Thread Info
  • State Suggested Answer
  • +3 person also asked this people also asked this
  • Locked Locked
  • Replies 20 replies
  • Answers 2 answers
  • Subscribers 34 subscribers
  • Views 37255 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to find cause of strange reboots?

Brad Shannon

Hi folks, appreciate your help in advance.

 

I have an XG85 running SFOS 17.0.2 MR-2.

It is set up to send logs to a Syslog server I set up just yesterday. [https://i.imgur.com/BoNeNsB.png] [https://i.imgur.com/0h1MnvD.png]

That server is receiving some logs. [https://imgur.com/TRA2qDl]

 

Twice in the last 48 hours, the device has rebooted itself during times of high usage. What log settings should I configure to see what could be causing this, in case it happens again?

 

(Also, maybe it's related to SFOS 17?)

 

2/27/18 UPDATE:

  • updated to 17.0.5, same reboot problem.
  • replaced the hardware, restored settings to replacement, same reboot problem.
  • tried factory reset and manually re-entering the settings, same reboot problem.

I have a replacement non-Sophos FW en route. However, I got some interesting data from the COM port just now, which I'll add as a new reply below.



This thread was automatically locked due to age.
Parents
  • 0

    Possible causes are

    1/. failing disk drive

    2/. running out of disk space under load eg swapping too much.

    3/. how many users, how many rules, what is the base memory and cpu use?

    4/. have you logged a fault with Sophos support?

    Ian

Reply
  • 0

    Possible causes are

    1/. failing disk drive

    2/. running out of disk space under load eg swapping too much.

    3/. how many users, how many rules, what is the base memory and cpu use?

    4/. have you logged a fault with Sophos support?

    Ian

Children
  • 0 in reply to rfcat_vk

    Thanks, Ian!

     

    1. I have not added a disk drive to the device. Storage is internal/default.
    2. As far as I know, there's no issue of disk space. Should I monitor internal storage somehow?
    3. No users set up -- my admin account only. Only one firewall rule: allow all from anywhere to anywhere (temporary -- was troubleshooting unrelated issue, haven't set up new rules). CPU usage hovers around 35%. Memory hovers around 85%. Currently 260 "live connections", 55 "sessions".
    4. Not yet! I wanted to do some research first.

    Thanks for thinking through this with me.

    It sounds like the rebooting is strange, as I suspected. But it also sounds like there isn't a clear way to diagnose the problem if it happens again. Is there any data I should be collecting that would help identify the cause?

  • 0 in reply to Brad Shannon

    Hi Brad,

    please remember this device only has an 8gb ssd. there is another thread with someone having issues with an XG85 and returning it.

    Ian

  • 0 in reply to rfcat_vk

    Here's disk usage on the device. It looks to me like there's plenty of space available on each file system, but I don't know for sure.

    XG85_XN01_SFOS 17.0.2 MR-2# df -h

    Filesystem                Size      Used Available Use% Mounted on

    rootfs                  358.8M      2.5M    333.4M   1% /

    df: /newroot: No such file or directory

    df: /newroot/dev: No such file or directory

    df: /newrootrw: No such file or directory

    none                    358.8M      2.5M    333.4M   1% /

    none                    959.0M     20.0K    959.0M   0% /dev

    none                     96.0M     23.3M     72.7M  24% /tmp

    none                    959.0M     12.5M    946.4M   1% /dev/shm

    /dev/conf               385.4M     58.2M    327.1M  15% /conf

    /dev/content              5.0G    780.1M      4.2G  15% /content