09-13-2010 04:09 AM - edited 03-10-2019 05:07 AM
Hi,
Whenever we apply the signature update to IPS 4215, it reboot itself normal but gives an error after enter the
username/pasword by using ssh; and not enter the CLI.
"Error: Cannot communicate with mainApp (getVersion). Please contact your system administrator.
Would you like to run cidDump?[no]: "
After rebooting the IPS by power off/power on, it works normal, we enter CLI.
So we could not apply the signature update from IPS-sig-S487-req-E4.pkg to IPS-sig-S511-req-E4.pkg.
IPS# sh ver
Application Partition:
Cisco Intrusion Prevention System, Version 6.0(6)E4
Host:
Realm Keys key1.0
Signature Definition:
Signature Update S511.0 2010-08-31
OS Version: 2.4.30-IDS-smp-bigphys
Platform: IDS-4215-4FE-K9
Serial Number: 88810221721
Licensed, expires: 20-Jun-2011 UTC
Sensor up-time is 17 min.
Using 378331136 out of 510341120 bytes of available memory (74% usage)
application-data is using 41.6M out of 166.8M bytes of available disk space (26% usage)
boot is using 37.6M out of 68.6M bytes of available disk space (58% usage)
application-log is using 532.3M out of 2.8G bytes of available disk space (20% usage)
MainApp N-NUBRA_2009_JUL_15_01_10_6_0_5_57 (Ipsbuild) 2009-07-15T01:15:08-0500 Running
AnalysisEngine NE-NUBRA_E4_2010_MAR_24_22_44_6_0_6 (Ipsbuild) 2010-03-24T22:47:53-0500 Running
CLI N-NUBRA_2009_JUL_15_01_10_6_0_5_57 (Ipsbuild) 2009-07-15T01:15:08-0500
Upgrade History:
IPS-sig-S487-req-E4.pkg 11:06:09 UTC Sun May 02 2010
Recovery Partition Version 1.1 - 6.0(6)E3
although when i tried to update the signature agian after the reboot, it gave me the following error:
Error: execUpgradeSoftware : Update IPS-sig-S511-req-E4.pkg is already installed on this system
Any advice about this problem?
Thanks in advance.
09-13-2010 05:42 AM
From the show version output, signature# 511 has definitely been applied as per the highlighted line below:
IPS# sh ver
Application Partition:
Cisco Intrusion Prevention System, Version 6.0(6)E4
Host:
Realm Keys key1.0
Signature Definition:
Signature Update S511.0 2010-08-31
OS Version: 2.4.30-IDS-smp-bigphys
Platform: IDS-4215-4FE-K9
Serial Number: 88810221721
Licensed, expires: 20-Jun-2011 UTC
Sensor up-time is 17 min.
06-30-2013 09:11 PM
I have the same problem and this problem keeps recurring but no explanation.
should we restart the box every time this happen ?
07-04-2013 05:36 AM
Hi ,
It seems like the mainApp has hung on the IPS.
Two known defects which might cause the same : CSCtj86988 and CSCuf20148. However, CidDump and few other debugging outputs are required to investigate this further and would give us a better insight on this. For stability, you may consider an upgrade to 7.1(7) or to the latest version code based on the platform.
To recover the sensor from the hung state, a reload is required.
Hope that answers your query,
Thulasi Shankar
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide