cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3593
Views
0
Helpful
3
Replies

Cannot communicate with mainApp (getVersion)

MohamedCSE
Level 1
Level 1

Hi,

Whenever we apply the signature update to IPS 4215, it reboot itself normal but gives an error after enter the

username/pasword by using ssh; and not enter the CLI.

"Error: Cannot communicate with mainApp (getVersion). Please contact your system administrator.

Would you like to run cidDump?[no]: "

After rebooting the IPS by power off/power on, it works normal, we enter CLI.

So we could not apply the signature update from IPS-sig-S487-req-E4.pkg to IPS-sig-S511-req-E4.pkg.

IPS# sh ver

Application Partition:

Cisco Intrusion Prevention System, Version 6.0(6)E4

Host:                                                        

    Realm Keys          key1.0                               

Signature Definition:                                        

    Signature Update    S511.0                   2010-08-31  

OS Version:             2.4.30-IDS-smp-bigphys               

Platform:               IDS-4215-4FE-K9                      

Serial Number:          88810221721                          

Licensed, expires:      20-Jun-2011 UTC                      

Sensor up-time is 17 min.

Using 378331136 out of 510341120 bytes of available memory (74% usage)

application-data is using 41.6M out of 166.8M bytes of available disk space (26% usage)

boot is using 37.6M out of 68.6M bytes of available disk space (58% usage)

application-log is using 532.3M out of 2.8G bytes of available disk space (20% usage)

MainApp          N-NUBRA_2009_JUL_15_01_10_6_0_5_57    (Ipsbuild)   2009-07-15T01:15:08-0500   Running  

AnalysisEngine   NE-NUBRA_E4_2010_MAR_24_22_44_6_0_6   (Ipsbuild)   2010-03-24T22:47:53-0500   Running  

CLI              N-NUBRA_2009_JUL_15_01_10_6_0_5_57    (Ipsbuild)   2009-07-15T01:15:08-0500            

Upgrade History:

  IPS-sig-S487-req-E4.pkg   11:06:09 UTC Sun May 02 2010  

Recovery Partition Version 1.1 - 6.0(6)E3

although when i tried to update the signature agian after the reboot, it gave me the following error:

Error: execUpgradeSoftware : Update IPS-sig-S511-req-E4.pkg is already installed on this system

Any advice about this problem?

Thanks in advance.

3 Replies 3

Jennifer Halim
Cisco Employee
Cisco Employee

From the show version output, signature# 511 has definitely been applied as per the highlighted line below:

IPS# sh ver

Application Partition:

Cisco Intrusion Prevention System, Version 6.0(6)E4

Host:                                                       

    Realm Keys          key1.0                              

Signature Definition:                                       

    Signature Update    S511.0                   2010-08-31  

OS Version:             2.4.30-IDS-smp-bigphys              

Platform:               IDS-4215-4FE-K9                     

Serial Number:          88810221721                         

Licensed, expires:      20-Jun-2011 UTC                     

Sensor up-time is 17 min.

I have the same problem and this problem keeps recurring but no explanation.

should we restart the box every time this happen ?

Hi ,

It seems like the mainApp has hung on the IPS.

Two known defects which might cause the same : CSCtj86988 and CSCuf20148. However, CidDump and few other debugging outputs are required to investigate this further and would give us a better insight on this. For stability, you may consider an upgrade to 7.1(7) or to the latest version code based on the platform.

To recover the sensor from the hung state, a reload is required.

Hope that answers your query,

Thulasi Shankar

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card