Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 19 replies
  • Subscribers 3 subscribers
  • Views 25238 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[9.00x] Endpoint appear as offline

wingman
Hi All

I've just noticed that the endpoint client for a user is able to update itself but according to the UTM the device is offline for the past 13 days!

I've tried to restart the service with no luck.Sophos live connect works fine. It's only the client that appears to be offline 

2012:09:28-19:57:14  epsecd[5105]: >=========================================================================

2012:09:28-19:57:14  epsecd[5105]: E id="4280" severity="critical" sys="System" sub="epsecd" name="Error creating socket" ssl_errstr="IO::Socket::INET configuration failederror:00000000:lib(0):func(0):reason(0)" syscall_error="Invalid argument"

2012:09:28-19:57:14  epsecd[5105]: 

2012:09:28-19:57:14  epsecd[5105]:  1. Epsec::Utils::Logging::_log:59() /Epsec/Utils/Logging.pm

2012:09:28-19:57:14  epsecd[5105]:  2. Epsec::Logic::Client::_start:77() /Epsec/Logic/Client.pm

2012:09:28-19:57:14  epsecd[5105]:  3. Epsec::Logic::Client:[:$]n_load:40() /Epsec/Logic/Client.pm

2012:09:28-19:57:14  epsecd[5105]:  4. (eval):53() /Epsec/Logic/Base.pm

2012:09:28-19:57:14  epsecd[5105]:  5. Epsec::Logic::Base::run:52() /Epsec/Logic/Base.pm

2012:09:28-19:57:14  epsecd[5105]:  6. main::top-level:62() client.pl

2012:09:28-19:57:14  epsecd[5105]: |=========================================================================


Thanks


This thread was automatically locked due to age.
  • 0
    It seems there is a bug ID already in for this issue: 
    ID22398 9.001 Clients are not listed in the UTM 
     - no fix/workaround yet

    http://www.astaro.com/lists/Known_Issues-UTM-V9.txt
  • 0
    I saw in my pc that MscClient wants to connect in tcp/443 in country in Asia, that i Blocked
    ???
    And the Pc (Endpoint) do the same thing like Wingman said
  • 0 in reply to Ol Deda
    I saw in my pc that MscClient wants to connect in tcp/443 in country in Asia, that i Blocked
    ???
    And the Pc (Endpoint) do the same thing like Wingman said


    It is most likely where the client is connecting to.  I do know that the Endpoint client does use TCP 443 to connect to the update server, as it does not contact the UTM for its updates - it contacts Sophos directly (like it is supposed to do).

    Sophosupd.com points to a registrar in London, so I wouldn't be very worried about that HTTPS traffic.  the contact server for the Endpoint client is d3.sophosupd.com.  [:)]

    XG 19.5 GA 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
    16GB Memory | 500GB SSD HDD | GB Ethernet x5

  • 0
    sorry I write it wrong 
    In fact was amazon.com IP from singapore that want to connect in MscClient in port 443
    From that country I had a lot packets on port 22 - 23 and I blocked in Country Block
    In fact is not a big deal for me I'm a HomeUser
  • 0 in reply to wingman
    I had the same issue today as GMF. My endpoint client was working fine and out of the blue it doesn't appear to the UTM again. The endpoint identity is 0b5dce7b-701e-4f5e-743f-7358578577fd. Log attached


    it just stopped working without any config changes from my part

    2012:10:21-01:03:19 ****** epsecd[5053]: D Epsec::Utils::Logging::_log:59() => id="4230" severity="debug" sys="System" sub="epsecd" name="Updated ping information in the DB" mcs_id="bc0a4a52-d206-5475-8e0f-e54e13bf0cbe"
    2012:10:21-01:03:19  ****** epsecd[5053]: D Epsec::Utils::Logging::_log:59() => id="4211" severity="debug" sys="System" sub="epsecd" name="Acknowledging report(s)" reports="2383581"
    2012:10:21-09:58:31  ****** epsecd[5053]: D Epsec::Utils::Logging::_log:59() => id="4207" severity="debug" sys="System" sub="epsecd" name="Recieved report(s) from Sophos LiveConnect"
    2012:10:21-09:58:31  ****** epsecd[5053]: W Epsec::Utils::Logging::_log:59() => id="4220" severity="warn" sys="System" sub="epsecd" name="Endpoint need to register in Confd" mcs_id="bc0a4a52-d206-5475-8e0f-e54e13bf0cbe"
    2012:10:21-09:58:31  ****** epsecd[5053]: D Epsec::Utils::Logging::_log:59() => id="4246" severity="debug" sys="System" sub="epsecd" name="Stop receiving reports from not registered computer" mcs_id="bc0a4a52-d206-5475-8e0f-e54e13bf0cbe"


    sounds like a problem with liveconnect. I have reinstalled 4 clients so far and they all work for a day and then they drop off!!!



    HTTP 500 errors in that log, it means the endpoint is cut off from Sophos LiveConnect. This is bug related that has been fixed in version 9.004. Removing  the installing the client will fix the issue
  • 0
    So just to sum up. Update to 9.004 then uninstall, then reinstall the client, and its fixed?
  • 0
    Even with 9.004-33 I got the following error

    2012:11:15-01:57:09 ****** epsecd[5048]: E id="4281" severity="critical" sys="System" sub="epsecd" name="Broker closed the connection at /Epsec/Logic/Client.pm line 977." effect="Can't talk to Sophos LiveConnect"
    2012:11:15-01:57:09 ****** epsecd[5048]: 
    2012:11:15-01:57:09 ****** epsecd[5048]:  1. Epsec::Utils::Logging::_log:59() /Epsec/Utils/Logging.pm
    2012:11:15-01:57:09 ****** epsecd[5048]:  2. Epsec::Logic::Client:[:$]n_error:1079() /Epsec/Logic/Client.pm
    2012:11:15-01:57:09 ****** epsecd[5048]:  3. Epsec::Logic::Base::run:60() /Epsec/Logic/Base.pm
    2012:11:15-01:57:09 ****** epsecd[5048]:  4. main::top-level:62() client.pl
    2012:11:15-01:57:09 ****** epsecd[5048]: =========================================================================
    2012:11:15-01:59:14 ****** epsecd[5048]: E id="4280" severity="critical" sys="System" sub="epsecd" name="Error creating socket" ssl_errstr="IO::Socket::INET configuration failederror:00000000:lib(0):func(0):reason(0)" syscall_error="Invalid argument"
    2012:11:15-01:59:14 ****** epsecd[5048]: 
    2012:11:15-01:59:14 ****** epsecd[5048]:  1. Epsec::Utils::Logging::_log:59() /Epsec/Utils/Logging.pm
    2012:11:15-01:59:14 ****** epsecd[5048]:  2. Epsec::Logic::Client::_start:78() /Epsec/Logic/Client.pm
    2012:11:15-01:59:14 ****** epsecd[5048]:  3. Epsec::Logic::Client:[:$]n_load:40() /Epsec/Logic/Client.pm
    2012:11:15-01:59:14 ****** epsecd[5048]:  4. (eval):53() /Epsec/Logic/Base.pm
    2012:11:15-01:59:14 ****** epsecd[5048]:  5. Epsec::Logic::Base::run:52() /Epsec/Logic/Base.pm
    2012:11:15-01:59:14 ****** epsecd[5048]:  6. main::top-level:62() client.pl


    2012:11:15-21:49:33 ****** epsecd[5038]: >=========================================================================
    2012:11:15-21:49:33 ****** epsecd[5038]: E id="4280" severity="critical" sys="System" sub="epsecd" name="Error creating socket" ssl_errstr="IO::Socket::INET configuration failederror:00000000:lib(0):func(0):reason(0)" syscall_error="Invalid argument"
    2012:11:15-21:49:33 ****** epsecd[5038]: 
    2012:11:15-21:49:33 ****** epsecd[5038]:  1. Epsec::Utils::Logging::_log:59() /Epsec/Utils/Logging.pm
    2012:11:15-21:49:33 ****** epsecd[5038]:  2. Epsec::Logic::Client::_start:87() /Epsec/Logic/Client.pm
    2012:11:15-21:49:33 ****** epsecd[5038]:  3. Epsec::Logic::Client:[:$]n_load:40() /Epsec/Logic/Client.pm
    2012:11:15-21:49:33 ****** epsecd[5038]:  4. (eval):53() /Epsec/Logic/Base.pm
    2012:11:15-21:49:33 ****** epsecd[5038]:  5. Epsec::Logic::Base::run:52() /Epsec/Logic/Base.pm
    2012:11:15-21:49:33 ****** epsecd[5038]:  6. main::top-level:62() client.pl
    2012:11:15-21:49:33 ****** epsecd[5038]: |=========================================================================
    2012:11:15-21:49:33 ****** epsecd[5038]: E id="4281" severity="critical" sys="System" sub="epsecd" name="No internet connection at /Epsec/Logic/Client.pm line 99." effect="Can't talk to Sophos LiveConnect"
    2012:11:15-21:49:33 ****** epsecd[5038]: 
    2012:11:15-21:49:33 ****** epsecd[5038]:  1. Epsec::Utils::Logging::_log:59() /Epsec/Utils/Logging.pm
    2012:11:15-21:49:33 ****** epsecd[5038]:  2. Epsec::Logic::Client:[:$]n_error:1088() /Epsec/Logic/Client.pm
    2012:11:15-21:49:33 ****** epsecd[5038]:  3. Epsec::Logic::Base::run:60() /Epsec/Logic/Base.pm
    2012:11:15-21:49:33 ****** epsecd[5038]:  4. main::top-level:62() client.pl
    2012:11:15-21:49:33 ****** epsecd[5038]: <>


    Restarting the client did the trick but it seems that something is still broken
  • 0
    new version 9.004-34 still produces the same error

    2012:12:24-13:01:54   ******epsecd[14378]: >=========================================================================
    2012:12:24-13:01:54  ******epsecd[14378]: E id="4280" severity="critical" sys="System" sub="epsecd" name="Error creating socket" ssl_errstr="IO::Socket::INET configuration failederror:00000000:lib(0):func(0):reason(0)" syscall_error="Invalid argument"
    2012:12:24-13:01:54  ******epsecd[14378]: 
    2012:12:24-13:01:54  ******epsecd[14378]:  1. Epsec::Utils::Logging::_log:59() /Epsec/Utils/Logging.pm
    2012:12:24-13:01:54  ******epsecd[14378]:  2. Epsec::Logic::Client::_start:87() /Epsec/Logic/Client.pm
    2012:12:24-13:01:54  ******epsecd[14378]:  3. Epsec::Logic::Client:[:$]n_load:40() /Epsec/Logic/Client.pm
    2012:12:24-13:01:54  ******epsecd[14378]:  4. (eval):53() /Epsec/Logic/Base.pm
    2012:12:24-13:01:54  ******epsecd[14378]:  5. Epsec::Logic::Base::run:52() /Epsec/Logic/Base.pm
    2012:12:24-13:01:54  ******epsecd[14378]:  6. main::top-level:62() client.pl
    2012:12:24-13:01:54  ******epsecd[14378]: |=========================================================================
  • 0 in reply to wingman
    I have two installs.  One running 9.004-34 and one running  9.005-16.  On the system running 9.004-34 I don't see the errors below.

    On the system running 9.005-16 I see the following errors every few minutes. 

    2013:03:23-09:27:59 sophos epsecd[4848]: E id="4280" severity="critical" sys="System" sub="epsecd" name="Error creating socket" ssl_errstr="IO::Socket::INET configuration failederror:00000000:lib(0):func(0):reason(0)" syscall_error="Connection refused"

    2013:03:23-09:27:59 sophos epsecd[4848]:

    2013:03:23-09:27:59 sophos epsecd[4848]: 1. Epsec::Utils::Logging::_log:59() /Epsec/Utils/Logging.pm

    2013:03:23-09:27:59 sophos epsecd[4848]: 2. Epsec::Logic::Client::_start:87() /Epsec/Logic/Client.pm

    2013:03:23-09:27:59 sophos epsecd[4848]: 3. Epsec::Logic::Client:[:$]n_load:40() /Epsec/Logic/Client.pm

    2013:03:23-09:27:59 sophos epsecd[4848]: 4. (eval):53() /Epsec/Logic/Base.pm

    2013:03:23-09:27:59 sophos epsecd[4848]: 5. Epsec::Logic::Base::run:52() /Epsec/Logic/Base.pm

    2013:03:23-09:27:59 sophos epsecd[4848]: 6. main::top-level:62() client.pl

    2013:03:23-09:28:00 sophos epsecd[4848]: |=========================================================================

    2013:03:23-09:28:00 sophos epsecd[4848]: E id="4281" severity="critical" sys="System" sub="epsecd" name="Unknown error at /Epsec/Logic/Client.pm line 103." effect="Can't talk to Sophos LiveConnect"

    2013:03:23-09:28:00 sophos epsecd[4848]:

    2013:03:23-09:28:00 sophos epsecd[4848]: 1. Epsec::Utils::Logging::_log:59() /Epsec/Utils/Logging.pm

    2013:03:23-09:28:00 sophos epsecd[4848]: 2. Epsec::Logic::Client:[:$]n_error:1088() /Epsec/Logic/Client.pm

    2013:03:23-09:28:00 sophos epsecd[4848]: 3. Epsec::Logic::Base::run:60() /Epsec/Logic/Base.pm

    2013:03:23-09:28:00 sophos epsecd[4848]: 4. main::top-level:62() client.pl

    2013:03:23-09:28:00 sophos epsecd[4848]: =========================================================================

    2013:03:23-09:31:09 sophos epsecd[4848]: E id="4280" severity="critical" sys="System" sub="epsecd" name="Error creating socket" ssl_errstr="IO::Socket::INET configuration failederror:00000000:lib(0):func(0):reason(0)" syscall_error="Connection refused"

    2013:03:23-09:31:09 sophos epsecd[4848]:

    2013:03:23-09:31:09 sophos epsecd[4848]: 1. Epsec::Utils::Logging::_log:59() /Epsec/Utils/Logging.pm

    2013:03:23-09:31:09 sophos epsecd[4848]: 2. Epsec::Logic::Client::_start:87() /Epsec/Logic/Client.pm

    2013:03:23-09:31:09 sophos epsecd[4848]: 3. Epsec::Logic::Client:[:$]n_load:40() /Epsec/Logic/Client.pm

    2013:03:23-09:31:09 sophos epsecd[4848]: 4. (eval):53() /Epsec/Logic/Base.pm

    2013:03:23-09:31:09 sophos epsecd[4848]: 5. Epsec::Logic::Base::run:52() /Epsec/Logic/Base.pm

    2013:03:23-09:31:09 sophos epsecd[4848]: 6. main::top-level:62() client.pl

    2013:03:23-09:31:09 sophos epsecd[4848]: |=========================================================================

    2013:03:23-09:31:09 sophos epsecd[4848]: E id="4281" severity="critical" sys="System" sub="epsecd" name="Unknown error at /Epsec/Logic/Client.pm line 103." effect="Can't talk to Sophos LiveConnect"

    2013:03:23-09:31:09 sophos epsecd[4848]:

    2013:03:23-09:31:09 sophos epsecd[4848]: 1. Epsec::Utils::Logging::_log:59() /Epsec/Utils/Logging.pm

    2013:03:23-09:31:09 sophos epsecd[4848]: 2. Epsec::Logic::Client:[:$]n_error:1088() /Epsec/Logic/Client.pm

    2013:03:23-09:31:09 sophos epsecd[4848]: 3. Epsec::Logic::Base::run:60() /Epsec/Logic/Base.pm

    2013:03:23-09:31:09 sophos epsecd[4848]: 4. main::top-level:62() client.pl

    2013:03:23-09:31:09 sophos epsecd[4848]: 


    It looks like it just started ~ 16 hours ago.
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?