Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 3 subscribers
  • Views 2675 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Some Endpoints now showing up as offline

NewImage
Hi

I'm still getting some endpoints, about 20% of them, displaying as being offline, including my own computer. 

I looked at the log and it registers my computer completing a scan

2013:01:29-11:41:19 keywest epsecd[6352]: I id="4225" severity="info" sys="System" sub="epsecd" name="Handled SAV event" event_type="SAV" effect="Scan 'Full Scan' completed." mcs_id="***XX-***X-***X-***X-******" cause="scanCompleteEvent"

I did a fresh, uninstall / install, after the last update when they said they fixed this problem.

Any ideas?


This thread was automatically locked due to age.
Parents
  • 0
    Looking back at the log
    2013:01:30-05:56:59 keywest epsecd[6352]: >=========================================================================
    2013:01:30-05:56:59 keywest epsecd[6352]: E id="4281" severity="critical" sys="System" sub="epsecd" name="Broker closed the connection at /Epsec/Logic/Client.pm line 1000." effect="Can't talk to Sophos LiveConnect"
    2013:01:30-05:56:59 keywest epsecd[6352]: 
    2013:01:30-05:56:59 keywest epsecd[6352]:  1. Epsec::Utils::Logging::_log:59() /Epsec/Utils/Logging.pm
    2013:01:30-05:56:59 keywest epsecd[6352]:  2. Epsec::Logic::Client:[:$]n_error:1088() /Epsec/Logic/Client.pm
    2013:01:30-05:56:59 keywest epsecd[6352]:  3. Epsec::Logic::Base::run:60() /Epsec/Logic/Base.pm
    2013:01:30-05:56:59 keywest epsecd[6352]:  4. main::top-level:62() client.pl

    everything looks normal on the log for a few hours, then I get hit with the same notice hundreds of times over that a scan has completed on the same 3 computers 

    2013:01:30-09:20:57 keywest epsecd[6352]: I id="4211" severity="info" sys="System" sub="epsecd" name="Recieved report(s) from Sophos LiveConnect"
    2013:01:30-09:20:57 keywest epsecd[6352]: I id="4225" severity="info" sys="System" sub="epsecd" name="Handled SAV event" event_type="SAV" effect="Scan 'Full Scan' completed." mcs_id="afc607c7-78fc-************" cause="scanCompleteEvent"
    2013:01:30-09:20:57 keywest epsecd[6352]: I id="4225" severity="info" sys="System" sub="epsecd" name="Handled SAV event" event_type="SAV" effect="Scan 'Full Scan' completed." mcs_id="6d0c5473-442b-************" cause="scanCompleteEvent"
    2013:01:30-09:20:57 keywest epsecd[6352]: I id="4225" severity="info" sys="System" sub="epsecd" name="Handled SAV event" event_type="SAV" effect="Scan 'Full Scan' completed." mcs_id="27af5a0f-27aa-************" cause="scanCompleteEvent"
    2013:01:30-09:20:57 keywest epsecd[6352]: W id="4204" severity="warn" sys="System" sub="epsecd" name="Computer already exists in Confd" mcs_id="618068ea-ab5c-************"
    2013:01:30-09:20:57 keywest epsecd[6352]: I id="4212" severity="info" sys="System" sub="epsecd" name="Acknowledging report(s)" reports="******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx"
    2013:01:30-09:20:59 keywest epsecd[6352]: I id="4211" severity="info" sys="System" sub="epsecd" name="Recieved report(s) from Sophos LiveConnect"
    2013:01:30-09:20:59 keywest epsecd[6352]: I id="4225" severity="info" sys="System" sub="epsecd" name="Handled SAV event" event_type="SAV" effect="Scan 'Full Scan' completed." mcs_id="afc607c7-78fc-************" cause="scanCompleteEvent"
    2013:01:30-09:20:59 keywest epsecd[6352]: I id="4225" severity="info" sys="System" sub="epsecd" name="Handled SAV event" event_type="SAV" effect="Scan 'Full Scan' completed." mcs_id="6d0c5473-442b-************" cause="scanCompleteEvent"
    2013:01:30-09:20:59 keywest epsecd[6352]: I id="4225" severity="info" sys="System" sub="epsecd" name="Handled SAV event" event_type="SAV" effect="Scan 'Full Scan' completed." mcs_id="27af5a0f-27aa-************" cause="scanCompleteEvent"
    2013:01:30-09:20:59 keywest epsecd[6352]: W id="4204" severity="warn" sys="System" sub="epsecd" name="Computer already exists in Confd" mcs_id="618068ea-ab5c--************"
    2013:01:30-09:20:59 keywest epsecd[6352]: I id="4212" severity="info" sys="System" sub="epsecd" name="Acknowledging report(s)" reports="******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx"
    2013:01:30-09:21:01 keywest epsecd[6352]: I id="4211" severity="info" sys="System" sub="epsecd" name="Recieved report(s) from Sophos LiveConnect"
Reply
  • 0
    Looking back at the log
    2013:01:30-05:56:59 keywest epsecd[6352]: >=========================================================================
    2013:01:30-05:56:59 keywest epsecd[6352]: E id="4281" severity="critical" sys="System" sub="epsecd" name="Broker closed the connection at /Epsec/Logic/Client.pm line 1000." effect="Can't talk to Sophos LiveConnect"
    2013:01:30-05:56:59 keywest epsecd[6352]: 
    2013:01:30-05:56:59 keywest epsecd[6352]:  1. Epsec::Utils::Logging::_log:59() /Epsec/Utils/Logging.pm
    2013:01:30-05:56:59 keywest epsecd[6352]:  2. Epsec::Logic::Client:[:$]n_error:1088() /Epsec/Logic/Client.pm
    2013:01:30-05:56:59 keywest epsecd[6352]:  3. Epsec::Logic::Base::run:60() /Epsec/Logic/Base.pm
    2013:01:30-05:56:59 keywest epsecd[6352]:  4. main::top-level:62() client.pl

    everything looks normal on the log for a few hours, then I get hit with the same notice hundreds of times over that a scan has completed on the same 3 computers 

    2013:01:30-09:20:57 keywest epsecd[6352]: I id="4211" severity="info" sys="System" sub="epsecd" name="Recieved report(s) from Sophos LiveConnect"
    2013:01:30-09:20:57 keywest epsecd[6352]: I id="4225" severity="info" sys="System" sub="epsecd" name="Handled SAV event" event_type="SAV" effect="Scan 'Full Scan' completed." mcs_id="afc607c7-78fc-************" cause="scanCompleteEvent"
    2013:01:30-09:20:57 keywest epsecd[6352]: I id="4225" severity="info" sys="System" sub="epsecd" name="Handled SAV event" event_type="SAV" effect="Scan 'Full Scan' completed." mcs_id="6d0c5473-442b-************" cause="scanCompleteEvent"
    2013:01:30-09:20:57 keywest epsecd[6352]: I id="4225" severity="info" sys="System" sub="epsecd" name="Handled SAV event" event_type="SAV" effect="Scan 'Full Scan' completed." mcs_id="27af5a0f-27aa-************" cause="scanCompleteEvent"
    2013:01:30-09:20:57 keywest epsecd[6352]: W id="4204" severity="warn" sys="System" sub="epsecd" name="Computer already exists in Confd" mcs_id="618068ea-ab5c-************"
    2013:01:30-09:20:57 keywest epsecd[6352]: I id="4212" severity="info" sys="System" sub="epsecd" name="Acknowledging report(s)" reports="******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx"
    2013:01:30-09:20:59 keywest epsecd[6352]: I id="4211" severity="info" sys="System" sub="epsecd" name="Recieved report(s) from Sophos LiveConnect"
    2013:01:30-09:20:59 keywest epsecd[6352]: I id="4225" severity="info" sys="System" sub="epsecd" name="Handled SAV event" event_type="SAV" effect="Scan 'Full Scan' completed." mcs_id="afc607c7-78fc-************" cause="scanCompleteEvent"
    2013:01:30-09:20:59 keywest epsecd[6352]: I id="4225" severity="info" sys="System" sub="epsecd" name="Handled SAV event" event_type="SAV" effect="Scan 'Full Scan' completed." mcs_id="6d0c5473-442b-************" cause="scanCompleteEvent"
    2013:01:30-09:20:59 keywest epsecd[6352]: I id="4225" severity="info" sys="System" sub="epsecd" name="Handled SAV event" event_type="SAV" effect="Scan 'Full Scan' completed." mcs_id="27af5a0f-27aa-************" cause="scanCompleteEvent"
    2013:01:30-09:20:59 keywest epsecd[6352]: W id="4204" severity="warn" sys="System" sub="epsecd" name="Computer already exists in Confd" mcs_id="618068ea-ab5c--************"
    2013:01:30-09:20:59 keywest epsecd[6352]: I id="4212" severity="info" sys="System" sub="epsecd" name="Acknowledging report(s)" reports="******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx,******xx"
    2013:01:30-09:21:01 keywest epsecd[6352]: I id="4211" severity="info" sys="System" sub="epsecd" name="Recieved report(s) from Sophos LiveConnect"
Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?