Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 19 replies
  • Subscribers 4 subscribers
  • Views 15071 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos UTM 9 get to offline

tetta
Hi everyone, Im newbie here. A few days ago after years of using astaro I upgrade my firewall to sophos UTM 9. I realized that after some time of users inactivity (not browsing the net) sophos get to some "offline phase", and I cant get to internet nor to internal NAS. Ping is OK, DHCP is working but I cant make RDP to other PC into LAN neither browse the web. Any ideas how to repair that? thanks,


This thread was automatically locked due to age.
  • 0
    Hi there, after changing motherboard (also with ATOM but 1 NIC (intel ;( ) the problem still exists...Will wait for 9.005, but if there is any info when it will probably be released?

    BTW - when it hangs, I cant go to admin site to view kernel log..
  • 0 in reply to BrucekConvergent
    I have the same issue on XEN. The Log:

     gw01:/root # version 

    Current software version...: 9.004033
    Hardware type..............: Software Appliance
    Installation image.........: 9.000-8.1
    Installation type..........: asg
    Installed pattern version..: 41142
    Downloaded pattern version.: 41143
    Up2Dates applied...........: 5 (see below)
                                 sys-9.000-9.001-8.18.1.tgz (Oct  8 11:28)
                                 sys-9.001-9.002-18.12.1.tgz (Oct  8 11:30)
                                 sys-9.002-9.003-12.15.1.tgz (Oct 24 13:25)
                                 sys-9.003-9.003-15.16.4.tgz (Oct 24 13:25)
                                 sys-9.003-9.004-15.33.1.tgz (Nov 27 11:19)
    Up2Dates available.........: 1
    Factory resets.............: 0
    Timewarps detected.........: 0


    2012:12:19-14:30:13 gw01-1 kernel: [93877.824099] ------------[ cut here ]------------
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824153] WARNING: at net/sched/sch_generic.c:256 dev_watchdog+0xe7/0x182()
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824160] Hardware name: HVM domU
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824172] NETDEV WATCHDOG: eth0 (8139cp): transmit queue 0 timed out
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824175] Modules linked in: authenc esp4 xfrm6_mode_tunnel xfrm4_mode_tunnel xt_nat xt_esp deflate zlib_deflate two
    fish_x86_64_3way twofish_x86_64 twofish_generic twofish_common serpent_sse2_x86_64 lrw xts gf128mul serpent_generic cryptd aes_x86_64 aes_generic blowfish_x
    86_64 blowfish_generic blowfish_common cast5 des_generic cbc sha512_generic sha256_generic sha1_ssse3 sha1_generic hmac crypto_null xfrm_user af_key xt_hash
    limit xt_NFQUEUE xt_TPROXY nf_tproxy_core xt_socket ipt_REDIRECT ipt_MASQUERADE xt_limit xt_asgcluster xt_mark xt_psd(O) xt_addrtype xt_connmark xt_policy x
    t_tcpudp xt_multiport xt_set ip_set_hash_net ip_set_hash_ip asg_multipath nf_nat_pptp nf_nat_proto_gre nf_nat_irc nf_nat_ftp nf_conntrack_pptp nf_conntrack_
    proto_gre nf_conntrack_irc nf_conntrack_ftp nfnetlink_queue tun ebtable_filter ebtables ip6table_ips ip6table_mangle ip6table_nat nf_nat_ipv6 iptable_ips ip
    table_mangle iptable_nat nf_nat_ipv4 nf_nat xt_NFLOG xt_condition(O) xt_logmark xt_owner xt_conntrack ip6t_REJECT nfnetlink_log ipt_REJECT ip_set warp4 asg_
    cluster_ipv6 asg_cluster_ipv4 asg_cluster ip_scheduler af_packet xt_confirmed mperf nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_filter ip6table_raw nf_conntra
    ck_ipv4 nf_defrag_ipv4 xt_state iptable_filter xt_NOTRACK iptable_raw nf_conntrack_netlink nfnetlink nf_conntrack ip6_tables ip_tables x_tables ipv6 red loo
    p ppdev parport_pc sr_mod pcspkr 8139too parport cdrom sg i2c_piix4 rtc_cmos 8139cp evdev mii button usbhid uhci_hcd ehci_hcd sd_mod processor thermal_sys h
    wmon pata_acpi ata_generic ata_piix libata scsi_mod edd
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824268] Pid: 0, comm: swapper/1 Tainted: G           O 3.3.8-40.ga2ba19e-smp64 #1
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824271] Call Trace:
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824275]    [] ? dev_watchdog+0xe7/0x182
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824284]  [] ? warn_slowpath_common+0x78/0x8d
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824288]  [] ? netif_tx_lock+0x7e/0x7e
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824292]  [] ? warn_slowpath_fmt+0x45/0x4a
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824296]  [] ? netif_tx_lock+0x43/0x7e
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824307]  [] ? dev_watchdog+0xe7/0x182
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824311]  [] ? run_timer_softirq+0x168/0x1fa
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824316]  [] ? __do_softirq+0x86/0x125
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824321]  [] ? call_softirq+0x1c/0x30
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824326]  [] ? do_softirq+0x3f/0x79
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824329]  [] ? irq_exit+0x43/0xb0
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824339]  [] ? xen_evtchn_do_upcall+0x27/0x32
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824343]  [] ? xen_hvm_callback_vector+0x6e/0x80
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824346]    [] ? native_safe_halt+0x2/0x3
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824352]  [] ? native_safe_halt+0x2/0x3
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824357]  [] ? default_idle+0x23/0x3f
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824361]  [] ? cpu_idle+0x6b/0xa9
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824364] ---[ end trace 5a73fc46217ecf87 ]---
    2012:12:19-14:30:13 gw01-1 kernel: [93877.824498] 8139cp 0000:00:04.0: eth0: Transmit timeout, status  d   3b    0 80ff
    2012:12:19-14:30:25 gw01-1 kernel: [93889.824256] 8139cp 0000:00:04.0: eth0: Transmit timeout, status  d   3b    4    0
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824242] 8139cp 0000:00:04.0: eth0: Transmit timeout, status  d   3b    4    0
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824605] ------------[ cut here ]------------
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824614] WARNING: at kernel/softirq.c:159 _local_bh_enable_ip+0x41/0x8c()
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824617] Hardware name: HVM domU
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824619] Modules linked in: authenc esp4 xfrm6_mode_tunnel xfrm4_mode_tunnel xt_nat xt_esp deflate zlib_deflate two
    fish_x86_64_3way twofish_x86_64 twofish_generic twofish_common serpent_sse2_x86_64 lrw xts gf128mul serpent_generic cryptd aes_x86_64 aes_generic blowfish_x
    86_64 blowfish_generic blowfish_common cast5 des_generic cbc sha512_generic sha256_generic sha1_ssse3 sha1_generic hmac crypto_null xfrm_user af_key xt_hash
    limit xt_NFQUEUE xt_TPROXY nf_tproxy_core xt_socket ipt_REDIRECT ipt_MASQUERADE xt_limit xt_asgcluster xt_mark xt_psd(O) xt_addrtype xt_connmark xt_policy x
    t_tcpudp xt_multiport xt_set ip_set_hash_net ip_set_hash_ip asg_multipath nf_nat_pptp nf_nat_proto_gre nf_nat_irc nf_nat_ftp nf_conntrack_pptp nf_conntrack_
    proto_gre nf_conntrack_irc nf_conntrack_ftp nfnetlink_queue tun ebtable_filter ebtables ip6table_ips ip6table_mangle ip6table_nat nf_nat_ipv6 iptable_ips ip
    table_mangle iptable_nat nf_nat_ipv4 nf_nat xt_NFLOG xt_condition(O) xt_logmark xt_owner xt_conntrack ip6t_REJECT nfnetlink_log ipt_REJECT ip_set warp4 asg_
    cluster_ipv6 asg_cluster_ipv4 asg_cluster ip_scheduler af_packet xt_confirmed mperf nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_filter ip6table_raw nf_conntra
    ck_ipv4 nf_defrag_ipv4 xt_state iptable_filter xt_NOTRACK iptable_raw nf_conntrack_netlink nfnetlink nf_conntrack ip6_tables ip_tables x_tables ipv6 red loo
    p ppdev parport_pc sr_mod pcspkr 8139too parport cdrom sg i2c_piix4 rtc_cmos 8139cp evdev mii button usbhid uhci_hcd ehci_hcd sd_mod processor thermal_sys h
    wmon pata_acpi ata_generic ata_piix libata scsi_mod edd
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824711] Pid: 0, comm: swapper/1 Tainted: G        W  O 3.3.8-40.ga2ba19e-smp64 #1
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824714] Call Trace:
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824717]    [] ? _local_bh_enable_ip+0x41/0x8c
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824725]  [] ? warn_slowpath_common+0x78/0x8d
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824729]  [] ? _local_bh_enable_ip+0x41/0x8c
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824739]  [] ? destroy_conntrack+0x81/0x9b [nf_conntrack]
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824750]  [] ? skb_release_head_state+0x92/0xd2
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824754]  [] ? skb_release_all+0x9/0x1e
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824757]  [] ? __kfree_skb+0x9/0x6f
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824766]  [] ? cp_clean_rings+0xae/0x104 [8139cp]
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824776]  [] ? cp_tx_timeout+0x8d/0xf0 [8139cp]
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824780]  [] ? netif_tx_lock+0x7e/0x7e
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824784]  [] ? dev_watchdog+0xfb/0x182
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824788]  [] ? run_timer_softirq+0x168/0x1fa
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824792]  [] ? __do_softirq+0x86/0x125
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824797]  [] ? call_softirq+0x1c/0x30
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824802]  [] ? do_softirq+0x3f/0x79
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824805]  [] ? irq_exit+0x43/0xb0
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824811]  [] ? xen_evtchn_do_upcall+0x27/0x32
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824815]  [] ? xen_hvm_callback_vector+0x6e/0x80
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824817]    [] ? native_safe_halt+0x2/0x3
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824825]  [] ? default_idle+0x23/0x3f
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824828]  [] ? cpu_idle+0x6b/0xa9
    2012:12:19-14:30:37 gw01-1 kernel: [93901.824832] ---[ end trace 5a73fc46217ecf88 ]---
  • 0
    9.005 is released, but the release notes don't mention it as being fixed. I asked for clarification in the official up2date thread.
  • 0 in reply to FrancWest
    I'm still having this issue and am running 9.006-5

    2013:04:25-13:25:19 hq kernel: [254604.820747] e1000e 0000:03:00.0: eth2: Detected Hardware Unit Hang:
    etc
  • 0 in reply to thedukeness
    I'm still having this issue and am running 9.006-5

    2013:04:25-13:25:19 hq kernel: [254604.820747] e1000e 0000:03:00.0: eth2: Detected Hardware Unit Hang:
    etc


    Does the NIC not work because of this?

    Do you know the chipset and/or model # of the NIC?

    Barry
  • 0
    Every couple of months or so the NIC will go totally offline because of this error and the only way I've found to restore it is a reboot which is a bummer.  This is a Sophos UTM 120, I'm not sure what's in it but it sounds like an intel chip since the error says "e1000e".
  • 0
    'lspci' should give you more info.

    Barry
  • 0

    Hi

    We use a Sophos UTM 120. Since a few weeks we have the same problem. Is there a fix for this problem?

    In the kernel log I found this:

    e1000e 0000:04:00.0 eth1: Detected Hardware Unit Hang:

    When this happens, no connection is possible and this entry repeads about all two seconds.

  • 0 in reply to ITSupport21

    Hi, and welcome to the UTM Community!

    As you know from reading the foregoing, the problem with the Intel e1000 NICs was fixed four years ago.  If /sbin/ethtool -K eth1 tso off solves your problem, use this trick to have the change done at each reboot.

    Cheers - Bob