Ndtrack is getting Stuck

[durgeshsingh]

Team,

Any idea why ndtrack process is not getting complete.

[8/9/2022 1:38:03 PM (G, 0)] {166500} ************************************************************
[8/9/2022 1:38:03 PM (G, 0)] {166500} Program arguments are 'C:\Program Files (x86)\ManageSoft\Tracker\ndtrack.exe -o InventoryType=Machine -o UserInteractionLevel=Quiet'
[8/9/2022 1:38:03 PM (G, 0)] {166500} Preferences loaded
[8/9/2022 1:38:03 PM (G, 0)] {166500} Inventory Setting file is 'C:\ProgramData\ManageSoft Corp\ManageSoft\Tracker\InventorySettings\InventorySettings.xml'
[8/9/2022 1:38:03 PM (G, 0)] {166500} Obtaining semaphore lock (to ensure only one instance is running)...
[8/9/2022 1:38:03 PM (G, 0)] {166500} Obtained semaphore lock.

[8/9/2022 1:38:03 PM (G, 0)] {166500} Program version is 'FlexNet Manager Platform 18.0'
[8/9/2022 1:38:03 PM (G, 0)] {166500} Program path is 'C:\Program Files (x86)\ManageSoft\Tracker'
[8/9/2022 1:38:03 PM (G, 0)] {166500} Program build number is '8.452'
[8/9/2022 1:38:03 PM (G, 0)] {166500} Program user is 'system'
[8/9/2022 1:38:03 PM (G, 0)] {166500} Inventory tracking started
[8/9/2022 1:38:03 PM (U, 0)] {166500} QUERY: Gathering inventory
[8/9/2022 1:38:03 PM (U, 0)] {166500} ----------------
[8/9/2022 1:38:03 PM (U, 0)] {166500} FlexNet Manager Platform will generate an inventory of hardware and software on your computer.

Do you wish to continue?
[8/9/2022 1:38:03 PM (U, 0)] {166500} ----------------
[8/9/2022 1:38:03 PM (U, 0)] {166500} RESPONSE: OK

[8/9/2022 1:38:03 PM (G, 0)] {166500} WMI config file is 'C:\Program Files (x86)\ManageSoft\Tracker\wmitrack.ini'
[8/9/2022 1:38:03 PM (G, 0)] {166500} Started tracking hardware
[8/9/2022 1:38:51 PM (G, 0)] {166500} Execute “getSystemId.exe”
[8/9/2022 1:38:51 PM (G, 0)] {166500} Execute returned “Started Successfully”.
[8/9/2022 1:38:51 PM (G, 0)] {166500} Command “getSystemId.exe” returned exit code 1

[kclausen]

Are you sure the scan is running as a user who is a full Local Admin on this Windows Server?

[durgeshsingh]

Yes, We are using admin credential to run.

[ChrisG]

This may be at a time when various WMI queries are being performed to gather details about the computer.

Have you determined whether the ndtrack.exe process is hanging (i.e. still running but just not making progress), or whether it is actually terminating/crashing?

You may get more insight into exactly what the inventory gathering process is doing before it hangs or terminates by enabling agent diagnostic tracing through settings in the C:\Program Files (x86)\ManageSoft\etcp.trace file. I'd suggest enabling the "+Inventory/Tracker" tracing class.

[durgeshsingh]

Enclosing trace logs. please suggest further on it. One info that this is a cluster server with windows server 2008 r2 Ent.

As per trace log, we have found pending reboot action. We are suspecting this could be an issue. So will update if issue gets resolved post reboot.

2022-09-16 05:38:26.494Z, pid 22824, thread 22464 (Inventory/Tracker/Environment): Environment: AutoRebootMessage=Malware infections have been repaired on your computer. To complete the process, your computer must be rebooted.

[ChrisG]

Assuming that you set the flush_freq setting in etcp.trace to 0 as recommended in the article I linked to, the trace output ends with the following:

2022-09-16 05:39:01.501Z, pid 22824, thread 22464 (Inventory/Tracker/Hardware/WMI/Class): WMI class tracked: SoftwareLicensingService
2022-09-16 05:39:01.501Z, pid 22824, thread 22464 (Inventory/Tracker/Hardware/WMI/Instance): WMI instance tracked: SoftwareLicensingService.Version="6.1.7601.17514"
2022-09-16 05:39:01.1000Z, pid 22824, thread 22464 (Inventory/Tracker/Hardware/WMI/Property): WMI property tracked: IsKeyManagementServiceMachine=0
2022-09-16 05:39:01.1000Z, pid 22824, thread 22464 (Inventory/Tracker/Hardware/WMI/Property): WMI property tracked: KeyManagementServiceCurrentCount=-1
2022-09-16 05:39:01.1000Z, pid 22824, thread 22464 (Inventory/Tracker/Hardware/WMI/Property): WMI property tracked: PolicyCacheRefreshRequired=0

That is an incomplete set of properties being obtained from the SoftwareLicensingService WMI class - so maybe there is a problem getting values from that class.

The following command executed in Windows PowerShell would verify if the values the agent normally attempts to access can be obtained:

Get-WmiObject SoftwareLicensingService |
Select-Object ClientMachineID, IsKeyManagementServiceMachine, KeyManagementServiceCurrentCount, KeyManagementServiceMachine, KeyManagementServiceProductKeyID, PolicyCacheRefreshRequired, RequiredClientCount, Version, VLActivationInterval, VLRenewalInterval

NB. The AutoRebootMessage you are seeing there does not indicate there is a pending reboot action. That is simply reporting the value of a preference setting within the agent, which is the default setting.

[winvarma]

Hi @durgeshsingh  did you find the root cause for the ndtrack issue? we are also facing similar issue and let me know if your issue is resolved.

[durgeshsingh]

not yet.