Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 6 subscribers
  • Views 14978 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM rebooting for no apparent reason

BigO

Over the past three weeks or so my UTM has rebooted itself four times.

I been using this firewall for many years now and I have never experienced this before.

The box is connected to a UPS, so it is not a power issue and the email notification I get after the reboot gives the reason as (unknown)

Has anyone else experienced this issue? If so, how do I stop this automatic rebooting from happening?



This thread was automatically locked due to age.
  • 0

    if it is randomly rebooting that is an indication of a hardware problem..either it's is dirty inside and overheating or the hard disk is failing.  is this a sophos appliance or home build?

  • 0 in reply to William Warren

    It is a home build on a business level workstation.

    I will check the box out, but I have not noticed any issues with it.

  • 0

    Have you checked the kernel and system logs from the time around the reboots?

    Keep an eye out for a line of @s or ^@s as these sometimes appear when power is cut unexpectedly.

    My next step after those two logs would be to login to the UTM via SSH as loginuser

    # cd /var/storage/cores

    # ls -lh

    and look for cores from around the time of the reboot.  The name of the core will tell you the system that dumped and there will be a numbered file extension that will be the PID of the process that dumped.  We're interested in the name of the system as that will give an idea of which logs will have more relevant data.

  • 0

    I am waiting for the firewall to do another auto reboot, at which time I will attempt to get as much log info as I can.

  • 0 in reply to BigO

    Well... the UTM rebooted again this evening for no apparent reason.

    The first thing that I need to make very clear is that I am in no way a Linux person. I can get to the console and make myself root, but what to do from there is a bit of a mystery to me. Taking that into acount, I am willing to try things, but in order to do that I will need some very clear instructions.

    I checked the system and kernel logs as suggested, but there were no entries for @s or ^@s

    I then logged in as loginuser and changed to root then I typed...
    # cd /var/storage/cores
    # ls -lh

    and got the following:

    total 84M
    -rw-r--r-- 1 root root  13M Nov 27 00:00 admin-reporter..18569
    -rw-r--r-- 1 root root  13M Nov  1 00:00 admin-reporter..26456
    -rw-r--r-- 1 root root  13M Jan 23  2015 admin-reporter..5334
    -rw-r--r-- 1 root root 8.6M Nov  4 14:10 mailsec-reporte.29168
    -rw-r--r-- 1 root root 1.7M Feb 24 00:07 sleep.28362
    -rw-r--r-- 1 root root  37M Jun 23  2014 ulogd.4626

    No idea what I should do from there. All I can see is that none of the above have the current date.
    What should I do next?

  • 0 in reply to BigO

    still thinking hardware problem of some kind.  either disk failing, ram failing, heat issue or power problem.

  • 0 in reply to William Warren

    The UTM hardware has been completely replaced, but still I had an unscheduled reboot last week.

    I am now looking at the UPS as a possible cause of this problem. The UTM has been disconnected from the UPS now and is connected directly to the mains power.

    Time will tell if this identifies the problem.