Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Endpoint for Mac HUGE log sizes

I've been noticing that my system volume is getting used up pretty fast. See attached screenshot for the sizes.

The content below is a part of the log text which keeps on repeating.

Any ideas?

'agent-relay.1.log' is 5.2 GB

2020-07-28 20:10:38.334 +0200 [] [BpmBgTimer] INFO n.mojave.netguard.relay.bpm.Bpm - Config has enabled flag set to false, disabling relay
2020-07-28 20:10:38.334 +0200 [] [BpmBgTimer] INFO n.mojave.netguard.relay.bpm.Bpm - disable tcp redirect
2020-07-28 20:10:38.334 +0200 [] [BpmTopicMsgDelivery] INFO n.m.n.r.b.BpmBasicTopicSubscribers - scheduling my ip lookup retry
2020-07-28 20:10:38.334 +0200 [] [BpmBgTimer] INFO n.mojave.netguard.relay.bpm.Bpm - disable tcp redirect status=0
2020-07-28 20:10:38.334 +0200 [] [BpmBgTimer] INFO n.mojave.netguard.relay.bpm.Bpm - Successfully disabled tcp traffic redirector rules , status=0x0
2020-07-28 20:10:38.661 +0200 [] [BpmBgTimer] INFO n.m.n.r.b.BpmBasicTopicSubscribers - retrying to get the perceived ip to check if relay is disabled on this network
2020-07-28 20:10:38.713 +0200 [] [BpmBgTimer] ERROR n.m.n.relay.utils.NetworkUtils - Direct internet reachability test failed
java.net.SocketException: Too many open files
at java.net.Socket.createImpl(Socket.java:460)
at java.net.Socket.connect(Socket.java:587)
at sun.security.ssl.SSLSocketImpl.connect(SSLSocketImpl.java:668)
at sun.net.NetworkClient.doConnect(NetworkClient.java:175)
at sun.net.www.http.HttpClient.openServer(HttpClient.java:432)
at sun.net.www.http.HttpClient.openServer(HttpClient.java:527)
at sun.net.www.protocol.https.HttpsClient.<init>(HttpsClient.java:275)
at sun.net.www.protocol.https.HttpsClient.New(HttpsClient.java:371)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.getNewHttpClient(AbstractDelegateHttpsURLConnection.java:191)
at sun.net.www.protocol.http.HttpURLConnection.plainConnect0(HttpURLConnection.java:1104)
at sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection.java:998)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:177)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1512)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1440)
at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:338)
at net.mojave.netguard.relay.utils.NetworkUtils.fetchUrl(NetworkUtils.java:278)
at net.mojave.netguard.relay.utils.NetworkUtils.getPerceivedIp(NetworkUtils.java:101)
at net.mojave.netguard.relay.utils.NetworkUtils.getPerceivedIp(NetworkUtils.java:76)
at net.mojave.netguard.relay.utils.NetworkUtils.getPerceivedInetAddress(NetworkUtils.java:57)
at net.mojave.netguard.relay.bpm.BpmBasicTopicSubscribers._isPerceivedAddressInSourceWhitelist(BpmBasicTopicSubscribers.java:1545)
at net.mojave.netguard.relay.bpm.BpmBasicTopicSubscribers.access$200(BpmBasicTopicSubscribers.java:92)
at net.mojave.netguard.relay.bpm.BpmBasicTopicSubscribers$15$1.run(BpmBasicTopicSubscribers.java:869)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$201(ScheduledThreadPoolExecutor.java:180)
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:745)

......................................

'relay-error.log' is 1.71 GB

socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files
socket SYSPROTO_CONTROL: Too many open files

......................................

'relay-output.log' is 1.28 GB

Error getting ctl_info struct ready

Error getting ctl_info struct ready

Error getting ctl_info struct ready

Error getting ctl_info struct ready

Error getting ctl_info struct ready

Error getting ctl_info struct ready

Error getting ctl_info struct ready

Error getting ctl_info struct ready

Error getting ctl_info struct ready

Error getting ctl_info struct ready

Error getting ctl_info struct ready

Error getting ctl_info struct ready

Error getting ctl_info struct ready

Error getting ctl_info struct ready

Error getting ctl_info struct ready

Error getting ctl_info struct ready

Error getting ctl_info struct ready

Error getting ctl_info struct ready

Error getting ctl_info struct ready

 

......................................



This thread was automatically locked due to age.