ILMT, BigFix, AIX, and the 125 Scan Error Code

I recently replace an ILMT 9.2.15.0 server with 9.2.25.0 with BigFix 10.0.0.4.

I have several AIX LPARs with a large number of NFS mounts (50 to 200 50 GB filesystems containing small document files). The scan fails with a 126 RC. I can solve the problem by adding this line to the agent start/stop/restart script /etc/rc.d/rc2.d/SBESClientd:

export LDR_CNTRL=MAXDATA=0x80000000

and restarting the agent.

Is this the only way to solve this problem? As this is not optimal as I might need to have the AIX Admins update this script whenever the agent is updated.

Thank you,
Karen

Are software products actually installed on these NFS mounts? Do you even need to scan them? Perhaps you could add them to the excluded directories list via Task ID 63: Add Excluded Directories (9.2.25.0). This is documented here: Excluding additional directories (BigFix scenario)

If it is necessary to scan them, are these NFS mounts shared between the AIX LPARs, or are they unique to each LPAR? What is the CPU utilization value on your scans?

The NFS mounts are excluded from the scans. Yes, the NFS mounts are shared between 2 LPATs. And the CPU utilization goes up during the scan on the child processes. Specifically, the wscanfs uses 33% CPU.

And I just tested this on its “twin” dev server that does not have all the NFS mounts, the wscanfs uses the same CPU. But, it does not have the problem and it does not have the 200 NFS mount filesystems.

Regarding CPU utilization, I was inquiring as whether you had configured a threshold in the Initiate Software Scan action.

There is an analysis that returns the configured excluded directories for each server. Does it show these NFS mounts as excluded? I have seen this sort of behavior when the scanner runs into a really large volume of data such as in your case.

Yes, the excluded munts are included in the cat /var/opt/BESClient/LMT/CIT/exclude_path.txt file as well as shown in the analysis.

/eznim;/perl/lib/;/perl5/;/tmp;/unicore/lib/;/db2/bkp;/export/;/lpp;/opt/IBM/DB2/data01/;/proc;/usr/src/kernels/;/was/lbos;/was/lbos/;/was/shared/*

fs01:/export/was/lbos/lb01 20.00 0.03 19.97 1% /was/lbos/lb01
fs01:/export/was/lbos/lb02 20.00 0.03 19.97 1% /was/lbos/lb02
fs01:/export/was/lbos/lb03 20.00 0.03 19.97 1% /was/lbos/lb03
fs01:/export/was/lbos/lb4 50.00 49.03 0.97 99% /was/lbos/lb4
fs01:/export/was/lbos/lb5 50.00 48.81 1.19 98% /was/lbos/lb5
fs01:/export/was/lbos/lb6 50.00 49.16 0.84 99% /was/lbos/lb6
.
.
.
fs01:/export/was/lbos/lb255 50.00 5.38 44.62 11% /was/lbos/lb255

At this point, I think you should open a case with IBM. As far as I can tell, you’ve configured everything correctly.

Well, I have had the case open with IBM Support for 10 days and have gotten no response from the other than asking for the log files.

Thanks anyway!

Hopefully, you’ll get some support soon.