Title
#general
r

RitaVrataski

09/17/2020, 2:04 PM
Hi, i'm having some trouble trying to resolve this issue when i execute my "osqueryd.exe" with its osquery.flags within a Windows host running osquery. I been researching this issue in this slack, but i don't know how to fix it. So far, i been trying to use "impl_thrift.cpp" in the "extensions" folder, obtaining the same result:
Thrift: Thu Sep 17 15:31:15 2020 Client connected.
Thrift: Thu Sep 17 15:31:15 2020 TPipe ::GetOverlappedResult errored GLE=errno = 109
Thrift: Thu Sep 17 15:31:15 2020 Client connected.
Thrift: Thu Sep 17 15:31:15 2020 TConnectedClient died: TPipe: GetOverlappedResult failed
Any suggestions? Thanks in advance
theopolis

theopolis

09/17/2020, 2:07 PM
That message is innocuous, it’s a debug message mostly and you can safely ignore it. Are you having some other issue?
r

RitaVrataski

09/17/2020, 2:16 PM
I'm having this one
W0917 15:31:18.260506 10052 tls_enroll.cpp:76] Failed enrollment request to <https://XX.XX.XX.XX:8080/api/v1/osquery/enroll>   (Request error: certificate verify failed) retrying...
2:22 PM
Some user said it helped
2:25 PM
And i have this other issue
Thrift: Thu Sep 17 15:31:19 2020 Client connected.
Thrift: Thu Sep 17 15:31:19 2020 TConnectedClient died: TPipe: GetOverlappedResult failed
Thrift: Thu Sep 17 15:31:19 2020 TPipe ::GetOverlappedResult errored GLE=errno = 109
Thrift: Thu Sep 17 15:31:19 2020 TPipe ::GetOverlappedResult errored GLE=errno = 109
Thrift: Thu Sep 17 15:31:19 2020 TConnectedClient died: TPipe: GetOverlappedResult failed
TW0917 15:31:19.190493  5024 plgx_win_extension.ext.cpp:370] Local CreateFileW failure Error: 80CreateDisposition Flag: 1
hrift: Thu Sep 17 15:31:19 2020 TCW0917 15:31:19.244050  5024 plgx_win_extension.ext.cpp:373] Local CreateFileW failed, file already exists, trying to overwrite file
onnectedClient died: TPipe: GetOverlappedResult failed