Why PCs will show duplicated in console?

(imported topic written by TLSM)

Hi All,

I had found some of the PC had duplication at console.

And this directly increase the amount of client show.

I had look into the log but cannot found any error as well.

It is anyone facing this issue?

I do not done any reinstall but the PC just show double inside console.

From the attachment can saw the PC stop at 10:24:53. on 1st of July 2013

Log:

At 10:18:13 +0800 -

GatherActionMV command received. Version difference, gathering action site.

At 10:18:19 +0800 - actionsite (http://10.8.74.184:52311/cgi-bin/bfgather.exe/actionsite)

Download ‘http://10.55.9.41:52311/bfmirror/bfsites/manydirlists_1/__diffsite_eb24664551f8a0d04caf23d6efa95913cc34378c_to_40a164c5564f3f671e2b12823732d2662a575e1d’ as ‘__TempUpdateFilename’

At 10:18:28 +0800 - actionsite (http://10.8.74.184:52311/cgi-bin/bfgather.exe/actionsite)

Gather::SyncSiteByFile removing deleted file of C:\Program Files\BigFix Enterprise\BES Client__BESData\actionsite\Action 1766.fxf

Gather::SyncSiteByFile removing deleted file of C:\Program Files\BigFix Enterprise\BES Client__BESData\actionsite\Action 1774.fxf

At 10:18:28 +0800 -

Gather merging new file C:\Program Files\BigFix Enterprise\BES Client__BESData\actionsite\Analysis 1797.fxf

Gather merging new file C:\Program Files\BigFix Enterprise\BES Client__BESData\actionsite\Fixlet 1796.fxf

At 10:18:30 +0800 - actionsite (http://10.8.74.184:52311/cgi-bin/bfgather.exe/actionsite)

Successful Synchronization with FixSite (version 5406) - ‘http://10.55.9.41:52311/cgi-bin/bfenterprise/BESGatherMirror.exe?url=http://10.8.74.184:52311/cgi-bin/bfgather.exe/actionsite&Time=01Jul10:18:17&rand=96f3d51e&ManyVersionSha1=eb24664551f8a0d04caf23d6efa95913cc34378c

At 10:18:33 +0800 - actionsite (http://10.8.74.184:52311/cgi-bin/bfgather.exe/actionsite)

Relevant - Ambank - Application Installed With Date (fixlet:1796)

At 10:19:07 +0800 -

Report posted successfully.

At 10:19:13 +0800 - actionsite (http://10.8.74.184:52311/cgi-bin/bfgather.exe/actionsite)

Relevant - Ambank - Application Installed With Date (fixlet:1797)

At 10:19:49 +0800 -

Report posted successfully.

At 10:21:54 +0800 -

GatherActionMV command received. Version difference, gathering action site.

At 10:22:05 +0800 - actionsite (http://10.8.74.184:52311/cgi-bin/bfgather.exe/actionsite)

Download ‘http://10.55.9.41:52311/bfmirror/bfsites/manydirlists_1/__diffsite_40a164c5564f3f671e2b12823732d2662a575e1d_to_01252a03edfaf0e6865aef9b84861bf879f12528’ as ‘__TempUpdateFilename’

At 10:22:12 +0800 -

Gather merging new file C:\Program Files\BigFix Enterprise\BES Client__BESData\actionsite\Analysis 1799.fxf

Gather merging new file C:\Program Files\BigFix Enterprise\BES Client__BESData\actionsite\Fixlet 1798.fxf

At 10:22:12 +0800 - actionsite (http://10.8.74.184:52311/cgi-bin/bfgather.exe/actionsite)

Successful Synchronization with FixSite (version 5409) - ‘http://10.55.9.41:52311/cgi-bin/bfenterprise/BESGatherMirror.exe?url=http://10.8.74.184:52311/cgi-bin/bfgather.exe/actionsite&Time=01Jul10:21:59&rand=aa0c6b70&ManyVersionSha1=40a164c5564f3f671e2b12823732d2662a575e1d

At 10:22:16 +0800 - actionsite (http://10.8.74.184:52311/cgi-bin/bfgather.exe/actionsite)

Relevant - Ambank - List of Hotfixes Installed with Date (fixlet:1798)

Relevant - Ambank - List of Hotfixes Installed with Date (fixlet:1799)

At 10:22:36 +0800 -

Report posted successfully.

At 10:22:39 +0800 -

GatherActionMV command received. Version difference, gathering action site.

At 10:22:41 +0800 - actionsite (http://10.8.74.184:52311/cgi-bin/bfgather.exe/actionsite)

FAILED to Synchronize - General transport failure. - winsock error -10 - gather url - http://10.55.9.41:52311/cgi-bin/bfenterprise/BESGatherMirror.exe?url=http://10.8.74.184:52311/cgi-bin/bfgather.exe/actionsite&Time=01Jul10:22:40&rand=8fa60c04&ManyVersionSha1=01252a03edfaf0e6865aef9b84861bf879f12528

At 10:23:54 +0800 -

Report posted successfully.

At 10:24:13 +0800 - actionsite (http://10.8.74.184:52311/cgi-bin/bfgather.exe/actionsite)

FAILED to Synchronize - General transport failure. - winsock error -10 - gather url - http://10.55.9.41:52311/cgi-bin/bfenterprise/BESGatherMirror.exe?url=http://10.8.74.184:52311/cgi-bin/bfgather.exe/actionsite&Time=01Jul10:24:13&rand=5cf88a5a&ManyVersionSha1=01252a03edfaf0e6865aef9b84861bf879f12528

At 10:24:14 +0800 -

GatherActionMV command received. Version difference, gathering action site.

At 10:24:20 +0800 - actionsite (http://10.8.74.184:52311/cgi-bin/bfgather.exe/actionsite)

Download ‘http://10.55.9.41:52311/bfmirror/bfsites/manydirlists_1/__diffsite_01252a03edfaf0e6865aef9b84861bf879f12528_to_f225a4c2362d303b21c09ee07e46748bcf9648a2’ as ‘__TempUpdateFilename’

At 10:24:33 +0800 - actionsite (http://10.8.74.184:52311/cgi-bin/bfgather.exe/actionsite)

Gather::SyncSiteByFile removing deleted file of C:\Program Files\BigFix Enterprise\BES Client__BESData\actionsite\Analysis 1799.fxf

At 10:24:33 +0800 -

Gather merging new file C:\Program Files\BigFix Enterprise\BES Client__BESData\actionsite\Analysis 1800.fxf

Gather merging new file C:\Program Files\BigFix Enterprise\BES Client__BESData\actionsite\Analysis 1803.fxf

At 10:24:33 +0800 - actionsite (http://10.8.74.184:52311/cgi-bin/bfgather.exe/actionsite)

Gather::SyncSiteByFile merging changes from file C:\Program Files\BigFix Enterprise\BES Client__BESData\actionsite\Fixlet 1798.fxf

At 10:24:33 +0800 -

Gather merging revision C:\Program Files\BigFix Enterprise\BES Client__BESData\actionsite\Fixlet 1798.fxf

Gather merging new file C:\Program Files\BigFix Enterprise\BES Client__BESData\actionsite\Fixlet 1801.fxf

At 10:24:34 +0800 - actionsite (http://10.8.74.184:52311/cgi-bin/bfgather.exe/actionsite)

Successful Synchronization with FixSite (version 5419) - ‘http://10.55.9.41:52311/cgi-bin/bfenterprise/BESGatherMirror.exe?url=http://10.8.74.184:52311/cgi-bin/bfgather.exe/actionsite&Time=01Jul10:24:18&rand=748eb759&ManyVersionSha1=01252a03edfaf0e6865aef9b84861bf879f12528

At 10:24:37 +0800 - actionsite (http://10.8.74.184:52311/cgi-bin/bfgather.exe/actionsite)

Relevant - Ambank - Adobe Installed with Date (fixlet:1801)

Relevant - Ambank - Adobe Installed with Date (fixlet:1803)

Relevant - Ambank - List of Hotfixes Installed with Date (fixlet:1800)

At 10:25:12 +0800 -

Report posted successfully.

At 10:28:16 +0800 -

User interface process ended (30.109) for user ‘10023932E’. Retry in 5 minutes.

At 10:28:48 +0800 -

User interface session ended for user ‘10023932E’

At 10:28:57 +0800 -

ShutdownListener

At 10:30:36 +0800 -

Client shutdown (Service manager shutdown request)

At 11:19:05 +0800 -

Starting client version 8.2.1364.0 built for Windows 5.0 i386

At 11:19:07 +0800 -

FIPS mode disabled by default.

Maybe can anyone can kindly help me to explain the log in further as I cant get much more information in the log.

Thanks

(imported comment written by BrianPGreen)

The most common thing that causes a computer to be duplicated in the console is if the computer is a virtual machine, and the virtual machine is reverted to an earlier snapshot, or the virtual machine is cloned. Do you think one of these things could be the cause?

A duplicate client could show up if the client decides it needs to get a new computer id. This happens during what’s called “client register”. I don’t see anything in the log that’s referring to registration or to computer id, so I don’t think this is the right log snippet to diagnose this problem.

(imported comment written by TLSM)

Hi Brian thanks for the reply. But I am sure all the machines here is physical machine. It is any where else to get the right log?

Because based on the observation there are nothing change between the machine itself.

They have the same IP hostname CPU OS and etc. Just having one more record and old record is offline.

It is any else application to collect the further logging instead of existing log?

(imported comment written by BrianPGreen)

The log that you attached is the right log. Maybe it’s not for the right time period? It should say something about it’s ‘computer id’ during ‘registration’ if the server thinks the client is duplicated.

(imported comment written by BestFortune)

Hi,I also come across with the same scenario but didn’t tried to diagnose the problem.

For interim solution I used to run computerremover utility to remove the duplicates.

https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Tivoli%20Endpoint%20Manager/page/TEM%20Computer%20Remover

(imported comment written by TLSM)

Hi BestFortune,

I will use the same matter in this first since still unable found the root cause.

Now even the patch report also facing the issue that do not tally in the total figure.

I am still not sure it is related with this client duplication.

Wish by remove the duplicate user will solved the issue.

hope can hit 2 birds with one stone.

Thanks