Generally if this resolves the issue, I see either lots of database revisions on the machine or log files. With some file maintenance, the upgrade_export can be run without increasing the file handle limit.
Jason On 10/31/06, Sergio Alvarez <[EMAIL PROTECTED]> wrote:
Thanks a lot Damon, I will for sure try that one. Regards On 10/31/06, Cassell, Damon Z. <[EMAIL PROTECTED]> wrote: > > I had a problem with upgrade_export when moving from NG AI to R55. > Specifically, upgrade_export ran into the open files limit (ulimit -n) > on my NG AI system (which was Red Hat). It errored out with a very > vague error -- it may have been the same one you're seeing, but I > forget now. > > The command "ulimit -n" on a Linux system will show you the open files > limit. On Red Hat, it was 1024. It also appears to be 1024 by default > on SPLAT, which makes some sense. By resetting it to something higher > "ulimit -n 8192" I was able to successfully run the export. I suggest > you try this. > > Damon Cassell > The MITRE Corporation > > > > -----Original Message----- > From: Mailing list for discussion of Firewall-1 > [mailto:[EMAIL PROTECTED] On Behalf Of Sergio > Alvarez > Sent: Sunday, October 29, 2006 9:58 AM > To: [email protected] > Subject: Re: [FW-1] Problems with upgrade_export > > Thanks Reinhard. > > Actually I first tried with the upgrade_export util that got installed > along > with the original R60 installation, later I downloaded the latest > version > from the web site, so after trying two different versions with the > exact > same results, I would consider very strange if this was caused by a > bug. > > The SmartCenter and the firewall modules it is managing were all > already in > production by the time I started trying to get the export, and at that > point > there was a single machine with the NGXR60 GUI installed on the network > and > I made sure it was closed, so I don't think there is anything on that > way > either. > > Anyway I really appreciate your help and comments, please let me know > if you > have any further. > > Regards > > On 10/29/06, Reinhard Stich <[EMAIL PROTECTED]> wrote: > > > > hi, > > > > maybe there is a bug in the latest upgrade_export, you can also try > > an older one (from fw1-cd). also have the NICs up, fw1 up and all > > gui-clients closed. > > > > br > > reinhard > > > > > > At 02:06 29.10.2006, you wrote: > > >Thanks Hugo and Reinhard, > > > > > >- The last thing I did was downloading the latest version of the > utils > > from > > >the CP site, so that point is checked. > > >- This is a brand new system with enough disk space and has been in > > >production only since las thursday night, and was actually that same > day > > >that I got the errors trying to get the export, so I would be amazed > if > > in > > >fact the disk was full. Anyway I'll better check on that just in > case. > > >- This is a SPLAT installation and I tried to follow the procedure > logged > > as > > >the default admin user, so I don't think permissions as an issue > here. > > >- About Hugo's last point, the issue we have is this would be the > first > > >export we would take out of this config because it was precisely > built > > from > > >scratch. We were waiting to have the systems in production before > getting > > >the export so we could be sure to have everything needed in place > and > > >included in the backup. I guess we should have gotten "half-way" > backups, > > >but there's nothing I can do about that now. > > > > > >Any further ideas would be very appreciated. > > > > > >Regards > > > > > >On 10/28/06, Hugo van der Kooij <[EMAIL PROTECTED]> wrote: > > >> > > >>On Sat, 28 Oct 2006, Sergio Alvarez wrote: > > >> > > >> > I ran the proper command, the process seemed to start ok, but > then > > after > > >>the > > >> > message that says it is "copying files to a temporary forlder", > an > > error > > >> > came up: > > >> > > > >> > "Failed to read local configuration info" > > >> > > >>Here is a loose description of the upgrade_export activities: > > >> > > >>1. Relevant files are copied to a temporary place. > > >> This one lives under $FWDIR/tmp > > >>2. The config details are written to a file. > > >> Here it will list the products installed. > > >>3. The whole buch gets wrapped in tar and feathers > > >> (Mhhh. make that gzip ;-) > > >> > > >>It seems you ran out of diskspace in step 1 or step 3 ir there is > > >>something odd that prevents step 2 from completing. > > >> > > >>Errors in part 2 are the hardest to find even if it is in fact only > a > > tiny > > >>fraction of the time it takes to build the backup. > > >> > > >>If step 1 is OK and 2 is not you can take the config file from a > knonw > > >>working backup and put it in the proper place and then do step 3 by > > hand. > > >> > > >>Hugo. > > >> > > >>-- > > >> [EMAIL PROTECTED] http://hvdkooij.xs4all.nl/ > > >> This message is using 100% recycled electrons. > > >> > > >>================================================= > > >>To set vacation, Out-Of-Office, or away messages, > > >>send an email to [EMAIL PROTECTED] > > >>in the BODY of the email add: > > >>set fw-1-mailinglist nomail > > >>================================================= > > >>To unsubscribe from this mailing list, > > >>please see the instructions at > > >>http://www.checkpoint.com/services/mailing.html > > >>================================================= > > >>If you have any questions on how to change your > > >>subscription options, email > > >>[EMAIL PROTECTED] > > >>================================================= > > > > > > > > > > > >-- > > >Sergio Alvarez > > >(506)8301342 > > > > > >================================================= > > >To set vacation, Out-Of-Office, or away messages, > > >send an email to [EMAIL PROTECTED] > > >in the BODY of the email add: > > >set fw-1-mailinglist nomail > > >================================================= > > >To unsubscribe from this mailing list, > > >please see the instructions at > > >http://www.checkpoint.com/services/mailing.html > > >================================================= > > >If you have any questions on how to change your > > >subscription options, email > > >[EMAIL PROTECTED] > > >================================================= > > > > -- > > Reinhard Stich [EMAIL PROTECTED] > > Internet Security AG, 1150 Wien, Johnstrasse 29 > > Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, > > send an email to [EMAIL PROTECTED] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > [EMAIL PROTECTED] > > ================================================= > > > > > > -- > Sergio Alvarez > (506)8301342 > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > -- Sergio Alvarez (506)8301342 ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
