07 14:10:34 [3332] ERROR: Event::HandleIncomingConnection : unable to perform network cloud lookup for hash: 7fd065bac18c5278777ae44908101cdfed72d26fa741367f0ad4d02020787ab6, ret: 0x6 : 183 : Cannot create a file when that file already exists.
(8011484, +0 ms) Apr 07 14:11:38 [3332] ERROR: Event::HandleIncomingConnection : unable to perform network cloud lookup for hash: 7fd065bac18c5278777ae44908101cdfed72d26fa741367f0ad4d02020787ab6, ret: 0x6
Thank you in advance and kind regards
David
