BFI partial file system scan results

Usage and Config BFI
1

Running BFI v10.0.2.0 and scanner version 9.2.19.0000. I’ve noticed that many Windows servers that have a recent filesystem scan only have 5-13 results in their Scanned File Data report and this wasn’t the case a month ago. This is causing signatures to not match even though the software is installed.

There doesn’t seem to be any rhyme or reason why some Windows devices have a full list of file scan results (500+ files) and others don’t.

Has anyone seen this before? Thanks

2

@ssakunala can you or Bruce (don’t know his forum handle) help @cstoneba?

3

I have a similar situation. Several servers have very small numbers of files in Scanned File Data. In each case, I only have .sys and .exe files from a single directory and it’s children.

Edit: Found this in an import log - Computer 19 is one of the affected servers.

2020-11-22 16:43:40 (+0:00:00.289) WARN: incompatible character encodings: ASCII-8BIT and UTF-8
2020-11-22 16:43:40 (+0:00:00.009) WARN: Scan file itsitsearchdelta_0_15519468_deltafs.zip raised an exception while being decompressed and will not be imported.
2020-11-22 16:43:40 (+0:00:00.002) WARN: SAM::FileFactDelta: Missing 1 deltas for Computer 19. Will import full raw file scan

Computers 3 and 17 are the other two affected servers.

2020-11-23 06:01:50 (+0:00:00.111) WARN: Exception Encoding::CompatibilityError while processing data in file itsitsearch_0_16413507.xml.bz2 on computer 17. Message: incompatible character encodings: ASCII-8BIT and UTF-8
2020-11-23 06:01:50 (+0:00:00.029) WARN: Exception Encoding::CompatibilityError while processing data in file itsitsearch_0_2462055.xml.bz2 on computer 3. Message: incompatible character encodings: ASCII-8BIT and UTF-8
4

Ticket CS0186462 opened with HCL support

1 Like