Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Logs Broken in IPS and other places

Hi,
I'm seeing a fairly major error in the logs on a new installation.

If I go to Logging & Reporting \ Network Protection \ Yearly I see zero (0) errors reported.

If I click on the Firewall tab, I get the following error:

"Can't use string ("0") as a HASH ref while "strict refs" in use at /wfe/asg/modules/reporting.pm line 501. "

Same response if I click on IPS or anything other than Daily, Weekly, Monthly or Yearly (which all show no reported alerts).

If review the IPS log, for instance I see hundreds of ICMP floods from the likes of Canonical and Google so there is plenty of activity.

 I am seeing thousands of the following errors in the logs of the configuration daemon:

2017:08:24-03:18:39 ravenna confd[3552]: W main::cleanup_sessions:1038() => id="3100" severity="warn" sys="System" sub="confd" name="timeout: removing session" user="system" srcip="127.0.0.1" sid="LbXAYgJPHpiToWBpcQNg" facility="system" client="websecreporter"
2017:08:24-03:18:39 ravenna confd[3552]: W main::cleanup_sessions:1038() => id="3100" severity="warn" sys="System" sub="confd" name="timeout: removing session" user="system" srcip="127.0.0.1" sid="ljIsoFYBtejDATwpqBXb" facility="system" client="clear_cache_data.plx"

Any thoughts on how to proceed?

 

Thanks,

Doug

 

This is my machine...

Mini PC-Features-Q370G4.pdf



This thread was automatically locked due to age.
  • It sounds like your Reporting database is hosed, Doug.  The only thing I know to do is:

    /etc/init.d/postgresql92 restart

    If that doesn't fix it, you're stuck with re-initializing:

    /etc/init.d/postgresql92 rebuild

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • I found the issue.

    The installation from thumb-drive is hugely buggy.

    It completes if run as 32-bit and fails with 64-bit.  Evidently the whole thing should not run this way.

    If I create an install DVD it installs correctly without half the modules corrupted.

    It's hard to put into words just how messed up this is from a usability standpoint.