Jump to content
DLRX

"Perform Windows Update Synchronization" fills up server HDD space

Recommended Posts

Using Kaspersky Security Center v.

I have currently set it up to act as the company WSUS server, and the update sync is currently set up to only sync "Critical Updates", "Definition Updates", "Drivers", and "Security Updates". Last week I selected "All categories" and it managed to fill the 1TB hard disk before the task even reached 20%! I have since restored the server to its configuration prior to selecting "All Categories" from backup and not re-enabled them.

I can't imagine that storing all software updates for the company would take up an estimated 5TB of disk space, so what am I doing wrong?

image.png.18af29bc7c7d465f60fea0e3e4ffd50c.png

Share this post


Link to post

I have also configured it to only install EN-GB and EN-US updates, yet I see the following updates available:

image.thumb.png.7a6c1a9b225b70134ac5c8effc18a241.png

As beautiful as all these languages are, we have no need for them. Could this be a contributing factor?

Share this post


Link to post

Yes, so why was it taking 10x times that after only completing 20% of the task?

And why is it showing other languages when I have asked it not to?

Share this post


Link to post

Hi. 

Do you have workstations where described languages could be used or installed ?

Also you may try to patch your server to a recent commulitive update version https://support.kaspersky.com/13968

Please do not forget to perform server backup prior to update.

Share this post


Link to post

No, there are no workstations requiring those languages (and it is even shown within Kaspersky Security Center that there are none).

I have already patched the server with the above link.

To provide an update, the folder C:\ProgramData\KasperskyLab has already grown to 229gb with only drivers and security patches.

Share this post


Link to post

What SQL server did you used for KSC setup how is it connected ? 

How many hosts do you have in your network ? 

Share this post


Link to post

The SQL server is the default installation from the Kaspersky setup on the same server host as the Security Center package. I have it listed as SQL Server 2014.

The server manages ~250 hosts.

Share this post


Link to post

Great. Left last night and came back to a nearly bricked admin server - the HD was full. I've expanded the VHD but can't do that indefinitely.

Under the install required updates I get this error:

Quote

Generic db error: "1105 '{42000} Could not allocate space for object '<temporary system object: 1729382299803254784>' in database 'tempdb' because the 'PRIMARY' filegroup is full. Create disk space by deleting unneeded files, dropping objects in the filegroup, adding additional files to the filegroup, or setting autogrowth on for existing files in the filegroup.; Could not allocate space for object '<temporary system object: 1729382299803254784>' in database 'tempdb' because the 'PRIMARY' filegroup is full. Create disk space by deleting unneeded files, dropping objects in the filegroup, adding additional files to the filegroup, or setting autogrowth on for existing files in the filegroup.' LastStatement='vapm_arrange_task_updates'"

If it needs 100gb of space, why is it using so much? I hasten to add that that is with only security updates and drivers.

Edited by DLRX
More detail

Share this post


Link to post

Can't upload file to a private message:

Quote

There was a problem processing the uploaded file. -200

It's only 2.6mb

Share this post


Link to post
1 hour ago, Dmitry Eremeev said:

Is it possible to upload it somewhere and send a link to https://forum.kaspersky.com/index.php?/profile/488871-klcentralsupport/ ?

Thank you.

 

Yes I've just done so.

Update: I have since cleared the folder c:\programdata\kasperskylab\adminkit\1093\.working\ftserver and wusfiles, deleted all tasks and re-created them and seeing what happens. I did so because it had used an additional 150gb since this morning (using a total of 670gb just for those two folders).

I have also just received this error message from the new windows update sync task: "Assertion "nSize && nSize < 100*1024*1024" failed". Patch A has been installed already.

Edited by DLRX
Just got error message.

Share this post


Link to post
26 minutes ago, DLRX said:

Yes I've just done so.

Update: I have since cleared the folder c:\programdata\kasperskylab\adminkit\1093\.working\ftserver and wusfiles, deleted all tasks and re-created them and seeing what happens. I did so because it had used an additional 150gb since this morning (using a total of 670gb just for those two folders).

I have also just received this error message from the new windows update sync task: "Assertion "nSize && nSize < 100*1024*1024" failed". Patch A has been installed already.

Please attach KL software report.

https://support.kaspersky.com/13968#block3

Thank you.

 

 

Share this post


Link to post

I do not see how this data is relevant for troubleshooting - however it does list our entire infrastructure which I am not willing to upload.

Share this post


Link to post

Hi,

Please create a request to KL support and attach all previously collected info to it.

Please tell us the number of that request.

Thank you!

Share this post


Link to post
On 20.11.2017 at 6:09 PM, DLRX said:

Using Kaspersky Security Center v.

I have currently set it up to act as the company WSUS server, and the update sync is currently set up to only sync "Critical Updates", "Definition Updates", "Drivers", and "Security Updates". Last week I selected "All categories" and it managed to fill the 1TB hard disk before the task even reached 20%! I have since restored the server to its configuration prior to selecting "All Categories" from backup and not re-enabled them.

I can't imagine that storing all software updates for the company would take up an estimated 5TB of disk space, so what am I doing wrong?

Hello.

Please note that during the "Windows Update synchronization" task, only the metadata for the updates is downloaded to the server, rarely exceeding 1 Gb even if all languages are selected. The actual files are downloaded when the "Install updates" task is run. It should also be noted that a set of updates is copied for every existing task of this type, so creating a great number of such tasks is not recommended. You never mention any tasks of this type, please check what approach to this is being used.

If it occurs so that it is in fact the "Windows Update synchronization" task which is generating the traffic, this might be erroneous behavior. To investigate, please collect KSC server + Console traces while starting this task and running it for a short while. Specify how much the server grows over that period.

Thank you.

Share this post


Link to post

I will get those trace files for you, probably tomorrow.

Regarding the tasks, do you mean "Install update" or "install required update and fix vulnerabilities"?

Share this post


Link to post

×
×
  • Create New...

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.