Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud Sensor: Linux upgrade Failed with error "Software Upgrade process failed (Download Failure)"

Carbon Black Cloud Sensor: Linux upgrade Failed with error "Software Upgrade process failed (Download Failure)"

Environment

  • Carbon Black Cloud Linux Sensor: 2.15
  • Linux: All Supported Versions

Symptoms

\var\opt\carbonblack\psc\log will have the following error messages. 
[2023-08-22 07:22:58.056353] [1018:1064] [E] SwUpgradeTool : GetUpgradeBits : Could not download sensor update; PscCommsError=ConnectionTimedOut; cancelling upgrade
[2023-08-22 07:22:58.056401] [1018:1064] [E] SwUpgradeTool : FailUpgrade : Software Upgrade process failed (Download Failure)
[2023-08-22 07:22:58.059383] [1018:1064] [I] SwUpgradeState : SetState : Persisted SwUpgradeState Failed
[2023-08-22 07:22:58.060992] [1018:1064] [I] SwUpgradeState : SetAgentVersion : Persisted SwUpgradeAgentVersion 2.14.0.1321525
[2023-08-22 07:22:58.061008] [1018:1064] [I] SwUpgradeTool : FailUpgrade : Upgrade mode cleared
[2023-08-22 07:22:58.061015] [1018:1064] [I] SwUpgradeThread : SendTelemetryEvent : Sending event for upgrade failure
[2023-08-22 07:22:58.064724] [1018:1064] [I] SwUpgradeThread : ThreadLoop : End of software upgrade process

 

Cause

  • The CentOS/RedHat package, has 348MB size, demands a bandwidth greater than 2MB/s for successful downloading.
  • CBC sensors impose 3-minute limit for software downloads. If a download fails, it retries repeatedly.
  • Sensor does not support resumable download, so it starts over from scratch on every download.

Resolution


Additional Notes

Some environments may be unable attain consistent high bandwidth.

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-14-2023
Views:
246
Contributors