Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 10 replies
  • Subscribers 3 subscribers
  • Views 2964 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

single 2012r2 not reporting to console

Ben@ryehills

Hi, I am having an issue with a 2012r2 server not reporting to console. I have read though a few posts but cant see anything that's links to my problem.

I have tried looking at the enhanced logs and cross-referencing other servers registry's with it and everything looks ok.   

Looking at the logs the issue seems to be with the Agent side of Sophos.

03.01.2019 11:13:52 06C8 I Initializing ...
03.01.2019 11:13:52 06C8 I Running certificate verification...
03.01.2019 11:13:52 06C8 I Compliant certificate hashing algorithm.
03.01.2019 11:14:19 06A0 I SAUAdapter - SAU IPCListener::Wait received message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSStartUpdate" />
03.01.2019 11:14:19 06A0 I SAUAdapter - SAU StartingUpdate has been set
03.01.2019 11:14:19 06A0 I SAUAdapter - SAU IPCListener::Wait Waiting for more messages
03.01.2019 11:14:26 06A0 I SAUAdapter - SAU IPCListener::Wait received message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate" />
03.01.2019 11:14:26 06A0 I SAUAdapter - SAU FinishedUpdate has been set
03.01.2019 11:14:26 06A0 I SAUAdapter - SAU ReportStatus::FinishedUpdate: Failed to read UpdateSource value in the UpdateStatus registry key.
03.01.2019 11:14:26 06A0 I SAUAdapter - SAU Update status information saved to C:\ProgramData\Sophos\AutoUpdate\data\status\AUAdapter.xml
03.01.2019 11:14:26 06A0 I SAUAdapter - SAU IPCListener::Wait Waiting for more messages
03.01.2019 11:14:35 06C8 E CORBA::Exception: Caught CORBA system exception, ID 'IDL:omg.org/CORBA/TRANSIENT:1.0'
OMG minor code (2), described as '*unknown description*', completed = NO
 ClientConnection::Reconnect()

03.01.2019 11:14:40 06C8 I Initializing ...
03.01.2019 11:14:40 06C8 I Running certificate verification...
03.01.2019 11:14:40 06C8 I Compliant certificate hashing algorithm.
03.01.2019 11:15:22 06C8 E CORBA::Exception: Caught CORBA system exception, ID 'IDL:omg.org/CORBA/TRANSIENT:1.0'
OMG minor code (2), described as '*unknown description*', completed = NO
 ClientConnection::Reconnect()

Thanks



This thread was automatically locked due to age.
Parents
  • 0

    Hello Ben@ryehills,

    that's the Agent log, isn't it? What's in the Router log?

    Christian

  • 0 in reply to QC

    Hi QC,

    Yes, that is the Agent log, Below is the Router log.

    Most of the log is like below:

    03.01.2019 12:22:49 0DB0 T Added host network address:(correct:clinet-ip):0
    03.01.2019 12:22:49 0DB0 T Added host network address:127.0.0.1:0
    03.01.2019 12:22:49 0DB0 T IPAddressSet::InitialiseWithHost() returns
    03.01.2019 12:22:51 06A4 T GetterThread::Process() checking table

    but the top part is:

    03.01.2019 10:29:00 0E60 I SOF: C:\ProgramData/Sophos/Remote Management System/3/Router/Logs/Router-20190103-102900.log
    03.01.2019 10:29:00 0E60 I Sophos Messaging Router 4.1.1.127 starting...
    03.01.2019 10:29:00 0E60 I Setting ACE_FD_SETSIZE to 138
    03.01.2019 10:29:00 0E60 I Initializing CORBA...
    03.01.2019 10:29:00 0E60 I Connection cache limit is 10
    03.01.2019 10:29:01 0E60 D New context options = 1000004
    03.01.2019 10:29:01 0E60 I Router::ConfigureSslContext: keeping legacy compatibility of TLS 1 and TLS 1.1.
    03.01.2019 10:29:01 0E60 T IPAddressSet::InitialiseWithHost() called
    03.01.2019 10:29:01 0E60 T Added host network address:(correct:ip)
    03.01.2019 10:29:01 0E60 T Added host network address:127.0.0.1:0
    03.01.2019 10:29:01 0E60 T IPAddressSet::InitialiseWithHost() returns
    03.01.2019 10:29:01 0E60 D Creating ORB...
    03.01.2019 10:29:01 0E60 I Creating ORB runner with 4 threads
    03.01.2019 10:29:01 0E60 I Compliant certificate hashing algorithm.
    03.01.2019 10:29:01 0E60 D Not requesting a new certificate.
    03.01.2019 10:29:01 0E60 D Resolving the root object adapter...
    03.01.2019 10:29:01 0E60 T >>> StatusReporting::StatusReporter::WriteReport
    03.01.2019 10:29:01 0A50 D RunORB thread started
    03.01.2019 10:29:01 0B74 D RunORB thread started
    03.01.2019 10:29:01 0C08 D RunORB thread started
    03.01.2019 10:29:01 0A64 D RunORB thread started
    03.01.2019 10:29:01 0E60 I This computer is part of the domain (correct:domain)
    03.01.2019 10:29:01 0E60 T >>> StatusReporting::StatusReporter::WriteAsXML
    03.01.2019 10:29:01 0E60 T >>> StatusReporting::DNSSection::WriteAsXML
    03.01.2019 10:29:01 0E60 T <<< StatusReporting::DNSSection::WriteAsXML
    03.01.2019 10:29:01 0E60 T >>> StatusReporting::CertificationSection::WriteAsXML
    03.01.2019 10:29:01 0E60 T <<< StatusReporting::CertificationSection::WriteAsXML
    03.01.2019 10:29:01 0E60 T >>> StatusReporting::IncomingSection::WriteAsXML
    03.01.2019 10:29:01 0E60 T <<< StatusReporting::IncomingSection::WriteAsXML
    03.01.2019 10:29:01 0E60 T >>> StatusReporting::OutgoingSection::WriteAsXML
    03.01.2019 10:29:01 0E60 T <<< StatusReporting::OutgoingSection::WriteAsXML
    03.01.2019 10:29:01 0E60 T <<< StatusReporting::StatusReporter::WriteAsXML
    03.01.2019 10:29:01 0E60 T <<< StatusReporting::StatusReporter::WriteReport
    03.01.2019 10:29:01 0E60 D Creating object adapters...
    03.01.2019 10:29:01 0E60 D Creating MessageRouter CORBA object...
    03.01.2019 10:29:01 0E60 I This router's IOR:
    IOR:010000002600000049444c3a536f70686f734d6573736167696e672f4d657373616765526f757465723a312e300000000100000000000000a4000000010102000c00000031302e32312e38302e323500012000004100000014010f004e5550000000210000000001000000526f6f74504f4100526f7574657250657273697374656e740003000000010000004d657373616765526f7574657200000003000000000000000800000001003801004f4154010000001800000001003801010001000100000001000105090101000000000014000000080000000100a60086000220
    03.01.2019 10:29:01 0E60 T MessageRouter::validateIOR called
    03.01.2019 10:29:01 0E60 T Endpoint found: (correct:ip):8193
    03.01.2019 10:29:01 0E60 I Successfully validated this router's IOR
    03.01.2019 10:29:01 0E60 T >>> StatusReporting::StatusReporter::Done
    03.01.2019 10:29:01 0E60 T DNS            : problem 0, changed 0, already reported 0
    03.01.2019 10:29:01 0E60 T Certification  : problem 0, changed 0, already reported 0
    03.01.2019 10:29:01 0E60 T Incoming       : problem 0, changed 0, already reported 0
    03.01.2019 10:29:01 0E60 T Outgoing       : problem 0, changed 0, already reported 0
    03.01.2019 10:29:01 0E60 T <<< StatusReporting::StatusReporter::Done
    03.01.2019 10:29:01 0E60 D Setting NotificationThresholdInitialRetrySecs to 3600
    03.01.2019 10:29:01 0E60 D Setting NotificationThresholdMaxRetrySecs to 172800
    03.01.2019 10:29:01 0E60 I Reading router table file
    03.01.2019 10:29:01 0E60 D Loading envelopes from persistent storage...
    03.01.2019 10:29:01 0E60 D Activating CORBA objects...
    03.01.2019 10:29:01 0E60 I Host name: (correct:server name)
    03.01.2019 10:29:01 0E60 T IPAddressSet::InitialiseWithHost() called
    03.01.2019 10:29:01 0E60 T Added host network address:(correct:ip)
    03.01.2019 10:29:01 0E60 T Added host network address:127.0.0.1:0
    03.01.2019 10:29:01 0E60 T IPAddressSet::InitialiseWithHost() returns
    03.01.2019 10:29:01 0E60 I Local IP addresses: (correct:ip)
    03.01.2019 10:29:01 0E60 I Resolved name: (correct:domian)
    03.01.2019 10:29:01 0E60 I Resolved alias/es:
    03.01.2019 10:29:01 0E60 I Resolved IP addresses: (correct:ip)
    03.01.2019 10:29:01 0E60 I Resolved reverse names/aliases: (correct:domian)
    03.01.2019 10:29:01 0E60 T Router::doStartRouting() called
    03.01.2019 10:29:01 0E60 T Total time for retrying ACE socket connection 300
    03.01.2019 10:29:01 0E60 T Number of retries when retrying ACE socket connection 100
    03.01.2019 10:29:01 0E60 T Pause between retries when retrying ACE socket connection 2000
    03.01.2019 10:29:01 0E60 T Pause variation percentage range 0
    03.01.2019 10:29:01 0E60 D Router will not restart when it detects an EM or parent sender thread has failed to send 5000 messages.
    03.01.2019 10:29:01 0E60 D Initialising router with 0 notification threshold worker threads
    03.01.2019 10:29:01 0E60 I Waiting for messages...
    03.01.2019 10:29:01 0E60 D Reducing Size
    03.01.2019 10:29:01 0E60 D RouterSystemCheck: percentageThreshold 85, minimumPortNumToCount 1024, checkIntervalSecs 3600, reportIntervalSecs 86400
    03.01.2019 10:29:01 0E60 T RouterSystemCheck::getMaxUserPort()
    03.01.2019 10:29:01 0E60 D RouterSystemCheck::getMaxUserPort(), no MaxUserPort value in Registry
    03.01.2019 10:29:01 0E60 D RouterSystemCheck::getMaxUserPort(), value (0) is too low, assuming 16384
    03.01.2019 10:29:01 0E60 I RouterSystemCheck::onInfoPortsUsed() - number of user ports 5, max number of user ports 15360
    03.01.2019 10:29:01 0E60 T CertificateRegenerationChecker::IsItTimeToRefreshCertificate(): key size and hashing algorithm are valid.
    03.01.2019 10:29:01 0F14 T +++ class MessageRouter::SenderWorker derived from BasicThreadHelper: starting.
    03.01.2019 10:29:01 0EBC T +++ class MessageRouter::SenderWorker derived from BasicThreadHelper: starting.
    03.01.2019 10:29:01 0468 T +++ class MessageRouter::SenderWorker derived from BasicThreadHelper: starting.
    03.01.2019 10:29:01 0A08 T +++ class MessageRouter::RouterThread derived from BasicThreadHelper: starting.
    03.01.2019 10:29:01 06A4 T +++ class MessageRouter::GetterThread derived from BasicThreadHelper: starting.
    03.01.2019 10:29:01 06A4 T GetterThread::Process() checking table
    03.01.2019 10:29:01 0CA8 T +++ class MessageRouter::TimeoutThread derived from BasicThreadHelper: starting.
    03.01.2019 10:29:01 0CA8 T TimeoutThread::Process() checking table
    03.01.2019 10:29:01 053C T +++ class MessageRouter::IOR_Sender derived from BasicThreadHelper: starting.
    03.01.2019 10:29:01 0530 T +++ class MessageRouter::ParentLogon derived from BasicThreadHelper: starting.
    03.01.2019 10:29:01 0530 I Getting parent router IOR from (correct:clinet-ip):8192
    03.01.2019 10:29:01 0530 T >>> StatusReporting::StatusReporter::Done
    03.01.2019 10:29:01 0530 T DNS            : problem 0, changed 0, already reported 0
    03.01.2019 10:29:01 0530 T Certification  : problem 0, changed 0, already reported 0
    03.01.2019 10:29:01 0530 T Incoming       : problem 0, changed 0, already reported 0
    03.01.2019 10:29:01 0530 T Outgoing       : problem 0, changed 0, already reported 0
    03.01.2019 10:29:01 0530 T <<< StatusReporting::StatusReporter::Done
    03.01.2019 10:29:01 0DB0 T +++ class MessageRouter::HostIPAddressMonitor<class ACEHelpers::IPAddressSet> derived from BasicThreadHelper: starting.
    03.01.2019 10:29:01 0DB0 T HostIPAddressMonitor::Process started
    03.01.2019 10:29:01 0FB8 T +++ class MessageRouter::GetterWorker derived from BasicThreadHelper: starting.
    03.01.2019 10:29:01 0A1C T +++ class MessageRouter::GetterWorker derived from BasicThreadHelper: starting.
    03.01.2019 10:29:01 0F8C T +++ class MessageRouter::TimeoutWorker derived from BasicThreadHelper: starting.
    03.01.2019 10:29:01 0530 T >>> StatusReporting::StatusReporter::SetActualParent
    03.01.2019 10:29:01 0530 D Actual parent is `(correct:clinet-ip)`
    03.01.2019 10:29:01 0530 T <<< StatusReporting::StatusReporter::SetActualParent
    03.01.2019 10:29:01 0530 T >>> StatusReporting::StatusReporter::Done
    03.01.2019 10:29:01 0530 T DNS            : problem 0, changed 0, already reported 0
    03.01.2019 10:29:01 0530 T Certification  : problem 0, changed 0, already reported 0
    03.01.2019 10:29:01 0530 T Incoming       : problem 0, changed 0, already reported 0
    03.01.2019 10:29:01 0530 T Outgoing       : problem 0, changed 0, already reported 0
    03.01.2019 10:29:01 0530 T <<< StatusReporting::StatusReporter::Done
    03.01.2019 10:29:01 0530 T >>> StatusReporting::StatusReporter::Done
    03.01.2019 10:29:01 0530 T DNS            : problem 0, changed 0, already reported 0
    03.01.2019 10:29:01 0530 T Certification  : problem 0, changed 0, already reported 0
    03.01.2019 10:29:01 0530 T Incoming       : problem 0, changed 0, already reported 0
    03.01.2019 10:29:01 0530 T Outgoing       : problem 0, changed 0, already reported 0
    03.01.2019 10:29:01 0530 T <<< StatusReporting::StatusReporter::Done
    03.01.2019 10:29:01 0530 I Received parent router's IOR:
    IOR:010000002600000049444c3a536f70686f734d6573736167696e672f4d657373616765526f757465723a312e300000000100000000000000a4000000010102000c00000031302e32312e38302e323400012000004100000014010f004e5550000000210000000001000000526f6f74504f4100526f7574657250657273697374656e740003000000010000004d657373616765526f7574657200000003000000000000000800000001001b01004f4154010000001800000001001b01010001000100000001000105090101000000000014000000080000000100a60086000220
    03.01.2019 10:29:01 0530 T MessageRouter::validateIOR called
    03.01.2019 10:29:01 0530 T Endpoint found: (correct:clinet-ip):8193
    03.01.2019 10:29:01 0530 T >>> StatusReporting::StatusReporter::Done
    03.01.2019 10:29:01 0530 T DNS            : problem 0, changed 0, already reported 0
    03.01.2019 10:29:01 0530 T Certification  : problem 0, changed 0, already reported 0
    03.01.2019 10:29:01 0530 T Incoming       : problem 0, changed 0, already reported 0
    03.01.2019 10:29:01 0530 T Outgoing       : problem 0, changed 0, already reported 0
    03.01.2019 10:29:01 0530 T <<< StatusReporting::StatusReporter::Done
    03.01.2019 10:29:01 0530 I Successfully validated parent router's IOR
    03.01.2019 10:29:01 0530 I Accessing parent
    03.01.2019 10:29:02 0530 I SSL handshake done, local IP address = (correct:ip)
    03.01.2019 10:29:02 0530 I Parent is Router$(SOPHOS-SRV)
    03.01.2019 10:29:02 0530 D Already registered with parent router
    03.01.2019 10:29:02 0530 T RouterTableEntry::LogonToParentRouter
    03.01.2019 10:29:02 0530 I RouterTableEntry::LogonToParentRouter() - logging on as active consumer
    03.01.2019 10:29:02 0530 D RouterTableEntry::unsafe_enablePolling(): set polling interval to 1242 seconds for Router$(SOPHOS-SRV)
    03.01.2019 10:29:02 0530 I RouterTableEntry state (router, logging on): Router$(SOPHOS-SRV) is passive consumer, passive supplier
    03.01.2019 10:29:02 0530 D RouterTableEntry::readyForNotifiedPoll(): await poll of Router$(SOPHOS-SRV)
    03.01.2019 10:29:02 0530 I Logged on to parent router as Router$(correct:server name):108037
    03.01.2019 10:29:02 0530 T >>> StatusReporting::StatusReporter::WriteReport
    03.01.2019 10:29:02 0FB8 D GetterWorker::ProcessEntry() - polling Router$(SOPHOS-SRV)
    03.01.2019 10:29:02 0530 I This computer is part of the domain (correct:domain)
    03.01.2019 10:29:02 0530 T >>> StatusReporting::StatusReporter::WriteAsXML
    03.01.2019 10:29:02 0530 T >>> StatusReporting::DNSSection::WriteAsXML
    03.01.2019 10:29:02 0530 T <<< StatusReporting::DNSSection::WriteAsXML
    03.01.2019 10:29:02 0530 T >>> StatusReporting::CertificationSection::WriteAsXML
    03.01.2019 10:29:02 0530 T <<< StatusReporting::CertificationSection::WriteAsXML
    03.01.2019 10:29:02 0530 T >>> StatusReporting::IncomingSection::WriteAsXML
    03.01.2019 10:29:02 0530 T <<< StatusReporting::IncomingSection::WriteAsXML
    03.01.2019 10:29:02 0530 T >>> StatusReporting::OutgoingSection::WriteAsXML
    03.01.2019 10:29:02 0530 T <<< StatusReporting::OutgoingSection::WriteAsXML
    03.01.2019 10:29:02 0530 T <<< StatusReporting::StatusReporter::WriteAsXML
    03.01.2019 10:29:02 0530 T <<< StatusReporting::StatusReporter::WriteReport
    03.01.2019 10:29:02 0FB8 D RouterTableEntry::successfulGet(): re-started polling interval for Router$(SOPHOS-SRV)
    03.01.2019 10:29:02 0FB8 D ~~~ IncomingSection: 0 strikes.
    03.01.2019 10:29:02 0FB8 T >>> StatusReporting::StatusReporter::Done
    03.01.2019 10:29:02 0FB8 T DNS            : problem 0, changed 0, already reported 0
    03.01.2019 10:29:02 0FB8 T Certification  : problem 0, changed 0, already reported 0
    03.01.2019 10:29:02 0FB8 T Incoming       : problem 0, changed 0, already reported 0
    03.01.2019 10:29:02 0FB8 T Outgoing       : problem 0, changed 0, already reported 0
    03.01.2019 10:29:02 0FB8 T <<< StatusReporting::StatusReporter::Done

  • 0 in reply to Ben@ryehills

    Hello Ben@ryehills,

    the init part looks ok. Just these four lines repeat or is there something else in between?
    I'm not sure if the parts of the logs in your posts indicate that the Agent is not talking to the Router, I think that in this case the debug trace is rather obscuring the interesting information. With or without the elevated trace level snippets from the Agent and Router logs that cover the same interval (10 minutes perhaps) would be helpful.

    Christian

  • 0 in reply to QC

    ok, one sec I will post more of the Agent log

Reply Children
No Data
Unfiltered HTML