nsacyber/PRUNE

PRUNE repeatedly trying to remove same process from monitoring list

iadgovuser42 opened this issue · 1 comments

Under unknown circumstances, a process is not correctly removed from the list of processes to monitor. Then about once a second it tries to remove it continuously, flooding the event log. This error does not seem to affect performance of the service.

I have a feeling there is no correct checking of the null status when it attempts to get data, forcing this to happen every time the GetData call occurs.

A quick glance leads me to believe a check for finishedMonitoring to be true at the beginning of the GetData function in PruneProcessInstance would be enough to fix this issue. Finish monitoring has already printed the remaining data so we can safetly exit out of that function immediately.

Then I need to verify what is happening in the service is correct so that processes marked as finished are removed from the list in a timely manner.