Network Monitor's file reader keeps crashing, and a build up files in the /Protect/bin folder is found

Products

• Data Loss Prevention Network Monitor

Issue/Introduction

Network Monitor's file reader keeps crashing.  Upon further investigation, /SymantecDLP/Protect/bin is found to contain numerous hs_err_pidxxxx.log and hs_err_pidxxxx.mdmp files (digits after PID is the process ID for DLP that crashed and will change).

Reviewing the hs_err_pidxxxx.log file, you see that MatcherCoreDyLib.dll appears to be causing the issue.

mdmp files are filling up drive space in /SymantecDLP/Protect/bin as well.

 

From the hs_err_pid log:

# A fatal error has been detected by the Java Runtime Environment:
#
#  EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x000007fef33593f3, pid=4916,
tid=5764
#
# JRE version: Java(TM) SE Runtime Environment (8.0_51-b16) (build 1.8.0_51-b16)
# Java VM: Java HotSpot(TM) 64-Bit Server VM (25.51-b03 mixed mode windows-amd64
compressed oops)
# Problematic frame:
# C  [MatcherCoreDyLib.dll+0x493f3]
#
# Failed to write core dump. Call to MiniDumpWriteDump() failed (Error
0x80070070: There is not enough space on the disk.

Resolution

This issue has been resolved in DLP 14.6 MP1.