This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

One Linux machine not getting updated.

I have Sophos Enterprise Console running on a Windows 2008 Server R2 machine and 3 machines each running Linux Mint Cinnamon 17.1. The Console is reporting that one of the Linux machines is failing to download savupdate from the EC machine since 3 February but the other two machines have updated with no problem. The problem machine has updated successfully for months before this. I don't remember doing anything different on this machine around 3 February. The machine works fine otherwise - no problems with connectivity or network access. I do not know where to look next for the problem.

This thread was automatically locked due to age.

0 DouglasLeeder over 8 years ago

savlog on the machine with the problem might give some more information on the failure.

Or you can try running savupdate directly: the arguments: "-v5" "--debug" may give some more information on the update failure.
Cancel
Vote Up 0 Vote Down

Cancel
0 DavidCluley over 8 years ago in reply to DouglasLeeder

I cannot find a savlog file on my machine. A search shows various with this name but none with a recent date.

How do I run savupdate directly?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 DouglasLeeder over 8 years ago in reply to DavidCluley

If you've installed to the default location:

/opt/sophos-av/bin/savlog

And to run savupdate directly:

/opt/sophos-av/bin/savupdate -v5
Cancel
Vote Up 0 Vote Down

Cancel
0 DavidCluley over 8 years ago in reply to DouglasLeeder

Ah! Thanks for that. savlog just has lines saying 'Update failed - Failed to replicate from all update sources'

and the output from running savupdate -v5 just gives:

Updating from \\W2K8SVR1\SophosUpdate\CIDs\S000\savlinux
Reading \\W2K8SVR1\SophosUpdate\CIDs\S000\savlinux/cidsync.upd
Reading /opt/sophos-av/update/cache/Primary/cidsync.upd
Failed to replicate from \\W2K8SVR1\SophosUpdate\CIDs\S000\savlinux
Failed to replicate from all update sources

which does not seem too much more informative.

I would like to know what the problem is but perhaps the easiest thing to try is just to reinstall it.
Cancel
Vote Up 0 Vote Down

Cancel
0 DouglasLeeder over 8 years ago in reply to DavidCluley

"savupdate -v5 --debug" might tell us something. I suspect /opt/sophos-av/update/cache/Primary/cidsync.upd has got corrupted.
Cancel
Vote Up 0 Vote Down

Cancel
0 DavidCluley over 8 years ago in reply to DouglasLeeder

Yes - I think you are right. Running that command with --debug produces a fair amount of output. The lines where it appears to go wrong are:

Updating from \\W2K8SVR1\SophosUpdate\CIDs\S000\savlinux
Reading \\W2K8SVR1\SophosUpdate\CIDs\S000\savlinux/cidsync.upd
Reading /opt/sophos-av/update/cache/Primary/cidsync.upd
Failed to replicate from \\W2K8SVR1\SophosUpdate\CIDs\S000\savlinux
Incorrect checksum

What is the best way of curing this?
Cancel
Vote Up 0 Vote Down

Cancel
0 DouglasLeeder over 8 years ago in reply to DavidCluley

Please try moving /opt/sophos-av/update/cache/Primary/cidsync.upd to a different directory.
Cancel
Vote Up 0 Vote Down

Cancel
0 DavidCluley over 8 years ago in reply to DouglasLeeder

Moved cidsync.upd and ran savupdate which locally reported a successful update. Enterprise Console is reporting code 0000006a Installation caught error savupdate which I assume is the fact that it was missing because I had moved it. If I am right then thank you very much for you patience and your help. Very much appreciated.
Cancel
Vote Up 0 Vote Down

Cancel
0 DavidCluley over 8 years ago in reply to DouglasLeeder

Further to my message timed at 4:18pm Enterprise Console is now reporting a successful update and removed its error flag. Very many thanks again.
Cancel
Vote Up 0 Vote Down

Cancel
0 DouglasLeeder over 8 years ago

I'd be interesting in seeing the broken cidsync.upd if you still have it.
Cancel
Vote Up 0 Vote Down

Cancel