This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Update stuck in a loop of continual download

So far it's pegging my connection, it downloaded 20 gigabytes and the only thing I can attribute to is UP2Date.
https://imgur.com/a/8KNNy#0
Here is some error form up2date:


2014:05:25-11:10:01 BeyondTheRim audld[510]: Starting Up2Date Package Downloader
2014:05:25-11:10:01 BeyondTheRim audld[510]: patch up2date possible
2014:05:25-11:10:06 BeyondTheRim audld[510]: >=========================================================================
2014:05:25-11:10:06 BeyondTheRim audld[510]: ILLEGAL XML doc received from '175.41.132.12:443'
2014:05:25-11:10:06 BeyondTheRim audld[510]: ''
2014:05:25-11:10:06 BeyondTheRim audld[510]: 
2014:05:25-11:10:06 BeyondTheRim audld[510]:  1. Modules::Trad_Get_Filelist::contact:1567() audld.pl
2014:05:25-11:10:06 BeyondTheRim audld[510]:  2. main::authenticate:616() audld.pl
2014:05:25-11:10:06 BeyondTheRim audld[510]:  3. main::run:413() audld.pl
2014:05:25-11:10:06 BeyondTheRim audld[510]:  4. main::top-level:27() audld.pl
2014:05:25-11:10:06 BeyondTheRim audld[510]: =========================================================================
2014:05:25-11:10:12 BeyondTheRim audld[510]: ILLEGAL XML doc received from '175.41.132.12:443'
2014:05:25-11:10:12 BeyondTheRim audld[510]: ''
2014:05:25-11:10:12 BeyondTheRim audld[510]: 
2014:05:25-11:10:12 BeyondTheRim audld[510]:  1. Modules::Trad_Get_Filelist::contact:1567() audld.pl
2014:05:25-11:10:12 BeyondTheRim audld[510]:  2. main::authenticate:616() audld.pl
2014:05:25-11:10:12 BeyondTheRim audld[510]:  3. main::run:413() audld.pl
2014:05:25-11:10:12 BeyondTheRim audld[510]:  4. main::top-level:27() audld.pl
2014:05:25-11:10:12 BeyondTheRim audld[510]: 


This thread was automatically locked due to age.
Parents
  • Which version are you running?  Home license?

    Nothing in that log screams "up2date is broken and downloading endlessly" to me.  Knowing the source(s), source port(s), destination(s) and destination port(s) will really nail things down.

    In addition to "Top Clients" what are the "Top Servers"?  WebAdmin>Logging & Reporting>Network Usage>Bandwidth Usage, Dropdown for Top Servers and click Update, wait a few seconds and click Update again for DNS resolutions

    Comfortable at the command line?   iftop and tcpdump can help a lot too.

    Images can be attached to forum posts and is generally preferred.
  • It's really chewing the bandwith like there is no tomorrow





    http://imgur.com/XnUJyXx

    it looks like it might be a malware site?  But it's not connected to any of the PC ip addresses, just the Sophos Appliance!  So is the Sophos APpliance infected?

    When I take the resolved address, and try to go to it, NOD32 alerts me of it being malware.

    https://imgur.com/HiQIMkC
Reply Children
No Data