Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 15 replies
  • Subscribers 1 subscriber
  • Views 4412 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[8.201][MAIL]Daily Executive reports failed

RFCat_vk_01
My ASG has been up for over 15 days and has remained connected to the same IP address for nearly as long.

I found a number of entries in the system log that are strange (or at least to me they are) while investigating the mail failure.

2011:09:04-00:03:04 192 daemon-watcher[5385]: Watching selfmonng.plx - running fine 
2011:09:04-00:05:01 192 /usr/sbin/cron[24014]: (root) CMD (   /usr/local/bin/reporter/system-reporter.pl)
2011:09:04-00:06:01 192 /usr/sbin/cron[24113]: (root) CMD (/sbin/audld.plx --trigger) 
2011:09:04-00:10:01 192 /usr/sbin/cron[24450]: (root) CMD (   /usr/local/bin/reporter/system-reporter.pl) 
2011:09:04-00:15:00 192 postgres[24999]: [2-1] LOG:  unexpected EOF on client connection 
2011:09:04-00:15:01 192 /usr/sbin/cron[25002]: (root) CMD (nice -n19 /usr/local/bin/create_rrd_graphs.plx) 
2011:09:04-00:15:01 192 /usr/sbin/cron[25003]: (root) CMD (   /usr/local/bin/reporter/system-reporter.pl) 
2011:09:04-00:17:01 192 /usr/sbin/cron[25336]: (root) CMD (  nice -n19 /usr/local/bin/gen_inline_reporting_data.plx) 
2011:09:04-00:20:01 192 /usr/sbin/cron[25620]: (root) CMD (/usr/local/bin/report_render.plx --type yesterday --sendmail) 
2011:09:04-00:20:01 192 /usr/sbin/cron[25619]: (root) CMD (   /usr/local/bin/reporter/system-reporter.pl) 
2011:09:04-00:20:19 192 report_render[25620]: Daily Executive Report 2011:09:04-00:21:01 192 /usr/sbin/cron[25782]: (root) CMD (/sbin/audld.plx --trigger) 
2011:09:04-00:21:10 192 postgres[25749]: [2-1] LOG:  unexpected EOF on client connection 
2011:09:04-00:23:01 192 daemon-watcher[5385]: Watching selfmonng.plx - running fine

There is a similar EOF message later on during the day.

Any ideas on what the cause of the EOF and the daily reports failing might be?

Ian


This thread was automatically locked due to age.
  • 0
    Ian, what do you mean by "failed"?  I'm certainly not a guru on the System log, but I don't see where those lines are especially unique.  Are the graphs in 'Reporting' populated? Are the stats available in 'Network Usage' 'Accounting'?  Are the emails hung up in the SMTP spool?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Hi Bob,
    from what I can see nothing is stuck in the SMTP system.
    All the graphs are populated on the reporting tabs in webadmin.

    Reports were being sent daily until Sunday morning and then nothing, same again today, no daily reports.

    Ian[:)]
  • 0
    Occasionally I've experienced "stuck" executive reports.  When this happens to me, I've done a reboot and the next night I get the regular and the missing one.

    Does an executive report get generated if you do a "Generate report now"?
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
  • 0 in reply to Scott_Klassen
    Yes, the report generates correctly if "Generate Now" is run.

    I had put off rebooting to see what would happen. I am going to do a fresh install from 8.201 ISO tomorrow.

    Ian
  • 0 in reply to RFCat_vk_01
    I think I found the cause. Postfix failed around the same time as I changed the Central Management IP address to the new ACC (2.870b).

    Maybe a stop and restart of central management is required.

    Not sure where to post the log entries here or in the ACC beta, which doesn't much attention from the developers.

    Ian
  • 0
    I would think that the ACC forum would give the best chance of being seen, even if they don't respond.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
  • 0 in reply to RFCat_vk_01
    I think I found the cause. Postfix failed around the same time as I changed the Central Management IP address to the new ACC (2.870b).

    I have numerous unexpected EOF on client connection with no ill effects that I know of. Everything works on reporting and flash graphs other than zero on the waf counter on dashboard but that is due to the insert error that I have for some reason. I don't remember when the errors first started but it was somewhere around early 8.x

    2011:09:05-00:20:49 gatekeeper postgres[26364]: [2-1] LOG:  unexpected EOF on client connection
    2011:09:05-00:25:01 gatekeeper /usr/sbin/cron[26435]: (root) CMD (   /usr/local/bin/reporter/system-reporter.pl)
    2011:09:05-00:25:06 gatekeeper postgres[26440]: [2-1] ERROR:  invalid input syntax for type inet: ""
    2011:09:05-00:25:06 gatekeeper postgres[26440]: [2-2] STATEMENT:  select ins_waf($1, $2, $3, $4, $5, $6, $7, $8)
    2011:09:05-00:25:06 gatekeeper postgres[26440]: [3-1] ERROR:  current transaction is aborted, commands ignored until end of transaction block
    and

    2011:09:05-00:09:01 gatekeeper /usr/sbin/cron[25733]: (root) CMD (/usr/local/bin/netselector.plx --infile /etc/up2date/authservers.ini --outfile /etc/up2date/servers.sorted)
    2011:09:05-00:09:49 gatekeeper postgres[25748]: [2-1] LOG:  unexpected EOF on client connection
    and

    2011:09:05-01:05:01 gatekeeper /usr/sbin/cron[28197]: (root) CMD (   /usr/local/bin/reporter/system-reporter.pl)
    2011:09:05-01:07:50 gatekeeper postgres[28249]: [2-1] LOG:  unexpected EOF on client connection

    Regards
    Bill
  • 0 in reply to Billybob
    Hi folks,
    the recommendation from the ACC beta forum is the issue is more than likely a ASG issue.

    The thread with the details from the logfile in it is

    https://community.sophos.com/products/unified-threat-management/astaroorg/f/111/t/71244

    Ian
  • 0
    Does it work if you force one to be emailed from the shell? 
    /usr/local/bin/report_render.plx --archive --type yesterday --sendmail
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
  • 0 in reply to Scott_Klassen
    Hi Scott,
    no, I still get the same error.

    Ian

    2011:09:07-18:42:24 192 postfix/sendmail[21940]: warning: valid_hostname: numeric hostname: 192.168.10.1 2011:09:07-18:42:24 192 postfix/sendmail[21940]: fatal: file /etc/postfix/main.cf: parameter myhostname: bad parameter value: 192.168.10.1
Cookie Information Banner