Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 2 subscribers
  • Views 2118 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Update stuck in a loop of continual download

grammatonclerick
So far it's pegging my connection, it downloaded 20 gigabytes and the only thing I can attribute to is UP2Date.
https://imgur.com/a/8KNNy#0
Here is some error form up2date: 


2014:05:25-11:10:01 BeyondTheRim audld[510]: Starting Up2Date Package Downloader

2014:05:25-11:10:01 BeyondTheRim audld[510]: patch up2date possible

2014:05:25-11:10:06 BeyondTheRim audld[510]: >=========================================================================

2014:05:25-11:10:06 BeyondTheRim audld[510]: ILLEGAL XML doc received from '175.41.132.12:443'

2014:05:25-11:10:06 BeyondTheRim audld[510]: ''

2014:05:25-11:10:06 BeyondTheRim audld[510]: 

2014:05:25-11:10:06 BeyondTheRim audld[510]:  1. Modules::Trad_Get_Filelist::contact:1567() audld.pl

2014:05:25-11:10:06 BeyondTheRim audld[510]:  2. main::authenticate:616() audld.pl

2014:05:25-11:10:06 BeyondTheRim audld[510]:  3. main::run:413() audld.pl

2014:05:25-11:10:06 BeyondTheRim audld[510]:  4. main::top-level:27() audld.pl

2014:05:25-11:10:06 BeyondTheRim audld[510]: =========================================================================

2014:05:25-11:10:12 BeyondTheRim audld[510]: ILLEGAL XML doc received from '175.41.132.12:443'

2014:05:25-11:10:12 BeyondTheRim audld[510]: ''

2014:05:25-11:10:12 BeyondTheRim audld[510]: 

2014:05:25-11:10:12 BeyondTheRim audld[510]:  1. Modules::Trad_Get_Filelist::contact:1567() audld.pl

2014:05:25-11:10:12 BeyondTheRim audld[510]:  2. main::authenticate:616() audld.pl

2014:05:25-11:10:12 BeyondTheRim audld[510]:  3. main::run:413() audld.pl

2014:05:25-11:10:12 BeyondTheRim audld[510]:  4. main::top-level:27() audld.pl

2014:05:25-11:10:12 BeyondTheRim audld[510]: 


This thread was automatically locked due to age.
  • 0
    Which version are you running?  Home license?

    Nothing in that log screams "up2date is broken and downloading endlessly" to me.  Knowing the source(s), source port(s), destination(s) and destination port(s) will really nail things down.

    In addition to "Top Clients" what are the "Top Servers"?  WebAdmin>Logging & Reporting>Network Usage>Bandwidth Usage, Dropdown for Top Servers and click Update, wait a few seconds and click Update again for DNS resolutions

    Comfortable at the command line?   iftop and tcpdump can help a lot too.

    Images can be attached to forum posts and is generally preferred.
  • 0 in reply to teched_01
    It's really chewing the bandwith like there is no tomorrow





    http://imgur.com/XnUJyXx

    it looks like it might be a malware site?  But it's not connected to any of the PC ip addresses, just the Sophos Appliance!  So is the Sophos APpliance infected?

    When I take the resolved address, and try to go to it, NOD32 alerts me of it being malware.

    https://imgur.com/HiQIMkC
  • 0
    Please edit your post, [Go Advanced], and replace the external links with uploads attached to your post. Thank you - the only virus I've had in the last eight years was when I clicked on an external link here in this forum.

    Cheers - Bob

    Sorry for any short responses.  Posted from my iPhone.