We have a Sophos 220 Firewall with firmware 9.307-6. We have two virtual sites configured within the Webserver Protection (WAF) module. Sporadically we seem to be seeing these errors which relate to file handle exhaustion.
There seems to be similar issues within your kb, which address the issues below.
UTM Up2Date 9.204 Released | Sophos Blog
Any idea what might be happening and if it might be addressed and fixed? We have made contact with your technical support but haven't gotten very far.
2015:02:17-12:21:47 lagw01x-1 reverseproxy: [Tue Feb 17 12:21:47.162130 2015] [avscan:error] [pid 1444:tid 3854281584] [client 191.121.12.12:50000] [1444] cannot create socket: Too many open files (24)
2015:02:17-12:21:47 lagw01x-1 reverseproxy: [Tue Feb 17 12:21:47.162163 2015] [avscan:error] [pid 1444:tid 3854281584] [client 191.121.12.12:50000] [1444] virus daemon connection problem found in request /favicon.ico
2015:02:17-12:21:47 lagw01x-1 reverseproxy: [Tue Feb 17 12:21:47.194233 2015] [avscan:error] [pid 1444:tid 3854281584] [client 191.121.12.12:50000] [1444] cannot create socket: Too many open files (24)
2015:02:17-12:21:47 lagw01x-1 reverseproxy: [Tue Feb 17 12:21:47.215960 2015] [avscan:error] [pid 1444:tid 3854281584] [client 191.121.12.12:50000] [1444] virus daemon connection problem found in request /favicon.ico
2015:02:17-12:21:47 lagw01x-1 reverseproxy: id="0299" srcip="191.121.12.12" localip="12.1.122.34" size="209" user="-" host="191.121.12.12" method="GET" statuscode="404" reason="-" extra="-" exceptions="-" time="57526" url="/favicon.ico" server="REF_RevFroTestasccon" referer="-" cookie="-" set-cookie="-"
2015:02:17-12:22:12 lagw01x-1 reverseproxy: [Tue Feb 17 12:22:12.599549 2015] [avscan:error] [pid 1444:tid 3938208624] [client 198.12.110.121:1242] [1444] cannot create socket: Too many open files (24)
2015:02:17-12:22:12 lagw01x-1 reverseproxy: [Tue Feb 17 12:22:12.642320 2015] [avscan:error] [pid 1444:tid 3938208624] [client 198.12.110.121:1242] [1444] virus daemon connection problem found in request /appmain/do/app.do.Login
2015:02:17-12:22:12 lagw01x-1 reverseproxy: [Tue Feb 17 12:22:12.694155 2015] [avscan:error] [pid 1444:tid 3938208624] [client 198.12.110.121:1242] [1444] cannot open temporary file: Too many open files
2015:02:17-12:22:12 lagw01x-1 reverseproxy: [Tue Feb 17 12:22:12.694184 2015] [avscan:error] [pid 1444:tid 3938208624] [client 198.12.110.121:1242] avscan initialization failed
2015:02:17-12:22:12 lagw01x-1 reverseproxy: id="0299" srcip="198.12.110.121" localip="12.1.122.34" size="532" user="-" host="198.12.110.121" method="GET" statuscode="500" reason="av" extra="avscan initialization failed" exceptions="-" time="99964" url="/appmain/do/app.do.Login" server="REF_RevFroTestasccon" referer="-" cookie="JSESSIONID=2199F7C5B261BCD022A48D60AFE239EC" set-cookie="-"
2015:02:17-12:22:53 lagw01x-1 reverseproxy: [Tue Feb 17 12:22:53.465023 2015] [avscan:error] [pid 1444:tid 3980172144] [client 191.121.12.12:50001] [1444] cannot open temporary file: Too many open files
2015:02:17-12:22:53 lagw01x-1 reverseproxy: [Tue Feb 17 12:22:53.465053 2015] [avscan:error] [pid 1444:tid 3980172144] [client 191.121.12.12:50001] avscan initialization failed
2015:02:17-12:22:53 lagw01x-1 reverseproxy: [Tue Feb 17 12:22:53.465058 2015] [proxy_http:error] [pid 1444:tid 3980172144] (20014)Internal error: [client 191.121.12.12:50001] AH01095: prefetch request body failed to 201.113.61.43:443 (201.113.61.43) from 191.121.12.12 ()
2015:02:17-12:22:53 lagw01x-1 reverseproxy: id="0299" srcip="191.121.12.12" localip="12.1.122.34" size="226" user="-" host="191.121.12.12" method="GET" statuscode="400" reason="-" extra="-" exceptions="-" time="4121" url="/" server="REF_RevFroTestasccon" referer="-" cookie="-" set-cookie="-"
2015:02:17-12:23:36 lagw01x-1 reverseproxy: [Tue Feb 17 12:23:36.185428 2015] [avscan:error] [pid 1444:tid 3820710768] [client 191.121.12.12:50003] [1444] cannot open temporary file: Too many open files
2015:02:17-12:23:36 lagw01x-1 reverseproxy: [Tue Feb 17 12:23:36.185607 2015] [avscan:error] [pid 1444:tid 3820710768] [client 191.121.12.12:50003] avscan initialization failed
2015:02:17-12:23:36 lagw01x-1 reverseproxy: [Tue Feb 17 12:23:36.185669 2015] [proxy_http:error] [pid 1444:tid 3820710768] (20014)Internal error: [client 191.121.12.12:50003] AH01095: prefetch request body failed to 201.113.61.43:443 (201.113.61.43) from 191.121.12.12 ()
2015:02:17-12:23:36 lagw01x-1 reverseproxy: id="0299" srcip="191.121.12.12" localip="12.1.122.34" size="226" user="-" host="191.121.12.12" method="GET" statuscode="400" reason="-" extra="-" exceptions="-" time="3526" url="/" server="REF_RevFroTestasccon" referer="-" cookie="-" set-cookie="-"
2015:02:17-12:23:42 lagw01x-1 reverseproxy: [Tue Feb 17 12:23:42.688200 2015] [avscan:error] [pid 1444:tid 3871066992] [client 191.121.12.12:50004] [1444] cannot create socket: Too many open files (24)
2015:02:17-12:23:42 lagw01x-1 reverseproxy: [Tue Feb 17 12:23:42.694464 2015] [avscan:error] [pid 1444:tid 3871066992] [client 191.121.12.12:50004] [1444] virus daemon connection problem found in request /
This thread was automatically locked due to age.
