topic Re: Dynatrace oneagent installation with Windows 2019 in Open Q&A

Dynatrace oneagent installation with Windows 2019

sundarv1 — Mon, 21 Oct 2024 07:45:53 GMT

After we do upgrade of oneagent update in Windows 2019 Server , Remote desktop connection to server is lost.

Oneagent is getting upgraded successfully. But it require a reboot to resolve the Remote desktop connection issue.

This issue happens only in Windows 2019. Windows 2016 all loooks good.

Re: Dynatrace oneagent installation with Windows 2019

jonhaugen — Wed, 16 Oct 2024 14:24:53 GMT

Hi,

From my own experience, this seems to be only affecting a specific Windows 2019 build, and happens only when Npcap is installed or upgraded.

The problem occurs because the Npcap driver shipped with the Oneagent installation has a bug which seems to cut all incoming and outgoing connections to the server. The workaround is either to disable Npcap installation or reboot.

You can try to reach out to Nmap (https://nmap.org/), and see if they have had any similar reports on your current build.

Best of luck!

Re: Dynatrace oneagent installation with Windows 2019

sundarv1 — Wed, 16 Oct 2024 14:28:38 GMT

Hi Jon - Have you raised ticket with Dynatrace why they are shipping Npcap driver shipped with the Oneagent installation has a bug?.

Re: Dynatrace oneagent installation with Windows 2019

Peter_Youssef — Thu, 17 Oct 2024 10:45:04 GMT

Hello @sundarv1

You can refer to Dynatrace documentation regarding pcap driver, if pcap part of the issue.

packet_capture_driver

You can stop OA service and adjust this configuration.

BR,

Peter

Re: Dynatrace oneagent installation with Windows 2019

Peter_Youssef — Thu, 17 Oct 2024 10:55:06 GMT

Hi @sundarv1

There is another solution to avoid such scenario in future:

Go to the target server > settings > process group monitoring > add process group > select the process group from the drop down menu which will be "Remote Desktop Connection" by default and select do not monitor to avoid the OA code modules injection.

So whenever update is triggered this "Remote Desktop Connection" won't be impacted at all.

BR,

Peter

Re: Dynatrace oneagent installation with Windows 2019

Peter_Youssef — Thu, 17 Oct 2024 11:52:57 GMT

Hi @sundarv1

You have a good option if these Win server 2019 are grouped under host group.

Infrastructure observability > Process and technologies > filter by "Remote Desktop Connection" > then Edit and add monitoring rule > do not monitor so these servers won't be affected.

KR,

Peter.

Re: Dynatrace oneagent installation with Windows 2019

jonhaugen — Thu, 17 Oct 2024 12:11:41 GMT

The ticket with Dynatrace was eventually closed, however here is the feedback:

"There is Windows 2019 server (1809) which known problem that installing npcap driver causes whole host network disruption. This problem was studied time ago by nmap company which releases npcap and the pointed out there is a bug inside windows kernel (especially 1809) then problem got redirected to Microsoft - now to my knowledge other versions of Windows are not affected. There is hotfix installed KB4571748but there may other factors that make problem is still present e.g. some WAN miport drivers are present"

Re: Dynatrace oneagent installation with Windows 2019

sundarv1 — Thu, 17 Oct 2024 13:57:08 GMT

Hi Peter

When we do oneagent upgrade via dynatrace console, where do we specify the npcap parameter?. Could you please share?,

Re: Dynatrace oneagent installation with Windows 2019

sundarv1 — Fri, 18 Oct 2024 13:06:17 GMT

Hi Jon

But npcap is installed as part of dynatrace oneagent installation not thru windows 2019 OS.

Npcap Oneagent is installed thru dynatrace oneagent installation

Re: Dynatrace oneagent installation with Windows 2019

Peter_Youssef — Sat, 19 Oct 2024 14:22:46 GMT

Hello @sundarv1

It's not available through the installation UI, so you can do it through installation scripts or after deployment via oneagentctl.

.\oneagentctl.exe --set-PCAP_DRIVER=npcap

PFA attached URL : windows-custom-installation#packet_capture_driver for detailed info.

Tip:

stop OA service then Run the attached command > Restart OA service to apply changes.
stop-restart-oneagent-windows
oneagent-security-windows

Do it and keep us posted 😉

Re: Dynatrace oneagent installation with Windows 2019

Peter_Youssef — Sat, 19 Oct 2024 14:17:17 GMT

Hi @sundarv1

for OA auto-update command during the installation specify the attached command beside the installation script.

Re: Dynatrace oneagent installation with Windows 2019

sundarv1 — Sat, 19 Oct 2024 14:21:55 GMT

Hi Peter

What we are seeing npcap agent is installed for oneagent installation. we did oneagent update via UI and npcap oneagent is installed part of this installation.

Thanks

Sundar.v

Thanks

Sundar.v

Re: Dynatrace oneagent installation with Windows 2019

Peter_Youssef — Sat, 19 Oct 2024 14:25:41 GMT

Hi @sundarv1
Exactly, it's included in the installation process, once you install or update the OA.

Re: Dynatrace oneagent installation with Windows 2019

sundarv1 — Sat, 19 Oct 2024 14:28:16 GMT

If oneagent is installing npcap then what we need to do resolve the Remote desktop connecivity issue or host connecvity issue after agent upgraded successfully.

Re: Dynatrace oneagent installation with Windows 2019

sundarv1 — Sat, 19 Oct 2024 14:53:20 GMT

If oneagent is installing npcap then what we need to do resolve the Remote desktop connecivity issue or host connecvity issue after agent upgraded successfully.

Re: Dynatrace oneagent installation with Windows 2019

sundarv1 — Sun, 20 Oct 2024 03:14:23 GMT

If oneagent is installing npcap then what we need to do resolve the Remote desktop connecivity issue or host connecvity issue after agent upgraded successfully.

Re: Dynatrace oneagent installation with Windows 2019

p_devulapalli — Mon, 21 Oct 2024 04:30:40 GMT

Hi @sundarv1 , Please see below, seems related

https://community.dynatrace.com/t5/Troubleshooting/Network-monitoring-Potential-network-disruption-during-OneAgent/ta-p/237884

Re: Dynatrace oneagent installation with Windows 2019

sundarv1 — Mon, 21 Oct 2024 04:37:21 GMT

Our oneagent versiion is 1.299 and Windows is 2019 and 1809. Wincap is not installed. only npcap is installed as part of oneagent installation.

Re: Dynatrace oneagent installation with Windows 2019

jonhaugen — Mon, 21 Oct 2024 07:50:33 GMT

Indeed, to disable Npcap during Oneagent installation you will have to manually disable the feature from the Oneagent. Sometimes Dynatrace upgrades the Npcap version shipped with OA, which will trigger a Npcap installation and therefore the network disruption may happen to the 1809 servers.

Re: Dynatrace oneagent installation with Windows 2019

sundarv1 — Mon, 21 Oct 2024 07:58:44 GMT

Hi Jon

Thanks. Please let us know how to disable the Npcap version shipped with OA?

Should we use pcap_driver=winpcap

If we use pcap_driver = disable what is the impact of not having oneagent network monitoring module.