Page 1 of 1

sophos autoupdate behaviour

Posted: 28 Dec 2017 23:01
by henk
EFA-3.0.2.5

I've got sophos ( and ClamD) running for quite some time. Works great. However the autoupdate seems to have some issues lately.

The next messages are found:

Code: Select all

/opt/sophos-av/bin/savlog --today --utc
or

Code: Select all

cat /var/log/messages | grep 'update.failed'

Code: Select all

2017-12-28 16:50:12: savscan.log   On-demand scan finished.
2017-12-28 17:01:21: update.check  Successfully updated Sophos Anti-Virus from sdds:SOPHOS
2017-12-28 18:01:23: update.failed Updating from versions - SAV: 9.14.0, Engine: 3.69.2, Data: 5.46
2017-12-28 18:01:23: update.failed Failed to update Sophos Anti-Virus
2017-12-28 18:01:23: update.failed Warning: There is another installation of Sophos Anti-Virus on this computer.
Aborting the installation. If you want to ignore the existing installation, use the option --ignore-existing-installation
Running the update manualy will do the job, but I still don't know why. Sometimes the update seems ok without doing anything :think:

Code: Select all

/opt/sophos-av/bin/savupdate -v5 --debug
The disturbing lines:

Code: Select all

2017-12-26 14:36:20,873 DEBUG savupdate.util.Logger: Other Product line=D9BB257D-ADE6-47C9-B09E-1ACB33A88EDD (we want 5CF594B0-9FED-4212-BA91-A4077CB1D1F3), version (3, 69, 2, 8)
Other Product line=D9BB257D-ADE6-47C9-B09E-1ACB33A88EDD (we want 5CF594B0-9FED-4212-BA91-A4077CB1D1F3), version (3, 69, 2, 8)
2017-12-26 14:36:20,873 DEBUG savupdate.util.Logger: Other Product line=1CD8A803-6047-47BC-8CBE-2D4AEB37BEE2 (we want 5CF594B0-9FED-4212-BA91-A4077CB1D1F3), version (9, 14, 0, 0, 119)
Other Product line=1CD8A803-6047-47BC-8CBE-2D4AEB37BEE2 (we want 5CF594B0-9FED-4212-BA91-A4077CB1D1F3), version (9, 14, 0, 0, 119)
2017-12-26 14:36:20,874 DEBUG savupdate.util.Logger: Our product line=5CF594B0-9FED-4212-BA91-A4077CB1D1F3, version (9, 14, 0, 3692, 178)
Our product line=5CF594B0-9FED-4212-BA91-A4077CB1D1F3, version (9, 14, 0, 3692, 178)
2017-12-26 14:36:20,874 DEBUG savupdate.util.Logger: Other Product line=16847572-641A-4310-94FB-7530471C2A25 (we want 5CF594B0-9FED-4212-BA91-A4077CB1D1F3), version (3, 69, 2, 8)
Other Product line=16847572-641A-4310-94FB-7530471C2A25 (we want 5CF594B0-9FED-4212-BA91-A4077CB1D1F3), version (3, 69, 2, 8)
2017-12-26 14:36:20,874 DEBUG savupdate.util.Logger: Selecting package using recommended policy
Gui Sophos info:

Re: sophos autoupdate behaviour

Posted: 30 Dec 2017 10:25
by henk
Found that the manual update didnt work, altough it stated: update succesfull. :shifty:

The real question is: How do you know if Sophos autoupdate is working?

A pretty good indicator of failing updates can be seen thru the Gui. Tools and links-> Sophos Status
Sophos2.png
Sophos2.png (4.42 KiB) Viewed 3150 times
If you scroll down, you should see updates on recent days.
Sophos3.png
Sophos3.png (11.4 KiB) Viewed 3150 times
In my case it stopped on Nov 30, no clue why.

As I was not able to fix the issue, I uninstalled Sophos,

Code: Select all

/opt/sophos-av/uninstall.sh
and installed it again. (This will take only a few minutes.)

As Sophos updates every 60 minutes, you can wait for the autoupdate to run, or force it:

Code: Select all

/opt/sophos-av/bin/savupdate
All seems fine again, but I added monitoring Sophos on the todo list for 2018 :idea: