XG 125 - SFOS 18.0.2 MR-2 Random Rebooting

There is a Bug fix for this issue in Mr3. https://community.sophos.com/xg-firewall/b/blog/posts/xg-firewall-v18-mr3

• NC-58402 [Firewall] Firewall reboots randomly.

Hi LuCar Toni,

Even after apply the last firmware v18-mr3 after 5 days the XG device rebooted :/

Have you any idea about where log file can I find more info about these reboots ?

Regards

Hello Carlos,

Please open a case with Support and provide me the Case ID.

The logs you want to check are the following:

csc.log, applog.log, syslog.log, msync.log and networkd.log

 If possible, memory and CPU graph and all this detail with exact date and time when issue observed.

Additionally to this please check for any coredump under /var/cores

And please confirm what is the output of this command:

console> system auto-reboot-on-stall show

And provide the logs mentioned and output of the command on the Case.

Regards,

Hi emmosophos,

Thanks fo your reply and the tips about logs.

I already opened a case, and the RMA will be provided.

Im verifying the logs and I did not found not relevant  I will attach parts of logs in exactly momment that reboot happened.

csc.log

applog.log

syslog.log

msync.log and networkd.log nothing relevant

nothing in /var/cores

the command  system auto-reboot-on-stall show  does not exists

but this one show

console> system auto-reboot-on-hang show

Auto reboot system when kernel gets into a hang state is enabled

console>

And the grpahs are normal, the reboot happen in the period that I mark as black line, the increase CPU after this it was caused by initiate process.

Best regards

Carlos

Hello Carlos,

Thank you for the logs. As per the graphs, seems not related to what my original guess was.

May have the Case ID, please.

regards,

Hi folks.

Even after RMA process, and hardware replacement, the device still restarting randomly.
There are several devices in the same Datacenter, using the same infrastructure and only XG restart. Already it was checkedall points about energy, network and the device still restarting randonly.

I already opened a ticket in sophos, but maybe someone already got this behaivior and has solution or any debug, trace process.

regards

Carlos

Hello Carlos,

Please provide me with the Case ID.

Regards,

Hello emmosophos,

The Case ID is 03418309

And after spend a looong long time debugging the log files, I found a thing that can help in something.

In syslog.log file  I found these events in exactly momment os rebbot.

Dec 6 19:08:16 (none) user.info kernel: [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0x01] high edge lint[0x1])
Dec 6 19:08:16 (none) user.info kernel: [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0x02] high edge lint[0x1])
Dec 6 19:08:16 (none) user.info kernel: [ 0.058432] NMI watchdog: Enabled. Permanently consumes one hw-PMU counter.

I still not did a big reasearch about it, but this can be a path about identify the problem.

regards

Carlos

Hello emmosophos,

The Case ID is 03418309

And after spend a looong long time debugging the log files, I found a thing that can help in something.

In syslog.log file  I found these events in exactly momment os rebbot.

Dec 6 19:08:16 (none) user.info kernel: [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0x01] high edge lint[0x1])
Dec 6 19:08:16 (none) user.info kernel: [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0x02] high edge lint[0x1])
Dec 6 19:08:16 (none) user.info kernel: [ 0.058432] NMI watchdog: Enabled. Permanently consumes one hw-PMU counter.

I still not did a big reasearch about it, but this can be a path about identify the problem.

regards

Carlos

Hello Carlos,

Thank you for the follow-up!

I have replied to your PM.

Regards,