Hello, I'm writing again as I finally got my customer to do tests with this issue and the problem remains.
Executing upgrade_export with the debug option gave an output with a bunch of errors as follows: do_links_getver: strncmp failed. Returning -2 do_links_getver: strncmp failed. Returning -2 do_links_getver: strncmp failed. Returning -2 do_links_getver: strncmp failed. Returning -2 do_links_getver: strncmp failed. Returning -2 ExecuteCommandLineAndCaptureStdout: Error to execute cpprod_util CPROD_GetValue Products uag 1) IsUAGInstalled: Failed to run " cpproud_util" command. GetLocalACEDATDIR: Error >> Failed to get ACEDATA environmet variable CopySecurreIDFiles: /var/ace/sdconf.rec does not exit do_links_getver: strncmp failed. Returning -2 do_links_getver: strncmp failed. Returning -2 do_links_getver: strncmp failed. Returning -2 do_links_getver: strncmp failed. Returning -2 do_links_getver: strncmp failed. Returning -2 Building configuration file… GetLocalIP: Error >> Failed to get local machine IP BuildConfiguracionFile: Error >> Failed to get local machine IP Error: Failed to read local configuration info # I could not find an SK document that would help me with this but because of the last errors regarding the fact that it was not able to get the local machine IP, I asked my customer to check the topology tab of the smartcenter object and it in fact showed the correct interface and IP, but if he clicks on "get" to get the interfaces, it comes back with the error: Failed to get address table (no SNMP daemon installed) I have never seen such error before and frankly just don't understand why an SNMP daemon is required to get the interfaces info from the actual smartcenter machine. Doing this on the firewall modules worked perfect when I made the installation. Also I was told to check the /etc/hosts/ file and in fact my customer did not find the hostname and corresponding IP for this machine, he added it manually, but still the same errors came up when runnning the upgrade_export -d command. Finally we tried the ulimit –n 8192 command suggested by one of you guys, but did not help at all either. Any further ideas will be greatly appreciated. Regards On 11/2/06, chkp tech <[EMAIL PROTECTED]> wrote:
Generally if this resolves the issue, I see either lots of database revisions on the machine or log files. With some file maintenance, the upgrade_export can be run without increasing the file handle limit. Jason On 10/31/06, Sergio Alvarez <[EMAIL PROTECTED]> wrote: > > Thanks a lot Damon, I will for sure try that one. > > Regards > > > On 10/31/06, Cassell, Damon Z. <[EMAIL PROTECTED]> wrote: > > > > I had a problem with upgrade_export when moving from NG AI to R55. > > Specifically, upgrade_export ran into the open files limit (ulimit -n) > > on my NG AI system (which was Red Hat). It errored out with a very > > vague error -- it may have been the same one you're seeing, but I > > forget now. > > > > The command "ulimit -n" on a Linux system will show you the open files > > limit. On Red Hat, it was 1024. It also appears to be 1024 by default > > on SPLAT, which makes some sense. By resetting it to something higher > > "ulimit -n 8192" I was able to successfully run the export. I suggest > > you try this. > > > > Damon Cassell > > The MITRE Corporation > > > > > > > > -----Original Message----- > > From: Mailing list for discussion of Firewall-1 > > [mailto:[EMAIL PROTECTED] On Behalf Of Sergio > > Alvarez > > Sent: Sunday, October 29, 2006 9:58 AM > > To: [email protected] > > Subject: Re: [FW-1] Problems with upgrade_export > > > > Thanks Reinhard. > > > > Actually I first tried with the upgrade_export util that got installed > > along > > with the original R60 installation, later I downloaded the latest > > version > > from the web site, so after trying two different versions with the > > exact > > same results, I would consider very strange if this was caused by a > > bug. > > > > The SmartCenter and the firewall modules it is managing were all > > already in > > production by the time I started trying to get the export, and at that > > point > > there was a single machine with the NGXR60 GUI installed on the network > > and > > I made sure it was closed, so I don't think there is anything on that > > way > > either. > > > > Anyway I really appreciate your help and comments, please let me know > > if you > > have any further. > > > > Regards > > > > On 10/29/06, Reinhard Stich <[EMAIL PROTECTED]> wrote: > > > > > > hi, > > > > > > maybe there is a bug in the latest upgrade_export, you can also try > > > an older one (from fw1-cd). also have the NICs up, fw1 up and all > > > gui-clients closed. > > > > > > br > > > reinhard > > > > > > > > > At 02:06 29.10.2006, you wrote: > > > >Thanks Hugo and Reinhard, > > > > > > > >- The last thing I did was downloading the latest version of the > > utils > > > from > > > >the CP site, so that point is checked. > > > >- This is a brand new system with enough disk space and has been in > > > >production only since las thursday night, and was actually that same > > day > > > >that I got the errors trying to get the export, so I would be amazed > > if > > > in > > > >fact the disk was full. Anyway I'll better check on that just in > > case. > > > >- This is a SPLAT installation and I tried to follow the procedure > > logged > > > as > > > >the default admin user, so I don't think permissions as an issue > > here. > > > >- About Hugo's last point, the issue we have is this would be the > > first > > > >export we would take out of this config because it was precisely > > built > > > from > > > >scratch. We were waiting to have the systems in production before > > getting > > > >the export so we could be sure to have everything needed in place > > and > > > >included in the backup. I guess we should have gotten "half-way" > > backups, > > > >but there's nothing I can do about that now. > > > > > > > >Any further ideas would be very appreciated. > > > > > > > >Regards > > > > > > > >On 10/28/06, Hugo van der Kooij <[EMAIL PROTECTED]> wrote: > > > >> > > > >>On Sat, 28 Oct 2006, Sergio Alvarez wrote: > > > >> > > > >> > I ran the proper command, the process seemed to start ok, but > > then > > > after > > > >>the > > > >> > message that says it is "copying files to a temporary forlder", > > an > > > error > > > >> > came up: > > > >> > > > > >> > "Failed to read local configuration info" > > > >> > > > >>Here is a loose description of the upgrade_export activities: > > > >> > > > >>1. Relevant files are copied to a temporary place. > > > >> This one lives under $FWDIR/tmp > > > >>2. The config details are written to a file. > > > >> Here it will list the products installed. > > > >>3. The whole buch gets wrapped in tar and feathers > > > >> (Mhhh. make that gzip ;-) > > > >> > > > >>It seems you ran out of diskspace in step 1 or step 3 ir there is > > > >>something odd that prevents step 2 from completing. > > > >> > > > >>Errors in part 2 are the hardest to find even if it is in fact only > > a > > > tiny > > > >>fraction of the time it takes to build the backup. > > > >> > > > >>If step 1 is OK and 2 is not you can take the config file from a > > knonw > > > >>working backup and put it in the proper place and then do step 3 by > > > hand. > > > >> > > > >>Hugo. > > > >> > > > >>-- > > > >> [EMAIL PROTECTED] http://hvdkooij.xs4all.nl/ > > > >> This message is using 100% recycled electrons. > > > >> > > > >>================================================= > > > >>To set vacation, Out-Of-Office, or away messages, > > > >>send an email to [EMAIL PROTECTED] > > > >>in the BODY of the email add: > > > >>set fw-1-mailinglist nomail > > > >>================================================= > > > >>To unsubscribe from this mailing list, > > > >>please see the instructions at > > > >>http://www.checkpoint.com/services/mailing.html > > > >>================================================= > > > >>If you have any questions on how to change your > > > >>subscription options, email > > > >>[EMAIL PROTECTED] > > > >>================================================= > > > > > > > > > > > > > > > >-- > > > >Sergio Alvarez > > > >(506)8301342 > > > > > > > >================================================= > > > >To set vacation, Out-Of-Office, or away messages, > > > >send an email to [EMAIL PROTECTED] > > > >in the BODY of the email add: > > > >set fw-1-mailinglist nomail > > > >================================================= > > > >To unsubscribe from this mailing list, > > > >please see the instructions at > > > >http://www.checkpoint.com/services/mailing.html > > > >================================================= > > > >If you have any questions on how to change your > > > >subscription options, email > > > >[EMAIL PROTECTED] > > > >================================================= > > > > > > -- > > > Reinhard Stich [EMAIL PROTECTED] > > > Internet Security AG, 1150 Wien, Johnstrasse 29 > > > Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 > > > > > > ================================================= > > > To set vacation, Out-Of-Office, or away messages, > > > send an email to [EMAIL PROTECTED] > > > in the BODY of the email add: > > > set fw-1-mailinglist nomail > > > ================================================= > > > To unsubscribe from this mailing list, > > > please see the instructions at > > > http://www.checkpoint.com/services/mailing.html > > > ================================================= > > > If you have any questions on how to change your > > > subscription options, email > > > [EMAIL PROTECTED] > > > ================================================= > > > > > > > > > > > -- > > Sergio Alvarez > > (506)8301342 > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, > > send an email to [EMAIL PROTECTED] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > [EMAIL PROTECTED] > > ================================================= > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, > > send an email to [EMAIL PROTECTED] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > [EMAIL PROTECTED] > > ================================================= > > > > > > -- > Sergio Alvarez > (506)8301342 > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
-- Sergio Alvarez (506)8301342 ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
