App Control: Linux servers /var/log/messages file filled with convert_inode_dentry messages.

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Linux servers are having the /var/log/messages file get filled up with events like:

Apr 28 15:45:04 utlxvti00058 kernel: convert_raw_inode: Failed to find mount point with inode dev=4 ino=4161547
Apr 28 15:45:04 utlxvti00058 kernel: convert_inode_dentry – vnode device_name not set for path[] dentry s_dev[4]

Environment

• App Control Server: All Verisons
• App Control Linux Agent: 8.7.14 and lower

Cause

The Linux agent has aggressive syslog error logging in situations where the agent is not able to find the mount point of the file.

Resolution

Error logging is going to be changed in 8.7.16-lnx agent to resolve this issue.