Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 36 replies
  • Subscribers 19 subscribers
  • Views 31999 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

System.IO.IOException: Pipe is broken

DrewbleIT

Starting Dec 21st we started seeing a tremendous amount of errors on both our Server Infrastructure and Endpoint devices.  This created issues with certain .NET related applications on end users workstations that required restarting various applications. One application particularly troublesome was Mimecast For Outlook. Upon investigating we found that the only resolution to fix these errors was to completely remove Sophos (obviously that's not a solution nor a risk we're willing to take). 

Sample Errors - 

28-12-2020 09:07:41,964 ERROR [12] HOST: Domain Unhandled Exception: System.IO.IOException: The pipe is being closed.

   at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
   at System.IO.Pipes.NamedPipeServerStream.BeginWaitForConnection(AsyncCallback callback, Object state)
   at System.IO.Pipes.NamedPipeServerStream.WaitForConnection()
   at Mimecast.Mapi.Remote.NamedPipesServer.AcceptPipeConnection(IAsyncResult asyncResult)
   at System.IO.Pipes.NamedPipeServerStream.AsyncWaitForConnectionCallback(UInt32 errorCode, UInt32 numBytes, NativeOverlapped* pOverlapped)
   at System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32 errorCode, UInt32 numBytes, NativeOverlapped* pOVERLAP). IsTerminating: True (Program)

Message=Application: msddsk.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.IO.IOException
   at System.IO.__Error.WinIOError(Int32, System.String)
   at System.IO.Pipes.PipeStream.WinIOError(Int32)
   at System.IO.Pipes.NamedPipeServerStream.GetImpersonationUserName()
   at Mimecast.Mapi.Remote.NamedPipesServer.AcceptPipeConnection(System.IAsyncResult)
   at System.IO.Pipes.NamedPipeServerStream.AsyncWaitForConnectionCallback(UInt32, UInt32, System.Threading.NativeOverlapped*)
   at System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32, UInt32, System.Threading.NativeOverlapped*)

Is anyone else seeing this? We'll certainly open a Ticket with support but wanted to also understand the scope. 



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to Paul Haley

    I formed a "me too" case with support yesterday.  Case#03504849  I was told that the MTR team has never heard of this.  Citing the case mentioned above (Justin's), I was told that case hadn't been escalated to the MTR team and was still with the Endpoint team.  Also, I was told that case was waiting for the customer to provide logs.  So that's starting me off at square 1, unfortunately.

    I've got an appointment scheduled for next Tuesday to assist with pulling logs they say they need.  I didn't have time yesterday to do so, and that's our next mutual available time.  In the interim, I've disabled MTR for two of my three impacted customers and will probably be disabling it for the third shortly.

    Two of the customers have Excel crashing referencing a plugin for Sage 300 Business Intelligence.  One of them has the Windows print spooler crashing referencing a driver module for a KIP large-scale plotter.  That's impacting every computer with the driver installed.

    If you've got a case #, sharing it can't hurt, to pool knowledge and make sure Sophos puts it all together.

  • 0 in reply to Paul Haley

    FWIW, had a discussion (brief) about this with our Sophos SE (we are a reseller and have weekly meetings) -- he hadn't heard anything about this.  Also searched all of our estate, and another, with MTR everywhere and have found none of these IOException or broken pipe errors.  Weird.  Probably a conflict with some other software or configuration you all have in common.  Hope they figure it out for you soon.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent

    Correct.  It clearly has conflicts with specific software.  In some cases (above) it's Mimecast.  In my customers' cases it's a KIP plotter driver and a Sage 300 plugin for Excel.  Computer without those two don't exhibit any issues.

  • 0 in reply to Paul Gazo

    03496588.  Just had my case escalated to L2.

  • 0 in reply to Paul Haley

    - I have provided almost 11G of troubleshooting logs. Apparently my reasoning for getting this into the community and helping Sophos triage a possible problem didn't go as planned..

    - My case uses the Sophos Central ref # ref:_00D301GN6a._5003Z1AJLsE:ref

    - Certainly is weird. 

Unfiltered HTML