Problem with Ironport S680 8.0.8. why proxy all the time disconnect?:/

[tomek3b01]

Hi I have :

Model: S680

Version: 8.0.8-113

and I have problem with him.

Everything works fine (filter, authentiaciont AD) but the proxy sometime lost the connection.

I can log on the proxy and i have ping with him but the web site and outlook and other application lost the connection.

This situation continues 1 minutes and everything goes back to normal.

This situation there is 20-30 times per day.

I check all logs but I found this:

When the connection is lost i see log:

webrootlog

Tue May 12 15:04:30 2015 Info: merlin connected to /tmp/webroot_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:09:14 2015 Info: merlin URL: 50034: LOAD (15187, 15187, 0, 8)

Tue May 12 15:09:14 2015 Info: merlin Data: 50032: LOAD (4547, 4547, 0, 500) (8646, 0)

Tue May 12 15:14:14 2015 Info: merlin URL: 50034: LOAD (22232, 22232, 0, 8)

Tue May 12 15:14:14 2015 Info: merlin Data: 50032: LOAD (5366, 5366, 0, 500) (9263, 0)

Tue May 12 15:19:14 2015 Info: merlin URL: 50034: LOAD (20959, 20959, 0, 8)

Tue May 12 15:19:14 2015 Info: merlin Data: 50032: LOAD (5587, 5587, 0, 500) (9637, 0)

Tue May 12 15:24:14 2015 Info: merlin URL: 50034: LOAD (22142, 22142, 0, 8)

Tue May 12 15:24:14 2015 Info: merlin Data: 50032: LOAD (5692, 5692, 0, 500) (10547, 0)

Tue May 12 15:24:25 2015 Warning: merlin read_thread: packet: 0 bytes: []: <type 'exceptions.EOFError'>: 

Tue May 12 15:24:28 2015 Info: merlin disconnecting from /tmp/webroot_cb_fastrpc.sock

Tue May 12 15:24:28 2015 Info: merlin connecting to /tmp/webroot_cb_fastrpc.sock [try #0 of 20]

Tue May 12 15:24:28 2015 Warning: merlin failed to connect to /tmp/webroot_cb_fastrpc.sock [try #0 of 20]: <class 'socket.error'>: [Errno 61] Connection refused

Tue May 12 15:24:33 2015 Info: merlin connecting to /tmp/webroot_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:24:33 2015 Info: merlin connected to /tmp/webroot_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:24:42 2015 Warning: merlin read_thread: packet: 0 bytes: []: <type 'exceptions.EOFError'>: 

Tue May 12 15:24:43 2015 Info: merlin disconnecting from /tmp/webroot_cb_fastrpc.sock

Tue May 12 15:24:43 2015 Info: merlin connecting to /tmp/webroot_cb_fastrpc.sock [try #0 of 20]

Tue May 12 15:24:43 2015 Warning: merlin failed to connect to /tmp/webroot_cb_fastrpc.sock [try #0 of 20]: <class 'socket.error'>: [Errno 61] Connection refused

Tue May 12 15:24:48 2015 Info: merlin connecting to /tmp/webroot_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:24:48 2015 Info: merlin connected to /tmp/webroot_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:25:16 2015 Warning: merlin read_thread: packet: 0 bytes: []: <type 'exceptions.EOFError'>: 

Tue May 12 15:25:18 2015 Info: merlin disconnecting from /tmp/webroot_cb_fastrpc.sock

Tue May 12 15:25:18 2015 Warning: merlin RPC: req_id=38731 canceled: <type 'exceptions.EOFError'>: 

Tue May 12 15:25:18 2015 Info: merlin connecting to /tmp/webroot_cb_fastrpc.sock [try #0 of 20]

Tue May 12 15:25:18 2015 Critical: merlin Remote buffer error! exception[<type 'exceptions.EOFError'>:] id[3996] name[safebrowsing/rd/ChNnb29nLW1hbHdhcmUtc2hhdmFyOABAAkoMCAEQjfgKGJ74CiABSgwIARCd9woYi_gKIAFKDAgBEI73Chib9wogAUoMCAEQ5fYKGIz3CiABSgwIARDc9goY4_YKIAFKDAgBENj2Chja9gogAUoMCAEQzvYKGNX2CiABSgwIARDD9goYzPYKIAFKDAgBEJH2ChjB9gogAUoMCAEQ8vUKGI_2CiABSgwIARDO9QoY8PUKIAFKDAgBEMb1ChjM9QogAUoMCAEQwvUKGMT1CiABSgwIARC39QoYwPUKIAFKDAgBEO70Chi19QogAUoMCAEQ2vQKGOz0CiABSgwIARC19AoY2PQKIAFKDAgBEJr0Chiz9AogAUoMCAEQzPMKGJj0CiABSgwIARCj8woYyvMKIAFKDAgBEJjzChih8wogAUoMCAEQkfMKGJbzCiABSgwIARCO8woYj_MKIAFKDAgBEIzzChiM8wogAUoMCAEQ-fIKGIrzCiABSgwIARD38goY9_IKIAFKDAgBEN7yChj18gogAUoMCAEQ2_IKGNzyCiABSgwIARDM8goY2fIKIAFKDAgBEMfyChjK8gogAUoMCAEQ7PEKGMXyCiABSgwIARDA8QoY6fEKIAFKDAgBELvxChi-8QogAUoMCAEQmPEKGLnxCiABSgwIARCV8QoYlvEKIAFKDAgBENbwChiT8QogAUoMCAEQ0_AKGNTwCiABSgwIARDK8AoY0fAKIAFKDAgBEMbwChjI8AogAQ]

Tue May 12 15:25:18 2015 Warning: merlin failed to connect to /tmp/webroot_cb_fastrpc.sock [try #0 of 20]: <class 'socket.error'>: [Errno 61] Connection refused

Tue May 12 15:25:23 2015 Info: merlin connecting to /tmp/webroot_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:25:23 2015 Info: merlin connected to /tmp/webroot_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:25:38 2015 Warning: merlin read_thread: packet: 0 bytes: []: <type 'exceptions.EOFError'>: 

Tue May 12 15:25:38 2015 Info: merlin disconnecting from /tmp/webroot_cb_fastrpc.sock

Tue May 12 15:25:38 2015 Info: merlin connecting to /tmp/webroot_cb_fastrpc.sock [try #0 of 20]

Tue May 12 15:25:38 2015 Warning: merlin failed to connect to /tmp/webroot_cb_fastrpc.sock [try #0 of 20]: <class 'socket.error'>: [Errno 61] Connection refused

Tue May 12 15:25:43 2015 Info: merlin connecting to /tmp/webroot_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:25:43 2015 Warning: merlin failed to connect to /tmp/webroot_cb_fastrpc.sock [try #1 of 20]: <class 'socket.error'>: [Errno 61] Connection refused

Tue May 12 15:25:48 2015 Info: merlin connecting to /tmp/webroot_cb_fastrpc.sock [try #2 of 20]

Tue May 12 15:25:48 2015 Info: merlin connected to /tmp/webroot_cb_fastrpc.sock [try #2 of 20]

Tue May 12 15:26:04 2015 Warning: merlin read_thread: packet: 0 bytes: []: <type 'exceptions.EOFError'>: 

Tue May 12 15:26:08 2015 Info: merlin disconnecting from /tmp/webroot_cb_fastrpc.sock

Tue May 12 15:26:08 2015 Warning: merlin RPC: req_id=38930 canceled: <type 'exceptions.EOFError'>: 

Tue May 12 15:26:08 2015 Info: merlin connecting to /tmp/webroot_cb_fastrpc.sock [try #0 of 20]

Tue May 12 15:26:08 2015 Critical: merlin Remote buffer error! exception[<type 'exceptions.EOFError'>:] id[4689] name[themes/scrummy/fonts/fontawesome-webfont.woff?v=4.1.0]

Tue May 12 15:26:08 2015 Warning: merlin failed to connect to /tmp/webroot_cb_fastrpc.sock [try #0 of 20]: <class 'socket.error'>: [Errno 61] Connection refused

Tue May 12 15:26:13 2015 Info: merlin connecting to /tmp/webroot_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:26:13 2015 Info: merlin connected to /tmp/webroot_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:26:31 2015 Warning: merlin read_thread: packet: 0 bytes: []: <type 'exceptions.EOFError'>: 

Tue May 12 15:26:33 2015 Info: merlin disconnecting from /tmp/webroot_cb_fastrpc.sock

Tue May 12 15:26:33 2015 Info: merlin connecting to /tmp/webroot_cb_fastrpc.sock [try #0 of 20]

Tue May 12 15:26:33 2015 Warning: merlin failed to connect to /tmp/webroot_cb_fastrpc.sock [try #0 of 20]: <class 'socket.error'>: [Errno 61] Connection refused

Tue May 12 15:26:38 2015 Info: merlin connecting to /tmp/webroot_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:26:38 2015 Info: merlin connected to /tmp/webroot_cb_fastrpc.sock [try #1 of 20]

Sophos:

Tue May 12 15:04:32 2015 Info: sophos connecting to /tmp/sophos_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:04:32 2015 Info: sophos connected to /tmp/sophos_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:08:49 2015 Info: sophos 44259: LOAD (2283, 2283, 0, 50) (28688, 0)

Tue May 12 15:13:49 2015 Info: sophos 44259: LOAD (2681, 2681, 0, 49) (32761, 1)

Tue May 12 15:18:49 2015 Info: sophos 44259: LOAD (2846, 2846, 0, 49) (39305, 1)

Tue May 12 15:23:49 2015 Info: sophos 44259: LOAD (2981, 2981, 0, 50) (49095, 0)

Tue May 12 15:24:25 2015 Warning: sophos read_thread: packet: 0 bytes: []: <type 'exceptions.EOFError'>:

Tue May 12 15:24:25 2015 Info: sophos disconnecting from /tmp/sophos_cb_fastrpc.sock

Tue May 12 15:24:25 2015 Info: sophos connecting to /tmp/sophos_cb_fastrpc.sock [try #0 of 20]

Tue May 12 15:24:25 2015 Warning: sophos failed to connect to /tmp/sophos_cb_fastrpc.sock [try #0 of 20]: <class 'socket.error'>: [Errno 61] Connection refused

Tue May 12 15:24:30 2015 Info: sophos connecting to /tmp/sophos_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:24:30 2015 Warning: sophos failed to connect to /tmp/sophos_cb_fastrpc.sock [try #1 of 20]: <class 'socket.error'>: [Errno 61] Connection refused

Tue May 12 15:24:35 2015 Info: sophos connecting to /tmp/sophos_cb_fastrpc.sock [try #2 of 20]

Tue May 12 15:24:35 2015 Info: sophos connected to /tmp/sophos_cb_fastrpc.sock [try #2 of 20]

Tue May 12 15:24:42 2015 Warning: sophos read_thread: packet: 0 bytes: []: <class 'socket.error'>: [Errno 53] Software caused connection abort

Tue May 12 15:24:45 2015 Warning: sophos RPC: req_id=348085 canceled: <class 'socket.error'>: [Errno 53] Software caused connection abort

Tue May 12 15:24:45 2015 Warning: sophos RPC: req_id=348084 canceled: <class 'socket.error'>: [Errno 53] Software caused connection abort

Tue May 12 15:24:45 2015 Warning: sophos RPC: req_id=348087 canceled: <class 'socket.error'>: [Errno 53] Software caused connection abort

Tue May 12 15:24:45 2015 Warning: sophos RPC: req_id=348086 canceled: <class 'socket.error'>: [Errno 53] Software caused connection abort

Tue May 12 15:24:45 2015 Warning: sophos RPC: req_id=348088 canceled: <class 'socket.error'>: [Errno 53] Software caused connection abort

Tue May 12 15:24:45 2015 Info: sophos disconnecting from /tmp/sophos_cb_fastrpc.sock

Tue May 12 15:24:45 2015 Warning: sophos RPC: req_id=348090 canceled: <class 'socket.error'>: [Errno 53] Software caused connection abort

Tue May 12 15:24:45 2015 Warning: sophos RPC: req_id=348089 canceled: <class 'socket.error'>: [Errno 53] Software caused connection abort

Tue May 12 15:24:45 2015 Info: sophos connecting to /tmp/sophos_cb_fastrpc.sock [try #0 of 20]

Tue May 12 15:24:45 2015 Warning: sophos failed to connect to /tmp/sophos_cb_fastrpc.sock [try #0 of 20]: <class 'socket.error'>: [Errno 61] Connection refused

Tue May 12 15:24:50 2015 Info: sophos connecting to /tmp/sophos_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:24:50 2015 Info: sophos connected to /tmp/sophos_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:25:16 2015 Warning: sophos read_thread: packet: 0 bytes: []: <type 'exceptions.EOFError'>:

Tue May 12 15:25:20 2015 Warning: sophos RPC: req_id=348410 canceled: <type 'exceptions.EOFError'>:

Tue May 12 15:25:20 2015 Warning: sophos RPC: req_id=348300 canceled: <type 'exceptions.EOFError'>:

Tue May 12 15:25:20 2015 Warning: sophos RPC: req_id=348399 canceled: <type 'exceptions.EOFError'>:

Tue May 12 15:25:20 2015 Info: sophos disconnecting from /tmp/sophos_cb_fastrpc.sock

Tue May 12 15:25:20 2015 Warning: sophos RPC: req_id=348411 canceled: <type 'exceptions.EOFError'>:

Tue May 12 15:25:20 2015 Info: sophos connecting to /tmp/sophos_cb_fastrpc.sock [try #0 of 20]

Tue May 12 15:25:20 2015 Warning: sophos failed to connect to /tmp/sophos_cb_fastrpc.sock [try #0 of 20]: <class 'socket.error'>: [Errno 61] Connection refused

Tue May 12 15:25:25 2015 Info: sophos connecting to /tmp/sophos_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:25:25 2015 Info: sophos connected to /tmp/sophos_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:25:38 2015 Warning: sophos read_thread: packet: 0 bytes: []: <type 'exceptions.EOFError'>:

Tue May 12 15:25:40 2015 Info: sophos disconnecting from /tmp/sophos_cb_fastrpc.sock

Tue May 12 15:25:40 2015 Info: sophos connecting to /tmp/sophos_cb_fastrpc.sock [try #0 of 20]

Tue May 12 15:25:40 2015 Warning: sophos failed to connect to /tmp/sophos_cb_fastrpc.sock [try #0 of 20]: <class 'socket.error'>: [Errno 61] Connection refused

Tue May 12 15:25:45 2015 Info: sophos connecting to /tmp/sophos_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:25:45 2015 Info: sophos connected to /tmp/sophos_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:26:04 2015 Warning: sophos read_thread: packet: 0 bytes: []: <type 'exceptions.EOFError'>:

Tue May 12 15:26:05 2015 Warning: sophos RPC: req_id=348985 canceled: <type 'exceptions.EOFError'>:

Tue May 12 15:26:05 2015 Info: sophos disconnecting from /tmp/sophos_cb_fastrpc.sock

Tue May 12 15:26:05 2015 Info: sophos connecting to /tmp/sophos_cb_fastrpc.sock [try #0 of 20]

Tue May 12 15:26:05 2015 Warning: sophos failed to connect to /tmp/sophos_cb_fastrpc.sock [try #0 of 20]: <class 'socket.error'>: [Errno 61] Connection refused

Tue May 12 15:26:10 2015 Info: sophos connecting to /tmp/sophos_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:26:10 2015 Info: sophos connected to /tmp/sophos_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:26:31 2015 Warning: sophos read_thread: packet: 0 bytes: []: <type 'exceptions.EOFError'>:

Tue May 12 15:26:35 2015 Info: sophos disconnecting from /tmp/sophos_cb_fastrpc.sock

Tue May 12 15:26:35 2015 Info: sophos connecting to /tmp/sophos_cb_fastrpc.sock [try #0 of 20]

Tue May 12 15:26:35 2015 Warning: sophos failed to connect to /tmp/sophos_cb_fastrpc.sock [try #0 of 20]: <class 'socket.error'>: [Errno 61] Connection refused

Tue May 12 15:26:40 2015 Info: sophos connecting to /tmp/sophos_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:26:40 2015 Info: sophos connected to /tmp/sophos_cb_fastrpc.sock [try #1 of 20]

Tue May 12 15:28:49 2015 Info: sophos 44259: LOAD (1111, 1111, 0, 50) (13070, 0)

I checked everything, cable, ports and all its good.

Please help me :)

[sadik.sener1]

Hi,

Did you ever get this resolved?

If so, can you share the resolution?

Kind regards

Sadik 

[richardparupsdragoy]

Did you ever get this answered?

[sadik.sener1]

I solved mine.

I strongly recommend to those who suffer proxy port becoming unresponsive (that is you can ping it but you can not access the web proxy port) , to run the command grep "underway" proxylogs.

If you see logs like these :

Thu Jul 26 12:26:16 2018 Info: PROXY : - : proxy initialization underway...
Thu Jul 26 18:11:35 2018 Info: PROXY : - : proxy initialization underway...
Tue Jul 31 12:26:24 2018 Info: PROXY : - : proxy initialization underway...
Tue Jul 31 12:29:26 2018 Info: PROXY : - : proxy initialization underway...
Tue Jul 31 12:43:39 2018 Info: PROXY : - : proxy initialization underway...
Wed Aug 1 14:39:30 2018 Info: PROXY : - : proxy initialization underway...

It may lead you to a problem.

Those logs are generated when proxy process restart.

This might be triggered by you,  when commiting changes that require proxy process restart. They might be also caused by a problem. (In my case, it was WSA wasn't properly communicating with AD, causing the proxy process crash.)

Hope that helps.