This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DO NOT INSTALL 9.703-2!!!

DO NOT INSTALL 9.703-2!!!

My lab system was Up2Dated to 9.703-2 Thursday evening at 10PM CDT (UTC -0500) and all connection with the outside world immediately stopped.  My local connection would work normally a few minutes at a time and then everything would lock up for a few minutes.  I could not identify the problem with top, but did see a lot of zombie confd processes.  I lost the entire day of Friday because my wife has a big project due next week and was working via Microsoft Teams all day with her colleagues.

I will suggest to Sophos that the file be removed from the ftp site. Grumble.

Cheers - Bob



This thread was automatically locked due to age.
Parents Reply Children
  • Definately something going on with your interfaces, mine does not have all theese:

     

    2020:04:16-00:15:29 fw ntpd[5124]: Listen normally on 69 eth3 xxx.xxx.xxx.xxx:123
    2020:04:16-00:15:29 fw ntpd[5124]: Deleting interface #68 eth3, xxx.xxx.xxx.xxx#123, interface stats: received=0, sent=0, dropped=0, active_time=32 secs
    2020:04:16-00:15:29 fw ntpd[5124]: new interface(s) found: waking up resolver

     

    What does Self monitoring show?

    -----

    Best regards
    Martin

    Sophos XGS 2100 @ Home | Sophos v20 Architect

  • Selfmonitoring as of  today (complete log)

    2020:04:16-10:34:39 fw selfmonng[4722]: I check Failed increment afc_running counter 1 - 3
    2020:04:16-14:24:35 fw selfmonng[4722]: T Global skip state now 'ON'
    2020:04:16-14:26:15 fw selfmonng[4561]: T Selfmonitor Daemon successfully started
    2020:04:16-14:26:15 fw selfmonng[4561]: T Loading Selfmonitoring Checks complete  new=93 failed=0 retained=0 dropped=0
    2020:04:16-14:26:30 fw selfmonng[4561]: I check Failed increment dnsresolver_running counter 1 - 3
    2020:04:16-14:26:45 fw selfmonng[4561]: T read config file '/etc/selfmonng.conf'
    2020:04:16-14:26:45 fw selfmonng[4561]: I check Failed increment service_monitor_running counter 1 - 3
    2020:04:16-14:26:50 fw selfmonng[4561]: I check Failed increment pluto_running counter 1 - 15
    2020:04:16-14:26:50 fw selfmonng[4561]: I check Failed increment starter_running counter 1 - 3

    Mit freundlichem Gruß, best regards from Germany,

    Philipp Rusch

    New Vision GmbH, Germany
    Sophos Silver-Partner

    If a post solves your question please use the 'Verify Answer' button.

  • The 198.19.250.x/24 network range is linked to HA, are you using HA? if not try disable this. By default I think it is set to zeroconf.  If you could post the high availability logs it may have more details there

     

    2020:04:16-00:00:27 fw ntpd[5124]: Listen normally on 41 eth3 198.19.250.x:123
    2020:04:16-00:00:27 fw ntpd[5124]: Deleting interface #40 eth3, 198.19.250.x#123, interface stats: received=0, sent=0, dropped=0, active_time=64 secs
    2020:04:16-00:00:27 fw ntpd[5124]: new interface(s) found: waking up resolver

     

    if you cannot get to the web admin but have serial/shell access as root you can run this command to check the status and disable

    cc get ha status

    cc set ha status off

  • Hello Draco,

    I know, but neither is there something configured for HA, nor is something connected to port eth3.

    HA was set to "automatic", I turned to "OFF" now and watch what happens.

    Mit freundlichem Gruß, best regards from Germany,

    Philipp Rusch

    New Vision GmbH, Germany
    Sophos Silver-Partner

    If a post solves your question please use the 'Verify Answer' button.