NFA Reaper service not starting

Products

• Network Flow Analysis
• Network Observability

Issue/Introduction

 NFA Reaper service will not start on the Harvester or standalone NFA server

There are several causes of this problem. This article covers the following issues:

 

Issue 1: Reaper Service will not start "Error 1067: process terminated".

Issue 2: nfrtreaper.exe encountered a problem and needed to close.

Issue 3: The Reaper service will not stop or restart.

Issue 4: Neither the Harvester service nor the Reaper service will start.

 

 

Environment

Release: All
Component: NFA harvester

Resolution

Below you will find detailed descriptions of each of the above mentioned issues, along with corresponding solutions.

ISSUE 1

 

Reaper Service will not start "Error 1067: process terminated". 

 

Details 1 

 

When trying to restart the CA NFA Reaper service you receive the following error: 

Could not start the CA NFA Reaper Service on Local Computer. Error 1067: process terminated unexpectedly. 

 

Also, when navigating to the \netflow\bin directory and opening the latest realtimereaper[today's date].log file, you notice the following error: 

 

********** RealtimeReaper ********** 

10:16:37 Severity 1 - RealtimeReaper starting up 

10:16:37 Severity 1 - The service will perform a scheduled restart at 06/19/2005 00:00:00 

10:17:07 Severity 2 - b_test failure at n:\netqos\netflow\nfrtreaper\nfcvtprocessed.inl 297 

10:17:07 Severity 2 - The operation completed successfully. 

10:17:07 Severity 2 - hr_test failure 0x87fb001d A magic number value did not match expected value at n:\netqos\netflow\nfrtreaper\nfcvtprocessed.inl 297 

10:17:07 Severity 2 - hr_test failure 0x87fb001d A magic number value did not match expected value at n:\netqos\netflow\nfrtreaper\nfcvtprocessed.inl 413 

10:17:07 Severity 2 - hr_test failure 0x87fb001d A magic number value did not match expected value at .\nfcvtprocessed.cpp 27 

10:17:07 Severity 2 - hr_test failure 0x87fb001d A magic number value did not match expected value at .\nfcvtprocessed.cpp 151 

10:17:07 Severity 2 - hr_test failure 0x87fb001d A magic number value did not match expected value at .\nfrtreaper.cpp 548 

10:17:07 Severity 2 - hr_test failure 0x87fb001d A magic number value did not match expected value at .\nfrtreaper.cpp 231 

10:17:07 Severity 2 - Aborting service *********************************** 

 

Resolution 1 

 

Follow these steps:

1. RDP to your Harvester.

2. Navigate to the \netflow\datafiles\ directory. 

3. Purge all files in the following directories: \reaperwork\     \reaperinput\

4. Start the "CA NFA Reaper" service. 

The service should remain started.

 

 

 

ISSUE 2 

 

nfrtreaper.exe encountered a problem and needed to close 

 

Resolution 2 

 

By design, every Sunday at midnight the Reaper service crashes on purpose in order to restart. 

This is normal behavior and does not indicate a system problem.

 

 

 

ISSUE 3 

 

The Reaper service will not stop or restart. 

 

Details 3 

 

The ReaperInput directory has many files back logged. ReaperWork has several .rpr.cmp files, but are timestamped with a time older than the last 15 minutes. 

 

The RealtimeReaperError log file shows: 

********** RealtimeReaper ********** 

12:21:04 Severity 1 - RealtimeReaper starting up 

12:21:04 Severity 1 - The service will perform a scheduled restart at 09/18/2005 00:0 0:00 

12:21:04 Severity 2 - b_test failure at ..\..\include\nqfilewalk.h 147 

12:21:04 Severity 2 - The operation completed successfully. 

12:21:04 Severity 2 - hr_test failure 0x80004005 Unspecified error at ..\..\include\n qfilewalk.h 147 

12:21:04 Severity 2 - hr_test failure 0x80004005 Unspecified error at n:\netqos\netfl ow\nfrtreaper\nfcvtprocessed.inl 355 

12:21:04 Severity 2 - hr_test failure 0x80004005 Unspecified error at n:\netqos\netfl ow\nfrtreaper\nfcvtprocessed.inl 413 

12:21:04 Severity 2 - hr_test failure 0x80004005 Unspecified error at .\nfcvtprocesse d.cpp 30 

12:21:04 Severity 2 - hr_test failure 0x80004005 Unspecified error at .\nfrtreaper.cp p 561 

12:21:04 Severity 2 - hr_test failure 0x80004005 Unspecified error at .\nfrtreaper.cp p 231 

12:21:04 Severity 2 - Aborting service *********************************** 

 

Resolution 3 

 

1. Stop the Harvester service. 

2. Purge files from ReaperInput and ReaperWork directories. 

3. Restart the Harvester and Reaper services.