Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 40 replies
  • Subscribers 9 subscribers
  • Views 71237 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[INFO-152] Network Monitor not running - restarted

SilvanoBiger
Been receiving a few webadmin info-152 e-mails from the UTM
Did a dmesg...

[1123325.232580] nwd[10968]: segfault at 2e323931 ip 000000002e323931 sp 00000000ffd900c0 error 14


Current software version...: 9.310009
Hardware type..............: Software Appliance
Installation image.........: 9.308-16.1
Installation type..........: asg
Installed pattern version..: 78536
Downloaded pattern version.: 78536
Up2Dates applied...........: 2 (see below)
                             sys-9.308-9.309-16.3.1.tgz (Mar 15 19:20)
                             sys-9.309-9.310-3.9.4.tgz (Mar 27 05:29)
Up2Dates available.........: 1
Factory resets.............: 0
Timewarps detected.........: 1

Any ideas?


This thread was automatically locked due to age.
  • 0 in reply to SilvanoBiger
    Just to update everyone on my unit.  I could not get nwd to stay running.  I decided short of a downgrade or a reset to factory I would try removing the WAN interface from the config.  Once I deleted my WAN interface that nwd was monitoring I rebooted, then I reassigned the WAN interface.  This was easier than rebuilding from scratch but it did require some work.  Nat rules and a few others had to be redone but overall it was a quick fix.  Now all my services are happy and the nwd process stays running.  

    I would love to know the cause but at this point, it's fixed, on to the next meltdown.

    [:)]
  • 0
    Hmm, perhaps a printout of the cfg with before & after settings, then compare to see which setting is causing the segfault....

    Save your current cfg, load your old one and see if it does it again. I'm going to do exactly that if you cant...
  • 0
    After more investigation I found this when doing a printable configuration report:

    Errors were encountered during serialisation:
    unknown attribute http->profile->out_interface in http->profiles out_interface
    (this is shown at the bottom of the printable cfg report)

    Can this be related to the issue at hand?
    I looked under web protection settings but nothing seems out of the ordinary...
  • 0
    Assuming that you have a single profile, what is the result of the following?

    cc get_object REF_DefaultHTTPProfile | grep 'out_interface'


    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Assuming that you have a single profile, what is the result of the following?

    cc get_object REF_DefaultHTTPProfile | grep 'out_interface'


    Cheers - Bob


    The output is: 'out_interface' => ' ',

    root # cc get_object REF_DefaultHTTPProfile | grep 'out_interface'
                        'out_interface' => ' ',

    So it appears blank?
  • 0
    That looks right.  Do you have any other profiles, or just the default one?  What does the following tell you?

    cc get http profiles


    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    That looks right.  Do you have any other profiles, or just the default one?  What does the following tell you?

    cc get http profiles


    Cheers - Bob


    No, just a single default profile.

    /root # cc get http profiles
    [
              'REF_DefaultHTTPProfile'
            ]


    Also, under WebFiltering, AllowedNetworks
    I have "FilteredHOSTS" which is a network group list of my internal hosts that I want to be filtered through the web protection.
    I dont think that is a problem...other people put there "LAN - Network"
    If I select my LAN there, my Honeywell thermostat will not receive the outside temperatures from their networks. So I have a list of hosts that I want to be filtered, everything else unfiltered.

    If I put LAN (Network) there nothing changes with the error at hand.
  • 0
    Hmm apparently Sophos is aware of this problem and fixed it in update 9.314, but where is this update? Latest update is 9.313-003....

    ID34945 9.310 Network monitor daemon segfault / coredump
    ------------------------------------------------------------------------
    Description:
    Workaround:
    Fixed in:     9.314

    Any ideas?
  • 0
    9.314 is not released yet.  Still have some other fixes to go into that one.  Give it a few weeks.  If you have a paid license, open up a support case and they MIGHT be able to apply a point patch on your system for ID34945.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?