v19.0.1 MR-1 IPS service has stopped and will not restart, the error message is the process is taking too long.
There are no entries in the Logviewer -> system log indicating any issues.
Next step please.
Update :- after two attempts the GUI shows the service as restarting. There are no entries in log viewer -> IPS.
Memory has dropped from 80+% to 66%, CPU has increased
10am yesterday I restarted a 8 port switch to see if that would fix an IPv6 issue which it did, but the memory use dropped significantly. I also changed the maximum network packet size on one LAN interface which took all interfaces off line for a short time another bug.
We looked into your device, and IPS could not start because it could not allocate enough memory for buffers. The higher the MTU value, the more memory IPS requires. This explains why when…
Could be still the known issue. The problem is: IPS will restart with a ATP update. This could potentially mean, it hung at this point. Thats the reason for the mem incease, as there are stalled IPS processes. Lets see, if this issue remains in the respin version.
still broken this morning on the same version as initially reported. Last pattern check was the 12th of August before I forced a check this morning.
XG115W - v19.0.1 mr-1 - Home
1225v5 6gb ram, SSID, 4 NICs 20w - v19 EAP - on holiday.
If a post solves your question please use the 'Verify Answer' button.
does anyone from Sophos Support have an idea when the issue will be resolved?
When the new V19.0 MR1 will be released, lets try this version. Likely it will resolve your issue.
Thank you for the suggestion. There is also an issue with no AV updates.
Hello rfcat_vk,You can execute the following command in the advance shell: /bin/sh /scripts/u2d/u2d_refresh_patterns.shWhich will uninstall and re-install the patterns on the appliance, this might help too !!
Thanks & Regards,
Vivek Jagad | Technical Account Manager 3 | Cyber Security Evolved
Sophos Community | Product Documentation | Sophos Techvids | SMSIf a post solves your question please use the 'Verify Answer' button.
thank you for the instructions. I ran the script which produced a series of errors about retry count: bad number.
The IPS update attempted to download an old file 18.17.96 and failed.
Hey rfcat_vk can you PM me the support access id ?
Thank you for running the new script. I see that the IPS pattern has updated, but still shows failed. The IPS service shows dead. None of the firmware has updated since I ran the script last night. I have changed the update schedule to 12 hours.
I initiated a firmware update, downloaded and failed.
Another irrelevant answer, please delete or I will.
Hey rfcat_vk,I found under the ips.log:modprobe: can't load module nfnetmap_queue (extra/nfnetmap_queue.ko): Cannot allocate memory2022-08-15T23:23:12.398023Z  '/scripts/firewall/manage_slowpath.sh reload 4': exited, status=12022-08-15T23:23:12.398052Z  configure spdaq failed2022-08-15T23:23:12.398109Z  IPS: Master process is going down========================I would also suggest once you please raise a service request with the sophos support !!