Endpoint Protection

 View Only

  • 1.  SEPFL: What do "symcfgd: subscriber ... has left -- closed ... remaining handles" messages mean?

    Posted Oct 06, 2015 03:05 PM

    When I was reviewing Symantec Endpoint Protection for Linux 12.1 RU5 logs on our systems, I noticed a lot of messages similar to the following:

    <date> <hostname> symcfgd: subscriber <#> has left -- closed <#> remaining handles

    Can anyone tell me what they mean? I have had no luck searching this forum or online for an answer.



  • 2.  RE: SEPFL: What do "symcfgd: subscriber ... has left -- closed ... remaining handles" messages mean?

    Posted Oct 06, 2015 03:10 PM

    symcfgd is a tool used to store config data for SEPFL.

    It looks to be just a normal process by SEPFL, I don't see any errors there.

    You can find more info on it in the SEPFL client guide:

    http://www.symantec.com/docs/DOC7697



  • 3.  RE: SEPFL: What do "symcfgd: subscriber ... has left -- closed ... remaining handles" messages mean?

    Posted Oct 07, 2015 06:42 PM

    ᗺrian:

    Thank you for your reply.

    I understand what symcfgd is used for and that it is a normal SEPFL process.

    I would like to understand specifically the "subscriber" and "handle" parts of this message. I would guess that the message is referencing a memory resource. Perhaps a SEPFL engineer could speak further on this.