Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 13 replies
  • Subscribers 1 subscriber
  • Views 7463 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

no communication between client and server

error01

Hi,

I have a Sophos Endpoint Security 10.0 in my client win XP and 7 and a Sophos Enterprise Console 4.5.1, all in active directory.

But since a while my Enterprise Console doesn't receive message from my client ,I can"t scan my client from my Enterprise Console and no virus are detected in "computer with alarm" while I have virus in some of my computer.

The clients are online and seen by the server but I can do nothing from the Enterprise Console no scan, no update or resolve the alarm. All the client are mute since the same date.

Anybody familiar with this problems ?

:33495


This thread was automatically locked due to age.
  • 0

    Hello error01,

    the ports required for successful communication are 8192 and 8194 - please do a search for these numbers on this board, this will return quite some articles on RMS problems, the components involved and how to go about resolving issues. If you still can't solve the problem please post again with your findings so far.

    Christian

    :33503
  • 0

    Hi,

    Thank's for your help I verified the ports 8192 and 8194 with NMAP and they are ready to listennning, the systeme have already works a "long time ago"  but since one month we have this problems of communications but the client make their update from the server and I have no made any changes on my Enterprise Console.

    :33625
  • 0

    Hello error01,

    if no client communicates with the console there has likely been a change somewhere. BTW: AutoUpdate and RMS are independent components and use different ports and protocols, thus one might work while the other does not.

    Please take a look at a client's router logs - there should be recent entries. Usually there is a line saying Getting parent router IOR from - there might be an error reported in the following lines. If unsure, please post a snippet here.

    Christian

    :33627
  • 0

    Hi, 

    I Getting parent router IOR from SRV_SOPHOS:8192
    25.09.2012 10:20:15 09A4 W Delivery failed(Timeout) for message type EM-EntityEvent, originator Router$SC0020:216027.Agent
    25.09.2012 10:20:15 09A4 W Delivery failed(Timeout) for message type EM-EntityEvent, originator Router$SC0020:216027.Agent
    25.09.2012 10:20:15 09A4 W Delivery failed(Timeout) for message type EM-EntityEvent, originator Router$SC0020:216027.Agent
    25.09.2012 10:22:26 099C I This computer is part of the domain PBNA
    25.09.2012 10:22:56 099C I Getting parent router IOR from 172.17.17.222:8192
    25.09.2012 10:27:56 099C I Getting parent router IOR from fe80::a9dc:bbbd:3cf4:10f4:8192
    25.09.2012 10:27:56 099C E ACE_INET_Addr::ACE_INET_Addr: fe80::a9dc:bbbd:3cf4:10f4: Le nom demandé est valide, mais aucune donnée du type requise n’’’’a été trouvée. 
    25.09.2012 10:27:56 099C W Parent address unknown: Le nom demandé est valide, mais aucune donnée du type requise n’’’’a été trouvée. (11004)

    it's what I found in the log router it's the most recent log that I have in my "C:\ProgramData\Sophos\Remote Management System\3\Router\Log".

    I look in my Sophos SQL database and the last entry was at the same date that my problems and the service Sophos Message Router in my server is down and I can"t start it, it can be problematic.

    :33645
  • 0

    Hello error01,

    the service Sophos Message Router in my server is down

    do I understand correctly that on the management server (SEC) the Sophos Message Router service isn't running? If so - what's the error you receive when you try to start it?

    The log you've posted is from a client (in the sense of endpoint, not the management server), specifically SC0020? I assume this is not the complete log - could you post some more lines? Looks like it doesn't receive response when trying to obtain the IOR (which would be no wonder if RMS is not running on the server).

    Assuming your server is 172.17.17.222 you can verify that it responds by using telnet 172.17.17.222 8192 - this should return a string tarting with IOR:.

    Christian

    :33659
  • 0

    Hi,

    Yes  the Sophos Message Router service isn't running and when I try to start it I have an error 1067: the process is stop unexpectedly.

    Yes sorry my client is SC0020 and my server sophos is 172.17.17.222 and the log that I send is from my client SC0020.

    This is the complet LOG from my client SC0020

    25.09.2012 10:07:21 0834 I SOF: C:\ProgramData/Sophos/Remote Management System/3/Router/Logs/Router-20120925-080721.log
    25.09.2012 10:07:21 0834 I Sophos Messaging Router 3.4.1.3411 starting...
    25.09.2012 10:07:21 0834 I Setting ACE_FD_SETSIZE to 138
    25.09.2012 10:07:21 0834 I Initializing CORBA...
    25.09.2012 10:07:22 0834 I Setting connection cache limit to 10
    25.09.2012 10:07:22 0834 I Creating ORB runner with 4 threads
    25.09.2012 10:07:22 0834 I This computer is part of the domain PBNA
    25.09.2012 10:07:22 0834 E ACE_DLL::open failed for TAO_ImR_Client: Error: check log for details.
    25.09.2012 10:07:22 0834 E Unable to find service: ImR_Client_Adapter
    25.09.2012 10:07:22 0834 I This router's IOR:
    IOR:010000002600000049444c3a536f70686f734d6573736167696e672f4d657373616765526f757465723a312e300000000100000000000000a0000000010102000d0000003137322e31372e31362e3836000001204100000014010f004e5550000000210000000001000000526f6f74504f4100526f7574657250657273697374656e740003000000010000004d657373616765526f7574657200000003000000000000000800000001009700004f41540100000014000000010097000100010000000000090101000000000014000000080000000100a60086000220
    25.09.2012 10:07:22 0834 I Successfully validated this router's IOR
    25.09.2012 10:07:22 0834 I Reading router table file
    25.09.2012 10:07:25 0834 I Host name: SC0020
    25.09.2012 10:07:25 0834 I Local IP addresses: 172.17.16.86 
    25.09.2012 10:07:25 0834 I Resolved name: SC0020.PBNA.intra
    25.09.2012 10:07:25 0834 I Resolved alias/es: 
    25.09.2012 10:07:25 0834 I Resolved IP addresses: 172.17.16.86 
    25.09.2012 10:07:25 0834 I Resolved reverse names/aliases: SC0020.PBNA.intra 
    25.09.2012 10:07:25 098C I Routing to parent: id=004EF3FF, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=004EF41C, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=004EF41E, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 0834 I Waiting for messages...
    25.09.2012 10:07:25 098C I Routing to parent: id=004F0DBA, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=004F1A3A, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=004F1CFC, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=004FEF5F, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005043F8, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 099C I Getting parent router IOR from 172.17.17.222:8192
    25.09.2012 10:07:25 098C I Routing to parent: id=00511680, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=0051951D, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=0052EB7D, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=00539941, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=00545356, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=0054EA54, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=0056D465, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=00582CF2, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=0059378F, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=0059849B, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9184, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A91B3, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 0834 I RouterSystemCheck::onInfoPortsUsed() - number of user ports 3, max number of user ports 15360
    25.09.2012 10:07:25 098C I Routing to parent: id=005A91B4, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A91B8, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A91BB, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A91C4, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A91E5, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9210, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9214, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9215, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9217, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9219, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A921A, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A921C, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A921D, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A921F, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9220, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9222, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9223, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9225, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9227, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9228, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A922A, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent

    :33669
  • 0

    25.09.2012 10:07:25 098C I Routing to parent: id=005A922B, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A922D, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A922E, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9230, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9231, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9233, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9235, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9236, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9238, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9239, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A923B, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A923C, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A923E, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A923F, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9241, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9243, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9244, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9246, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9247, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9249, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A924A, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A924C, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A924E, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A924F, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9251, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9254, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A92C7, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9310, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9312, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9313, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A933B, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A933D, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=025A933D, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A933F, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9341, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A945F, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A94AC, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A94F2, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A94F4, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A94F6, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A94F8, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A94F9, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A94FB, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9561, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9563, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9565, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9566, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9568, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9569, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A956B, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A956C, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A956E, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A956F, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9571, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9573, origin=Router$SC0020:216027.Agent, dest=EM, type=EM-EntityEvent
    25.09.2012 10:07:25 098C I Routing to parent: id=005A9574, origin=Router$SC0020:216027.Agent, dest=EM,     type=EM-EntityEvent

    :33671
  • 0

    This is not the complet log but I think there is the same error who loops back all the time

    :33673
  • 0

    Hello error01,

    the same error who loops back all the time

    right, it's just that it has lots of messages for the console which it enqueues for transmission but can't deliver. Think we can put the client aside.

    Please see item 1. in Enterprise Console: Sophos Message Router service terminated with Windows Event ID 7031 - well, it just points you to The Envelopes folder in Endpoint Security and Control, you can go to the latter directly. 

    HTH

    Christian

    :33677
  • 0

    I try but without success.

    I think it's not good in this command line, it's the command line for execut the sophos messge router but the IP adress is not the good one does it normal ?

    C:\Program Files (x86)\Sophos\Enterprise Console\Remote Management System\RouterNT.exe" -service -name Router -ORBListenEndpoints iiop://172.17.17.22:8193/ssl_port=8194

    :33689