Well this is very interesting! I just checked and realized that the Mirror task I set up for serving the dat files to my aw's are giving the same problem as described below. Its running on a P91 server. 2010-04-27 06:02:34 46AW01 Station SYSMON -00030 No Short-Term Reports Received 2010-04-27 06:02:34 46AW01 Station SYSMON -00043 Equipment failed 2010-04-27 06:02:47 46AW01 Station SYSMON -00041 Equipment on-line 2010-04-27 06:04:10 46AW01 Station SYSMON -00030 No Short-Term Reports Received 2010-04-27 06:04:10 46AW01 Station SYSMON -00043 Equipment failed 2010-04-27 06:04:29 46AW01 Station SYSMON -00041 Equipment on-line 2010-04-27 12:05:27 46AW01 Station SYSMON -00045 Equipment failure acknowledged 2010-04-28 06:01:11 46AW01 Station SYSMON -00030 No Short-Term Reports Received 2010-04-28 06:01:11 46AW01 Station SYSMON -00043 Equipment failed 2010-04-28 06:01:29 46AW01 Station SYSMON -00041 Equipment on-line 2010-04-28 06:02:47 46AW01 Station SYSMON -00030 No Short-Term Reports Received 2010-04-28 06:02:47 46AW01 Station SYSMON -00043 Equipment failed 2010-04-28 06:03:04 46AW01 Station SYSMON -00041 Equipment on-line 2010-04-28 06:04:23 46AW01 Station SYSMON -00030 No Short-Term Reports Received 2010-04-28 06:04:23 46AW01 Station SYSMON -00043 Equipment failed 2010-04-28 06:04:36 46AW01 Station SYSMON -00041 Equipment on-line As you can see I have it scheduled for 6:00 am... Ronald G. Schafer Distributed Controls System Administrator White Birch Paper Company Bear Island L.L.C. Division 10026 Old Ridge Road Ashland VA, 23005 Phone 804-227-4034 Fax 804-227-4052 Email: rschafer@xxxxxxxxxxxxxxxxxxxxxx -----Original Message----- From: foxboro-bounce@xxxxxxxxxxxxx [mailto:foxboro-bounce@xxxxxxxxxxxxx] On Behalf Of dirk.pauwels@xxxxxxxxxx Sent: Wednesday, April 28, 2010 10:35 AM To: foxboro@xxxxxxxxxxxxx Subject: Re: [foxboro] McAfee virusscan enterprise 8.7.0 errors autoupdate Hi Jack, We had following errors: 2010-02-18 02:06:28 SW0002 Station SYSMON -00030 No Short-Term Reports Received 2010-02-18 02:06:28 SW0002 Station SYSMON -00043 Equipment failed 2010-02-18 02:06:28 SW0003 Station SYSMON -00030 No Short-Term Reports Received 2010-02-18 02:06:28 SW0003 Station SYSMON -00043 Equipment failed 2010-02-18 02:06:28 AW7001 Station SYSMON -00030 No Short-Term Reports Received 2010-02-18 02:06:28 AW7001 Station SYSMON -00043 Equipment failed 2010-02-18 02:06:33 SW0003 Station SYSMON -00041 Equipment on-line 2010-02-18 02:06:33 SW0002 Station SYSMON -00041 Equipment on-line On a small system like ours it was immediately clear this had something to do with the symantec tasks, because this was the only job running at that time. The errors didn't effect operations, but it fills up the sysmon file and you can easlily miss the really important errors..... Service tech Hans from Invensys Belgium solved it for us by downtuning the performance of the symantec backup task (tasks - options-performance). We haven't had this type of errors since then. Unfortunately I can't do the same with the virus update it seems... Rgds, Dirk <Jack.Easley@xxxxxxxxxxxx> Sent by: foxboro-bounce@xxxxxxxxxxxxx 28/04/2010 14:50 Please respond to foxboro@xxxxxxxxxxxxx To <foxboro@xxxxxxxxxxxxx> cc Subject Re: [foxboro] McAfee virusscan enterprise 8.7.0 errors autoupdate Dirk, Would you share with us the issues you had in the past with Symantec Backup Exec causing System Monitor alarms? We use Symantec extensively and also have random momentary System Monitor alarms, but they are mostly associated with CPs and FDSIs. We also had this problem before we started actually using scheduled backups, so I've never suspected Symantec. Jack Easley Sr. I&C Technician Luminant Power, Martin Lake Plant Phone 903.836.6273 jack.easley@xxxxxxxxxxxx -----Original Message----- From: foxboro-bounce@xxxxxxxxxxxxx [mailto:foxboro-bounce@xxxxxxxxxxxxx] On Behalf Of dirk.pauwels@xxxxxxxxxx Sent: Wednesday, April 28, 2010 3:34 AM To: foxboro@xxxxxxxxxxxxx Subject: [foxboro] McAfee virusscan enterprise 8.7.0 errors autoupdate Hi list, We have an Aw70 as mesh server, 8.4.2 with McAfee virusscan enterprise 8.7.0. Autoupdate is enabled, we have a global EPO server. We notice each time the autoupdate is running (when it's almost finished) an error in sysmon regarding one or more of the enterasys switches: 2010-04-28 01:12:27 SW0001 Station SYSMON -00030 No Short-Term Reports Received 2010-04-28 01:12:27 SW0001 Station SYSMON -00043 Equipment failed 2010-04-28 01:12:35 SW0001 Station SYSMON -00041 Equipment on-line It's not always the same switch, sometimes more than one, sometime no error msg at all. It has something to do with the autoupdate, cause that's the only "action" taking place at that time. When I disable autoupdate we do not get errors. We had errors caused by symantec backup also, but that's solved. Is there a way to avoid these errors by "tuning" the McAfee? Thanks & rgds, Dirk _______________________________________________________________________ This mailing list is neither sponsored nor endorsed by Invensys Process Systems (formerly The Foxboro Company). Use the info you obtain here at your own risks. Read http://www.thecassandraproject.org/disclaimer.html foxboro mailing list: //www.freelists.org/list/foxboro to subscribe: mailto:foxboro-request@xxxxxxxxxxxxx?subject=join to unsubscribe: mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave Confidentiality Notice: This email message, including any attachments, contains or may contain confidential information intended only for the addressee. If you are not an intended recipient of this message, be advised that any reading, dissemination, forwarding, printing, copying or other use of this message or its attachments is strictly prohibited. If you have received this message in error, please notify the sender immediately by reply message and delete this email message and any attachments from your system. _______________________________________________________________________ This mailing list is neither sponsored nor endorsed by Invensys Process Systems (formerly The Foxboro Company). Use the info you obtain here at your own risks. Read http://www.thecassandraproject.org/disclaimer.html foxboro mailing list: //www.freelists.org/list/foxboro to subscribe: mailto:foxboro-request@xxxxxxxxxxxxx?subject=join to unsubscribe: mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave _______________________________________________________________________ This mailing list is neither sponsored nor endorsed by Invensys Process Systems (formerly The Foxboro Company). Use the info you obtain here at your own risks. Read http://www.thecassandraproject.org/disclaimer.html foxboro mailing list: //www.freelists.org/list/foxboro to subscribe: mailto:foxboro-request@xxxxxxxxxxxxx?subject=join to unsubscribe: mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave _______________________________________________________________________ This mailing list is neither sponsored nor endorsed by Invensys Process Systems (formerly The Foxboro Company). Use the info you obtain here at your own risks. Read http://www.thecassandraproject.org/disclaimer.html foxboro mailing list: //www.freelists.org/list/foxboro to subscribe: mailto:foxboro-request@xxxxxxxxxxxxx?subject=join to unsubscribe: mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave