This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Enterprise Console The Server Has Run Out of Memory

We are having issues with our Sophos Enterprise Console. Every other day this week the console displays the following error message 'Transient error while performing requested operation. The server has run out of memory'. error message.' The virtual machine has plenty of physical and kernel memory available.

Microsoft Windows 2008 R2 virtual machine

* 4 GB of virtual memory

* SEC version 5.0.0.8

Clicking on the advanced button I can view the error details:

[DBNETLIB][ConnectionWrite (send()).]General network error. Check your network documentation.----- [outer exception] -----   -- error: 0x829D0001   -- facility: Sophos Management Service Database Exception
   at void __thiscall bl::Filter::GetComputerList(class bl::ComputerList &) const   at void __thiscall CSystemSnapshot::TakeSnapshot(void)   at void __thiscall CMainFrame::RefreshEverything(void)   at __w64 long __thiscall CMainFrame::OnTriggerUpdate(unsigned int,__w64 unsigned int,__w64 long,int &)   at int __cdecl Run(int,class bl::CommandLine,enum bl::ConsoleType::Type)   at int __stdcall wWinMain(struct HINSTANCE__ *,struct HINSTANCE__ *,wchar_t *,int)

:24271


This thread was automatically locked due to age.
Parents
  • Hi Azwan,

    What version of SEC are you using? 4.5?  4.7?  5.0?

    I suspect it's due to the Authorization list in the SAV policy which is related to the ThreatMasterList table.  The output of:

    SQLCMD -E -S .\sophos -d SOPHOS47 -Q "SELECT ThreatType, Count(*) from threatmasterlist group by ThreatType"

    might be helpful.

    Note: In this case I've assumed you are running SEC 4.7, hence the SOPHOS47 database reference in the command.  See: http://www.sophos.com/support/knowledgebase/article/17323.html for the associated database to version.

    Also, PurgeDB.exe in later version allows you to purge the ThreatMasterList as a category.  I would advise upgrading to SEC 5.0 first and then see how it is if you haven't already.

    Jak

    :24559
Reply
  • Hi Azwan,

    What version of SEC are you using? 4.5?  4.7?  5.0?

    I suspect it's due to the Authorization list in the SAV policy which is related to the ThreatMasterList table.  The output of:

    SQLCMD -E -S .\sophos -d SOPHOS47 -Q "SELECT ThreatType, Count(*) from threatmasterlist group by ThreatType"

    might be helpful.

    Note: In this case I've assumed you are running SEC 4.7, hence the SOPHOS47 database reference in the command.  See: http://www.sophos.com/support/knowledgebase/article/17323.html for the associated database to version.

    Also, PurgeDB.exe in later version allows you to purge the ThreatMasterList as a category.  I would advise upgrading to SEC 5.0 first and then see how it is if you haven't already.

    Jak

    :24559
Children
  • thanks a lot... it solves!

    the query "SELECT ThreatType, Count(*) from threatmasterlist group by ThreatType" returned 1 million of entrys... so the PurgeDB.exe -category=threatMasterList solved the outofmemory error opening all the Antivirus policies!

       Mauro