I had a problem with upgrade_export when moving from NG AI to R55. Specifically, upgrade_export ran into the open files limit (ulimit -n) on my NG AI system (which was Red Hat). It errored out with a very vague error -- it may have been the same one you're seeing, but I forget now.
The command "ulimit -n" on a Linux system will show you the open files limit. On Red Hat, it was 1024. It also appears to be 1024 by default on SPLAT, which makes some sense. By resetting it to something higher "ulimit -n 8192" I was able to successfully run the export. I suggest you try this. Damon Cassell The MITRE Corporation -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Sergio Alvarez Sent: Sunday, October 29, 2006 9:58 AM To: [email protected] Subject: Re: [FW-1] Problems with upgrade_export Thanks Reinhard. Actually I first tried with the upgrade_export util that got installed along with the original R60 installation, later I downloaded the latest version from the web site, so after trying two different versions with the exact same results, I would consider very strange if this was caused by a bug. The SmartCenter and the firewall modules it is managing were all already in production by the time I started trying to get the export, and at that point there was a single machine with the NGXR60 GUI installed on the network and I made sure it was closed, so I don't think there is anything on that way either. Anyway I really appreciate your help and comments, please let me know if you have any further. Regards On 10/29/06, Reinhard Stich <[EMAIL PROTECTED]> wrote: > > hi, > > maybe there is a bug in the latest upgrade_export, you can also try > an older one (from fw1-cd). also have the NICs up, fw1 up and all > gui-clients closed. > > br > reinhard > > > At 02:06 29.10.2006, you wrote: > >Thanks Hugo and Reinhard, > > > >- The last thing I did was downloading the latest version of the utils > from > >the CP site, so that point is checked. > >- This is a brand new system with enough disk space and has been in > >production only since las thursday night, and was actually that same day > >that I got the errors trying to get the export, so I would be amazed if > in > >fact the disk was full. Anyway I'll better check on that just in case. > >- This is a SPLAT installation and I tried to follow the procedure logged > as > >the default admin user, so I don't think permissions as an issue here. > >- About Hugo's last point, the issue we have is this would be the first > >export we would take out of this config because it was precisely built > from > >scratch. We were waiting to have the systems in production before getting > >the export so we could be sure to have everything needed in place and > >included in the backup. I guess we should have gotten "half-way" backups, > >but there's nothing I can do about that now. > > > >Any further ideas would be very appreciated. > > > >Regards > > > >On 10/28/06, Hugo van der Kooij <[EMAIL PROTECTED]> wrote: > >> > >>On Sat, 28 Oct 2006, Sergio Alvarez wrote: > >> > >> > I ran the proper command, the process seemed to start ok, but then > after > >>the > >> > message that says it is "copying files to a temporary forlder", an > error > >> > came up: > >> > > >> > "Failed to read local configuration info" > >> > >>Here is a loose description of the upgrade_export activities: > >> > >>1. Relevant files are copied to a temporary place. > >> This one lives under $FWDIR/tmp > >>2. The config details are written to a file. > >> Here it will list the products installed. > >>3. The whole buch gets wrapped in tar and feathers > >> (Mhhh. make that gzip ;-) > >> > >>It seems you ran out of diskspace in step 1 or step 3 ir there is > >>something odd that prevents step 2 from completing. > >> > >>Errors in part 2 are the hardest to find even if it is in fact only a > tiny > >>fraction of the time it takes to build the backup. > >> > >>If step 1 is OK and 2 is not you can take the config file from a knonw > >>working backup and put it in the proper place and then do step 3 by > hand. > >> > >>Hugo. > >> > >>-- > >> [EMAIL PROTECTED] http://hvdkooij.xs4all.nl/ > >> This message is using 100% recycled electrons. > >> > >>================================================= > >>To set vacation, Out-Of-Office, or away messages, > >>send an email to [EMAIL PROTECTED] > >>in the BODY of the email add: > >>set fw-1-mailinglist nomail > >>================================================= > >>To unsubscribe from this mailing list, > >>please see the instructions at > >>http://www.checkpoint.com/services/mailing.html > >>================================================= > >>If you have any questions on how to change your > >>subscription options, email > >>[EMAIL PROTECTED] > >>================================================= > > > > > > > >-- > >Sergio Alvarez > >(506)8301342 > > > >================================================= > >To set vacation, Out-Of-Office, or away messages, > >send an email to [EMAIL PROTECTED] > >in the BODY of the email add: > >set fw-1-mailinglist nomail > >================================================= > >To unsubscribe from this mailing list, > >please see the instructions at > >http://www.checkpoint.com/services/mailing.html > >================================================= > >If you have any questions on how to change your > >subscription options, email > >[EMAIL PROTECTED] > >================================================= > > -- > Reinhard Stich [EMAIL PROTECTED] > Internet Security AG, 1150 Wien, Johnstrasse 29 > Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > -- Sergio Alvarez (506)8301342 ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
