Sophos Enterprise Console The Server Has Run Out of Memory

Question

We are having issues with our Sophos Enterprise Console. Every other day this week the console displays the following error message 'Transient error while performing requested operation. The server has run out of memory'. error message.' The virtual machine has plenty of physical and kernel memory available.

Microsoft Windows 2008 R2 virtual machine

* 4 GB of virtual memory

* SEC version 5.0.0.8

Clicking on the advanced button I can view the error details:

[DBNETLIB][ConnectionWrite (send()).]General network error. Check your network documentation.----- [outer exception] ----- -- error: 0x829D0001 -- facility: Sophos Management Service Database Exception
at void __thiscall bl::Filter::GetComputerList(class bl::ComputerList &) const at void __thiscall CSystemSnapshot::TakeSnapshot(void) at void __thiscall CMainFrame::RefreshEverything(void) at __w64 long __thiscall CMainFrame::OnTriggerUpdate(unsigned int,__w64 unsigned int,__w64 long,int &) at int __cdecl Run(int,class bl::CommandLine,enum bl::ConsoleType::Type) at int __stdcall wWinMain(struct HINSTANCE__ *,struct HINSTANCE__ *,wchar_t *,int)

This thread was automatically locked due to age.

jak · Accepted Answer

Hi Azwan,

What version of SEC are you using? 4.5? 4.7? 5.0?

I suspect it's due to the Authorization list in the SAV policy which is related to the ThreatMasterList table. The output of:

SQLCMD -E -S .\sophos -d SOPHOS47 -Q "SELECT ThreatType, Count(*) from threatmasterlist group by ThreatType"

might be helpful.

Note: In this case I've assumed you are running SEC 4.7, hence the SOPHOS47 database reference in the command. See: http://www.sophos.com/support/knowledgebase/article/17323.html for the associated database to version.

Also, PurgeDB.exe in later version allows you to purge the ThreatMasterList as a category. I would advise upgrading to SEC 5.0 first and then see how it is if you haven't already.

Jak

:24559