Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 120 replies
  • Subscribers 6 subscribers
  • Views 1044610 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos 9 causes Mavericks to freeze

symt

Hi Everyone,

I recently got the top of the line iMac, which I was very happy with.

As I was a Mac user before, I knew which software is great and Sophos Anti-Virus for Mac was one of those.

So I had Sophos installed, from the beginning and over the time I noticed one big annoying issue:

The Mac froze from time to time. Whenever the Mac was running the whole day, it wouldn't survive without a hard-reboot any day.

It always showed the same behavior:

 1. Internet connectivity drops

 2. The beachball begins to appear, when hovering some icons in the top menu bar

 3. Programs that are connected to the internet begin to freeze (beachball)

I can't open any other programs after the Mac is in that state, the only way out is a hard reboot.

One of the last entries in the console after such a freeze is always from Sophos, like:


 

30.11.13 13:41:04,607    SophosWebD[106]    <SMENode: 0x7fedaac7a6d0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe"
30.11.13 13:42:16,742    SophosWebD[106]    <SMENode: 0x7fedac51d7d0> localNode csc:2ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe"
30.11.13 13:43:34,626    SophosSXLD[107]    20131130 124334.626 P       107 T      1522 ------ 2             - Warning: EARLY TIMEOUT: dns context 31 has 9568 ms before it should time out\n
30.11.13 13:43:36,420    SophosSXLD[107]    20131130 124336.419 P       107 T      1522      2 2   - sxe_write_to(): Error writing to socket=7: (64) Host is down
30.11.13 13:43:36,420    SophosSXLD[107]    20131130 124336.419 P       107 T      1522 ------ 1   - Failed to send SXL request 4097: error=ERROR_INTERNAL
30.11.13 13:44:37,225    SophosSXLD[107]    20131130 124437.224 P       107 T      1522 ------ 2             - Warning: EARLY TIMEOUT: dns context 29 has 9275 ms before it should time out\n
30.11.13 13:44:38,652    SophosSXLD[107]    20131130 124438.652 P       107 T      1522      2 2   - sxe_write_to(): Error writing to socket=7: (64) Host is down
30.11.13 13:44:38,652    SophosSXLD[107]    20131130 124438.652 P       107 T      1522 ------ 1   - Failed to send SXL request 4097: error=ERROR_INTERNAL
23.11.13 11:48:54,983    SophosWebD[92]    <SMENode: 0x7fa7a141c300> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe"
23.11.13 11:53:45,719    SophosWebD[92]    <SMENode: 0x7fa7a4500160> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe"
23.11.13 11:53:45,727    SophosWebD[92]    <SMENode: 0x7fa7a400c410> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe"
23.11.13 11:53:45,735    SophosWebD[92]    <SMENode: 0x7fa7a444acd0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe"
23.11.13 12:16:44,382    SophosWebIntelligence[92]    tcp_connection_destination_prepare_complete 6783 connectx to IP_REMOVED_BY_ME#80 failed: 65 - No route to host
23.11.13 12:16:44,382    SophosWebIntelligence[92]    tcp_connection_handle_destination_prepare_complete 6783 failed to connect
23.11.13 12:28:19,935    SophosSXLD[107]    Unusable network configuration, sxl daemon is not listenning for queries.
23.11.13 12:28:19,937    SophosSXLD[107]    daemon is running
23.11.13 12:28:21,593    SophosSXLD[107]    Unusable network configuration, sxl daemon is not listenning for queries.
23.11.13 12:28:24,000    kernel[0]    Notice - new kext com.sophos.kext.sav, v9.0.53 matches prelinked kext but can't determine if executables are the same (no UUIDs).
23.11.13 12:28:25,373    SophosAutoUpdate[112]    AlreadyRegistered
23.11.13 12:28:25,857    SophosSXLD[107]    Unusable network configuration, sxl daemon is not listenning for queries.
23.11.13 12:28:25,857    SophosSXLD[107]    Unusable network configuration, sxl daemon is not listenning for queries.
23.11.13 12:28:25,860    SophosSXLD[107]    Unusable network configuration, sxl daemon is not listenning for queries.
23.11.13 12:28:25,869    SophosSXLD[107]    sxl started
23.11.13 12:28:25,870    SophosSXLD[107]    sxl configuration succeeded
23.11.13 12:28:28,000    kernel[0]    Sophos Anti-Virus on-access kext activated
23.11.13 12:28:59,660    SophosWebD[106]    <SMENode: 0x7ff010d031e0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe"
...
23.11.13 12:29:24,610    SophosWebD[106]    <SMENode: 0x7ff012a1e070> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe"
23.11.13 12:29:26,116    SophosWebD[106]    <SMENode: 0x7ff01290e8d0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe"
23.11.13 12:29:26,123    SophosWebD[106]    <SMENode: 0x7ff0128550f0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=54 "Der Vorgang konnte nicht abgeschlossen werden. Verbindung wurde von der Gegenstelle zurückgesetzt"
23.11.13 12:29:26,130    SophosWebD[106]    <SMENode: 0x7ff010c1e1f0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe"
...

   ("Der Vorgang konnte nicht abgeschlossen werden. Defekte Pipe" means "The operation couldn't be completed. Broken pipe.")

I was hoping desperately, that Sophos isn't the root cause for that freeze-behavior. I tried to remove it completely, and then re-installed again - this did not solve the issue. I then completely removed Sophos again, this appeared to be the solution. Sophos is gone, and I'm not experiencing the freezes anymore.

I'm now using a different Mac AV product, not from Sophos (:smileysad: which I'm not too happy about).

So my question: Has anyone experienced the same behavior, is this a known issue?


Another thing I'm not too happy about, is that there are still residues from the Sophos AV on my system.

For example, I'm getting those errors in the console:

08.12.13 15:08:11,860 com.apple.security.XPCKeychainSandboxCheck[1735]: Can't get sandbox fs extension for /Library/Sophos Anti-Virus/Sophos.keychain, status=-1 errno=No such file or directory ext=(null)
08.12.13 15:08:11,860 com.apple.security.XPCKeychainSandboxCheck[1735]: Can't get sandbox fs extension for /Library/Sophos Anti-Virus/Sophos.keychain, status=-1 errno=No such file or directory ext=(null)
08.12.13 15:12:31,672 com.apple.security.XPCKeychainSandboxCheck[1973]: Can't get sandbox fs extension for /Library/Sophos Anti-Virus/Sophos.keychain, status=-1 errno=No such file or directory ext=(null)
08.12.13 15:12:31,672 com.apple.security.XPCKeychainSandboxCheck[1973]: Can't get sandbox fs extension for /Library/Sophos Anti-Virus/Sophos.keychain, status=-1 errno=No such file or directory ext=(null)
09.12.13 14:06:40,338 com.apple.security.XPCKeychainSandboxCheck[280]: Can't get sandbox fs extension for /Library/Sophos Anti-Virus/Sophos.keychain, status=-1 errno=No such file or directory ext=(null)
09.12.13 14:06:40,338 com.apple.security.XPCKeychainSandboxCheck[280]: Can't get sandbox fs extension for /Library/Sophos Anti-Virus/Sophos.keychain, status=-1 errno=No such file or directory ext=(null)
...

  And there is a keychain access object, which is read only and can't be removed at all!

  I tried everything - also from /System/Library/Keychains I can't remove it, as it's not listed.

Does anyone know, how to remove those leftovers?

Many thanks & best regards,
symt

 

:1014893


This thread was automatically locked due to age.
  • 0

    Hi symt,

    Sorry you are having problems with our product. I'm not aware of any issues as dramatic as you've described though. The log messages you posted indicate our software lost connectivity (the SXL process does lookups for the web protection feature). Perhaps its related.

    Re: the keychain, yes we use a custom keychain to store various bits of configuration. Normally the keychain should have been safely removed when you ran the "Remove" application. But the Keychain application is supposed to be able to delete missing keychains for you as well.

    :1014921

    ---

    Bob Cook (bob.cook@sophos.com) Director, Software Development

  • 0
    symt wrote:

      And there is a keychain access object, which is read only and can't be removed at all!

    I can recreate this issue...

    :1014945

     - - - - - - - - - - - -

    Communities Moderator, SOPHOS
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • 0

    Hello,

    please follow these steps to remove the Sophos.keychain from your keychain list:

    1) launch Keychain Access.app as root, in Terminal.app type sudo /Applications/Utilities/Keychain\ Access.app/Contents/MacOS/Keychain\ Access and enter your administrator password

    2) select Keychain List from the Edit menu

    Screen Shot 2013-12-10 at 9.02.49 AM.jpg

    3) in the User and System view select the Sophos Keychain and click the (-) minus button to remove it from the list

    Screen Shot 2013-12-10 at 9.03.04 AM.jpg

    Hope this helps

    Frank Fenn

    Sr. Software Engineer @ Sophos

    :1014953
  • 0

    Hi Frank,

    This worked fine, the Sophos keychain is now removed from my system.

    Regarding the freeze issue - if I continue to notice such freezes (which I really didn't after the Sophos AV was removed), I will inform everyone.

    As nobody else seems to have issues like that, a re-installation of the whole system would probably solve the issue. Currently I'm not planning on doing this though.

    Many thanks to all!


    symt

    :1014979
  • 0

    Hello! I ve experienced exactly the same issues you described and now I am relieved because I was afraid there was something wrong with my mac. At first I thought it was a bug of mavericks but now that i read the exact same issues I m sure it's sophos. My macbook crashes almost daily if its in use for a long time. First goes the internet connection, then the beachball appears when i move the mouse to the menu bar. Sometimes I can quit safari but then finder freezes and i must reset my macbook. Please fix this because I love using Sophos Anti virus. I would also love if you reduced the memory and cpu Sophos uses. I recomended Sophos to a friend of mine and she told me that her imac crashed a lot lately but at the time we didnt suspect sophos was to blame.

    :1015015
  • 0

    This is definitely very worriesome. Can you send me any "panic" logs (look in the Console application for diagnostics logs) or any information that could help us understand the problem? We can't reproduce these symptoms ourselves, we really need some assistance from the community.

    :1015017

    ---

    Bob Cook (bob.cook@sophos.com) Director, Software Development

  • 0

    I dont know how to use the console or what is usefull for you so I copy-pasted the lines that had sophos in them. my macbook crashed again.

    13/12/13 4:59:11,191 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4b0b4c0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"

    13/12/13 4:59:16,731 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d251cbd0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 5:17:02,189 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d24243e0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 5:17:02,205 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d2410a80> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 5:17:02,405 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4d25b80> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 5:17:02,415 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4a3c160> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 5:17:02,913 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d25483d0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 5:29:10,866 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4c2a680> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:13:35,148 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4c1c8c0> localNode csc:2ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:14:07,865 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d271e540> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:36:45,102 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4b1c180> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:36:47,491 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d272cf50> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:36:58,824 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4a38570> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:37:00,208 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4d02320> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:37:04,566 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d24a21f0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:37:05,761 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d2723400> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:37:07,071 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d24af150> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:37:08,205 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4c1df80> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:37:09,981 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d2468c70> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:37:11,106 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4a289e0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:37:12,340 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4c1b960> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:37:46,503 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4c16100> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:38:40,429 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d251c350> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:38:42,186 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d2411ad0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:38:43,355 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d272b0e0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:38:46,139 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4a2a410> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:38:51,865 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4b1fae0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:38:53,031 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d245bb60> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:38:54,281 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4d01e80> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:38:55,323 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d270e380> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:38:58,005 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4b21870> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:38:59,255 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4c27a00> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:39:00,629 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4d0c4f0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:39:20,949 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d27108f0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:39:23,384 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4d27ed0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:39:26,599 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d271f950> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:39:27,742 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4983110> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:39:28,882 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d49823b0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:39:30,081 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d2465350> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:39:31,603 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4a2caa0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:41:48,497 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d24b4a60> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:44:59,509 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4d15960> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:45:13,667 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d272b610> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:48:36,656 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4a294d0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:49:03,626 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4a2a4e0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:49:03,718 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4d17e10> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:49:37,354 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4b1f880> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:51:18,500 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4c2ac30> localNode csc:2ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:51:19,111 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4c185c0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:52:50,337 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4d37ad0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:52:51,906 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d247bfa0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:52:53,543 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4b1a0c0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:52:56,553 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d2437670> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:52:58,046 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d24bd270> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:52:59,837 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4d2e320> localNode csc:2ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:53:01,668 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4c13220> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:53:04,856 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4b1c3d0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:53:06,367 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4d037f0> localNode csc:2ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:54:02,281 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d49966c0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:54:05,591 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4b1f100> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:54:07,645 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d251a3c0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:54:13,312 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d270c7b0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:54:17,443 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d254bb50> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:54:19,036 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d272c9f0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:54:42,157 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d49536d0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:54:43,158 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4c2bff0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:54:47,671 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d4b25e40> localNode csc:2ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:54:48,608 μ.μ. SophosWebD[81]: <SMENode: 0x7f80d272b850> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "The operation couldn’’’’t be completed. Broken pipe"
    13/12/13 6:56:24,915 μ.μ. WindowServer[92]: CoreAnimation: context hosting changed while locked!
    13/12/13 6:57:11,541 μ.μ. com.apple.launchd[1]: (com.apple.WebKit.WebContent.B2E38E0F-E6B6-402D-92CF-79D5E838F4F6[2378]) Could not terminate job: 3: No such process
    13/12/13 6:57:11,541 μ.μ. com.apple.launchd[1]: (com.apple.WebKit.WebContent.B2E38E0F-E6B6-402D-92CF-79D5E838F4F6[2378]) Using fallback option to terminate job...
    13/12/13 6:57:31,542 μ.μ. com.apple.launchd[1]: (com.apple.WebKit.Networking.336BA09A-79E2-4CA2-A8C1-E8B94BA0B6A2[2331]) Exit timeout elapsed (20 seconds). Killing
    13/12/13 6:57:35,543 μ.μ. com.apple.launchd[1]: (com.apple.WebKit.Networking.336BA09A-79E2-4CA2-A8C1-E8B94BA0B6A2[2331]) Job has not died after being killed 4 seconds ago. Simulating exit.
    13/12/13 6:57:35,543 μ.μ. com.apple.launchd[1]: (com.apple.WebKit.Networking.336BA09A-79E2-4CA2-A8C1-E8B94BA0B6A2[2331]) Simulated exit: <rdar://problem/9359725>
    13/12/13 6:58:18,227 μ.μ. SophosSXLD[82]: Unusable network configuration, sxl daemon is not listenning for queries.
    13/12/13 6:58:18,230 μ.μ. SophosSXLD[82]: daemon is running
    13/12/13 6:58:18,418 μ.μ. SophosSXLD[82]: Unusable network configuration, sxl daemon is not listenning for queries.
    13/12/13 6:58:24,309 μ.μ. SophosSXLD[82]: Unusable network configuration, sxl daemon is not listenning for queries.
    13/12/13 6:58:24,310 μ.μ. SophosSXLD[82]: Unusable network configuration, sxl daemon is not listenning for queries.
    13/12/13 6:58:24,316 μ.μ. SophosSXLD[82]: Unusable network configuration, sxl daemon is not listenning for queries.
    13/12/13 6:58:34,630 μ.μ. secd[208]: SecErrorGetOSStatus unknown error domain: com.apple.security.sos.error for error: The operation couldn’’’’t be completed. (com.apple.security.sos.error error 2 - Public Key not available - failed to register before call)
    13/12/13 6:58:34,631 μ.μ. secd[208]: securityd_xpc_dictionary_handler WiFiKeychainProx[250] DeviceInCircle The operation couldn’’’’t be completed. (com.apple.security.sos.error error 2 - Public Key not available - failed to register before call)

    :1015037
  • 0

    Hi madmichalis,

    Some background: the web protection feature intercepts the HTTP connections between your browser (Safari or Chrome etc) and the remote servers on the internet (facebook.com etc). We provide two levels of filtering: (1) requests to remote servers are checked against a "known bad site" list; and (2) we check the content returned from the remote server to ensure its not something suspicious. The first method grabs the site name and queries our SXL servers to ask about reputation while the second method uses the local scanning engine to inspect the content. You can control the two features independently in the preferences.

    The line "encountered an error while writing to outputstream" means that our internal proxy (to connect your browser to the remote site via our filter) has lost one or more network connections.

    The line "Unusable network configuration, sxl daemon is not listenning for queries" is most interesting. This means we were notified of a network configuration change but can not use the new configuration (usually because the connection has dropped). This would not normally cause the kernel to panic though.

    Was this machine an upgrade from a previous version of Mac OS X? If so, which version?

    Re: retrieving the kernel panic reports, this KB might help: http://support.apple.com/kb/TS4636

    Look for the section titled "After your computer restarts" and inside that section look for "Reporting the issue to Apple". The dialog box containing all the text is what I'm after. Copy the text out of that window.

    :1015039

    ---

    Bob Cook (bob.cook@sophos.com) Director, Software Development

  • 0

    hello Bob, I have a retina macbook pro mid 2012. when I was on OS X mountain lion I had sophos 8.x and I never experienced this problem. When I upgraded to mavericks I installed sophos 9 and this started to happen. When my macbook becomes completely unresponsive and I cant even move the beachball around I press the power button continiously and it restarts but the dialog box that has the option to report the problem to apple doesnt appear instead, the applications that I was using before the crash open automatically. 

    :1015041
  • 0

    Hi everyone,

    I am experiencing the same issue since a few days and it drove me nuts as suddenly the mac became totally unresponsive to the point I had to hard shutdown it.

    So, before smashing my mac I looked in the logs right after the last reboot and guess what!! SophosWebD had an issue.


    19/12/2013 14:00:00,589 SophosWebD[85]: <SMENode: 0x7fd6a3d27e00> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "L’’’’opération n’’’’a pas pu s’’’’achever. Canal endommagé"
    19/12/2013 14:00:01,030 SophosWebD[85]: <SMENode: 0x7fd6a3ec74f0> localNode csc:1ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "L’’’’opération n’’’’a pas pu s’’’’achever. Canal endommagé"
    19/12/2013 14:00:03,530 SophosWebD[85]: <SMENode: 0x7fd6a3d5e650> localNode csc:2ERROR! encountered an error while writing to outputstream| error:Error Domain=NSPOSIXErrorDomain Code=32 "L’’’’opération n’’’’a pas pu s’’’’achever. Canal endommagé"
    19/12/2013 14:06:31,757 SophosSXLD[86]: Unusable network configuration, sxl daemon is not listenning for queries.
    19/12/2013 14:06:31,773 SophosSXLD[86]: daemon is running
    19/12/2013 14:06:32,132 SophosSXLD[86]: Unusable network configuration, sxl daemon is not listenning for queries.
    19/12/2013 14:06:33,000 kernel[0]: Notice - new kext com.sophos.kext.sav, v9.0.53 matches prelinked kext but can't determine if executables are the same (no UUIDs).
    19/12/2013 14:06:39,431 SophosSXLD[86]: Unusable network configuration, sxl daemon is not listenning for queries.
    19/12/2013 14:06:39,471 SophosSXLD[86]: sxl started
    19/12/2013 14:06:39,490 SophosSXLD[86]: sxl configuration succeeded
    19/12/2013 14:07:08,000 kernel[0]: Sophos Anti-Virus on-access kext activated
    19/12/2013 14:14:42,645 SophosUIServer[205]: Performance: Please update this scripting addition to supply a value for ThreadSafe for each event handler: "/Library/ScriptingAdditions/SIMBL.osax"
    19/12/2013 14:15:05,503 launchservicesd[75]: Application App:"Sophos Anti-Virus" asn:0x0-37037 pid:388 refs=7 @ 0x7f8822c7b4d0 tried to be brought forward, but isn't in fPermittedFrontApps ( ( "LSApplication:0x0-0x39039 pid=395 "SecurityAgent"")), so denying. : LASSession.cp #1481 SetFrontApplication() q=LSSession 100004/0x186a4 queue
    19/12/2013 14:15:05,504 WindowServer[109]: [cps/setfront] Failed setting the front application to Sophos Anti-Virus, psn 0x0-0x37037, securitySessionID=0x186a4, err=-13066

    For instance I have disabled the web protection, I don't care about a program which blocks my machine to this point!

    Every time this happened, I was watching a video on youtube.

    Feel free to ask for any log or debug action you would like to have done. 

    :1015141
Unfiltered HTML