Problem Upgrading to IDS-K9-sp-4.1-2-S58.rpm.pkg

[ddinh]

Has anyone experienced this error? I'm using another sensor as an ftp server and have been sucessful in applying past updates until now. Have also re-dowloaded the updates several time to make sure it is not corrupted. Any help is greatful. Thanks

Damien

idsm2-blade(config)# upgrade ftp://netrangr@10.x.x.x//IDS-K9-sp-4.1-2-S58.rpm.pkg

Password: ******

Warning: Executing this command will apply a service pack to the application partition. The system may be rebooted to complete the upgrade.

Continue with upgrade? : yes

Error: idsPackageMgr: signature was not valid

[lwierenga]

Sounds like rpm.pkg is corrupt. Download again and try and reinstall.

[jamesand]

Yes, this is the first thing to try. The message "signature not valid" means that the update file encryption signature was not valid, indicating that the file may be corrupt.

[csailer]

I would verify that md5sum/cksum of the package on the ftp server matches what is posted on CCO. Here is the info:

md5sum:a9e729ad135781502571e7fcc9792792

cksum: 2039528904 12238359

[vaamann]

Damien,

Login to the service account on the sensor that you're using as the ftp server and run md5sum on the Service Pack file IDS-K9-sp-4.1-2-S58.rpm.pkg. The result should be a9e729ad135781502571e7fcc9792792; please verify this value.

Thanks,

Vaughn

[csailer]

Damien,

Sorry, I did not notice that you were using another sensor as an ftp server. I would assume that you are using a 3.1 sensor as the ftp server since 4.X does not

support an ftp server. In this case log in with the userid and password you use to put the files on ftp server. 3.1 sensors do not have the md5sum utility, so you will have to refefence the cksum already posted.

[ddinh]

I did use the cksum utility, instead, and the result matched.

[csailer]

Could you please post the output of a "sho ver" and "sho clock".

Thanks

[ddinh]

ids1# show ver

Application Partition:

Cisco Systems Intrusion Detection Sensor, Version 4.1(1)S58

OS Version 2.4.18-5-phoenix

Platform: WS-SVC-IDSM2-BUN

Sensor up-time is 22:21.

Using 409780224 out of 1979682816 bytes of available memory (20% usage)

Using 1.7G out of 17G bytes of available disk space (10% usage)

MainApp 2003_Jun_20_06.00 (Release) 2003-06-20T05:53:31-0500 Running

AnalysisEngine 2003_Jun_20_06.00 (Release) 2003-06-20T05:53:31-0500 Running

Authentication 2003_Jun_20_06.00 (Release) 2003-06-20T05:53:31-0500 Running

Logger 2003_Jun_20_06.00 (Release) 2003-06-20T05:53:31-0500 Running

NetworkAccess 2003_Jun_20_06.00 (Release) 2003-06-20T05:53:31-0500 Running

TransactionSource 2003_Jun_20_06.00 (Release) 2003-06-20T05:53:31-0500 Running

WebServer 2003_Jun_20_06.00 (Release) 2003-06-20T05:53:31-0500 Running

CLI 2003_Jun_20_06.00 (Release) 2003-06-20T05:53:31-0500

Upgrade History:

* IDS-sig-4.1-1-S57 19:33:04 UTC Mon Oct 20 2003

IDS-sig-4.1-1-S58.rpm.pkg 17:20:02 UTC Thu Oct 23 2003

Maintenance Partition Version 1.3(2)

ids1# show clock

*22:03:11 UTC Fri Nov 07 2003

[lwierenga]

Sorry, didn't notice that you re-dowloaded the updates several time...duh, getting sloppy. You show that you are using command upgrade ftp://netrangr@10.x.x.x//IDS-K9-sp-4.1-2-S58.rpm.pkg? What directory is this update in? Correct command would be upgrade ftp://@///IDS-K9-sp-4.1-2-S58.rpm.pkg.

[ddinh]

It's in the /usr/nr directory but I've tried that syntax as well. When I log into this ftp service, it automatically puts me in this directory so I didn't need to specify the directory. Thanks

[jlively]

if you are using the default directory the you only use 1 "/" in the file name :

upgrade ftp://netrangr@10.x.x.x//IDS-K9-sp-4.1-2-S58.rpm.pkg

should be:

upgrade ftp://netrangr@10.x.x.x/IDS-K9-sp-4.1-2-S58.rpm.pkg

otherwise you are getting the absolute path, which means it should be looking for the file in the / directory instead of /usr/nr like you want.

[ddinh]

I've tried that syntax as well. Something is awry. I just got it to upgrade from another ftp server, however. Thanks everyone for your time and suggestions. Awesome forum!!!

Damien Dinh

[csailer]

Glad to hear it is working!!

[lwierenga]

Your very welcome.