Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 20 replies
  • Subscribers 2 subscribers
  • Views 7251 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM320 with 9.307-6 - Basically unusable after update

Kmaracle
Hello, I've been trying Sophos support, no luck for the last two days...

Our UTM320 is reaching 100% CPU and RAM usage periodically.

Top reports that the culprit is the  websec-reporter it uses all available memory until it starts to coredump all over the place.

Once this process starts core dumping, the http.log file also fills up with

2015:02:05-12:00:09 QMSGW httpproxy[5510]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xdf4c000" function="send_request_body_send" file="request.c" line="632" message="recv: Input/output error"

2015:02:05-12:00:09 QMSGW httpproxy[5510]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xde2db000" function="send_request_body_send" file="request.c" line="632" message="recv: Input/output error"

I can restart the proxy service by:

 /var/mdw/scripts/httpproxy restart    --for HTTP

And this will sometimes allow the system to limp along at 80-90 Memory usage (because of websec-reporter using it all), eventually websec ends, and all is good for about a half an hour or so then it restarts again

Any suggestions? We are a public school, the kids are very sad.....


This thread was automatically locked due to age.
Parents
  • 0
    I have two sites where the clients aren't ready to spring for a newer unit with more RAM.  In each site, I set pattern updates to "Manual" and added a line to /etc/crontab-static to run those updates every morning at 4AM.  That trades a little security for continued usability.

    0 4 * * 0,1,2,3,4,5,6 root /sbin/audld.plx --nosys --trigger



    Cheers - Bob
    PS For the Up2Dates to begin happening immediately, you must also add the line to /etc/crontab.  Otherwise, it might be several days before WebAdmin regenerates crontab, inserting the new line from crontab-static.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    I have two sites where the clients aren't ready to spring for a newer unit with more RAM.  In each site, I set pattern updates to "Manual" and added a line to /etc/crontab-static to run those updates every morning at 4AM.  That trades a little security for continued usability.

    0 4 * * 0,1,2,3,4,5,6 root /sbin/audld.plx --nosys --trigger



    Cheers - Bob
    PS For the Up2Dates to begin happening immediately, you must also add the line to /etc/crontab.  Otherwise, it might be several days before WebAdmin regenerates crontab, inserting the new line from crontab-static.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Unfiltered HTML