7 Replies Latest reply: Jan 29, 2013 8:46 AM by mtuma RSS

    Update Sidewinder VA 70102 to 70103

    Marcus Meyer

      Hi,

      please help...

      i try to update from version 70102 to 70103 but i get this error:

      cd /var/packages/70103_dir

      cat pkg_log

      Package install operation to slice 3: Had an IO operation failure

       

      But for me all looks fine.

      fsck to slice 3 is ok.

      i can mount and change files and so on...

       

       

      what can i do?

       

      regards

      Marcus

        • 1. Re: Update Sidewinder VA 70102 to 70103
          mtuma

          Hello,

           

          Can you provide the entire package logs (install_output) from /var/packages/status2/ and /var/packages/status3?

           

          Regards,

           

          Matt

          • 2. Re: Update Sidewinder VA 70102 to 70103
            Marcus Meyer

            Hi,

            here it is:

             

            sw2-alpha:Admn {1} % cat /var/packages/status2/install_output

            ***********************************************************

            Mon Jun 29 14:39:04 2009: Install of package 70100 on Operational System started.

            Mon Jun 29 14:39:18 2009: Install of package 70100 on Operational System successful.

            ***********************************************************

            Mon Jun 29 10:39:20 2009: Install of package 70101 on Operational System started.

            Mon Jun 29 10:39:20 2009: Starting 70101's presysinstall

            Mon Jun 29 10:39:20 2009: Finished 70101's presysinstall without error

            bsdlabel: partition c doesn't cover the whole unit!

            bsdlabel: An incorrect partition c may cause problems for standard system utilities

            bsdlabel: partition c doesn't cover the whole unit!

            bsdlabel: An incorrect partition c may cause problems for standard system utilities

            bsdlabel: partition c doesn't cover the whole unit!

            bsdlabel: An incorrect partition c may cause problems for standard system utilities

            Mon Jun 29 10:39:25 2009: Starting 70101's postsysinstall

            Mon Jun 29 10:39:29 2009: Finished 70101's postsysinstall without error

            Mon Jun 29 10:39:29 2009: Install of package 70101 on Operational System successful.

            ***********************************************************

            Mon Jun 29 10:39:30 2009: Install of package 70102 on Operational System started.

            Mon Jun 29 10:39:30 2009: Starting 70102's presysinstall

            Mon Jun 29 10:39:31 2009: Finished 70102's presysinstall without error

            Mon Jun 29 10:39:36 2009: Starting 70102's postsysinstall

            Mon Jun 29 10:39:36 2009: Finished 70102's postsysinstall without error

            Mon Jun 29 10:39:36 2009: Install of package 70102 on Operational System successful.

            ***********************************************************

            Mon Jan 31 09:52:55 2011: Install of package 70102H01 on Operational System started.

            Mon Jan 31 09:52:55 2011: Starting 70102H01's preinstall

            Mon Jan 31 09:52:56 2011: Finished 70102H01's preinstall without error

            Mon Jan 31 09:52:56 2011: Starting 70102H01's postinstall

            Mon Jan 31 09:52:57 2011: Finished 70102H01's postinstall without error

            Mon Jan 31 09:52:57 2011: Install of package 70102H01 on Operational System successful.

            ***********************************************************

            Mon Jan 31 09:52:57 2011: Install of package 70102H02 on Operational System started.

            Mon Jan 31 09:52:57 2011: Starting 70102H02's preinstall

            Mon Jan 31 09:52:57 2011: Finished 70102H02's preinstall without error

            Mon Jan 31 09:52:57 2011: Starting 70102H02's postinstall

            Mon Jan 31 09:52:58 2011: Finished 70102H02's postinstall without error

            Mon Jan 31 09:52:58 2011: Install of package 70102H02 on Operational System successful.

            ***********************************************************

            Mon Jan 31 09:52:58 2011: Install of package 70102H03 on Operational System started.

            Mon Jan 31 09:52:59 2011: Starting 70102H03's preinstall

            Mon Jan 31 09:52:59 2011: Finished 70102H03's preinstall without error

            Mon Jan 31 09:52:59 2011: Starting 70102H03's postinstall

            Mon Jan 31 09:53:01 2011: Finished 70102H03's postinstall without error

            Mon Jan 31 09:53:01 2011: Install of package 70102H03 on Operational System successful.

            ***********************************************************

            Mon Jan 31 09:53:01 2011: Install of package 70102H04 on Operational System started.

            Mon Jan 31 09:53:01 2011: Starting 70102H04's preinstall

            Mon Jan 31 09:53:01 2011: Finished 70102H04's preinstall without error

            Mon Jan 31 09:53:01 2011: Starting 70102H04's postinstall

            Mon Jan 31 09:53:02 2011: Finished 70102H04's postinstall without error

            Mon Jan 31 09:53:02 2011: Install of package 70102H04 on Operational System successful.

            ***********************************************************

            Mon Jan 31 09:53:02 2011: Install of package 70102H05 on Operational System started.

            Mon Jan 31 09:53:02 2011: Install of package 70102H05 on Operational System successful.

            ***********************************************************

            Mon Jan 31 09:53:02 2011: Install of package 70102H06 on Operational System started.

            Mon Jan 31 09:53:02 2011: Starting 70102H06's preinstall

            Mon Jan 31 09:53:02 2011: Finished 70102H06's preinstall without error

            Mon Jan 31 09:53:02 2011: Starting 70102H06's postinstall

            Mon Jan 31 09:53:03 2011: Finished 70102H06's postinstall without error

            Mon Jan 31 09:53:03 2011: Install of package 70102H06 on Operational System successful.

            ***********************************************************

            Mon Jan 31 09:53:03 2011: Install of package 70102H07 on Operational System started.

            Mon Jan 31 09:53:03 2011: Starting 70102H07's preinstall

            Mon Jan 31 09:53:03 2011: Finished 70102H07's preinstall without error

            Mon Jan 31 09:53:04 2011: Starting 70102H07's postinstall

            Mon Jan 31 09:53:05 2011: Finished 70102H07's postinstall without error

            Mon Jan 31 09:53:05 2011: Install of package 70102H07 on Operational System successful.

            ***********************************************************

            Mon Jan 31 09:53:05 2011: Install of package 70102H08 on Operational System started.

            Mon Jan 31 09:53:05 2011: Starting 70102H08's preinstall

            Mon Jan 31 09:53:05 2011: Finished 70102H08's preinstall without error

            Mon Jan 31 09:53:05 2011: Starting 70102H08's postinstall

            Mon Jan 31 09:53:06 2011: Finished 70102H08's postinstall without error

            Mon Jan 31 09:53:06 2011: Install of package 70102H08 on Operational System successful.

            ***********************************************************

            Mon Jan 31 09:53:06 2011: Install of package 70102H09 on Operational System started.

            Mon Jan 31 09:53:08 2011: Starting 70102H09's preinstall

            Mon Jan 31 09:53:08 2011: Finished 70102H09's preinstall without error

            Mon Jan 31 09:53:09 2011: Starting 70102H09's postinstall

            Mon Jan 31 09:53:10 2011: Finished 70102H09's postinstall without error

            Mon Jan 31 09:53:10 2011: Install of package 70102H09 on Operational System successful.

            ***********************************************************

            Mon Jan 31 09:53:10 2011: Install of package 70102H11 on Operational System started.

            Mon Jan 31 09:53:12 2011: Starting 70102H11's preinstall

            Mon Jan 31 09:53:12 2011: Finished 70102H11's preinstall without error

            Mon Jan 31 09:53:13 2011: Starting 70102H11's postinstall

            Mon Jan 31 09:53:14 2011: Finished 70102H11's postinstall without error

            Mon Jan 31 09:53:14 2011: Install of package 70102H11 on Operational System successful.

            ***********************************************************

            Mon Jan 31 09:53:14 2011: Install of package 70102H12 on Operational System started.

            Mon Jan 31 09:53:14 2011: Starting 70102H12's preinstall

            Mon Jan 31 09:53:15 2011: Finished 70102H12's preinstall without error

            Mon Jan 31 09:53:15 2011: Starting 70102H12's postinstall

            Mon Jan 31 09:53:21 2011: Finished 70102H12's postinstall without error

            Mon Jan 31 09:53:21 2011: Install of package 70102H12 on Operational System successful.

            ***********************************************************

            Mon Jan 31 09:53:21 2011: Install of package 70102H14 on Operational System started.

            Mon Jan 31 09:53:21 2011: Starting 70102H14's preinstall

            Mon Jan 31 09:53:21 2011: Finished 70102H14's preinstall without error

            Mon Jan 31 09:53:21 2011: Starting 70102H14's postinstall

            Mon Jan 31 09:53:22 2011: Finished 70102H14's postinstall without error

            Mon Jan 31 09:53:22 2011: Install of package 70102H14 on Operational System successful.

            ***********************************************************

            Mon Jan 31 09:53:22 2011: Install of package 70102H15 on Operational System started.

            pax: Unable to access secureos/avdata/signlic.txt <No such file or directory>

            Mon Jan 31 09:53:23 2011: Starting 70102H15's preinstall

            Mon Jan 31 09:53:23 2011: Finished 70102H15's preinstall without error

            Mon Jan 31 09:53:23 2011: Starting 70102H15's postinstall

            Mon Jan 31 09:53:24 2011: Finished 70102H15's postinstall without error

            Mon Jan 31 09:53:24 2011: Install of package 70102H15 on Operational System successful.

            ***********************************************************

            Mon Jan 31 09:53:24 2011: Install of package 70102H16 on Operational System started.

            Mon Jan 31 09:53:24 2011: Starting 70102H16's preinstall

            Mon Jan 31 09:53:25 2011: Finished 70102H16's preinstall without error

            Mon Jan 31 09:53:25 2011: Starting 70102H16's postinstall

            Mon Jan 31 09:53:25 2011: Finished 70102H16's postinstall without error

            Mon Jan 31 09:53:25 2011: Install of package 70102H16 on Operational System successful.

            ***********************************************************

            Mon Jan 31 09:53:26 2011: Install of package 70102H17 on Operational System started.

            Mon Jan 31 09:53:26 2011: Starting 70102H17's preinstall

            Mon Jan 31 09:53:26 2011: Finished 70102H17's preinstall without error

            Mon Jan 31 09:53:26 2011: Starting 70102H17's postinstall

            Mon Jan 31 09:53:27 2011: Finished 70102H17's postinstall without error

            Mon Jan 31 09:53:27 2011: Install of package 70102H17 on Operational System successful.

            ***********************************************************

            Tue Feb  1 10:47:32 2011: Install of package 70102CC4000706 on Operational System started.

            Restarting ccmd

            Tue Feb  1 10:47:36 2011: Install of package 70102CC4000706 on Operational System successful.

            ***********************************************************

            Fri Jan 25 13:58:43 2013: Install of package 70102H20 on Operational System started.

            pax: Unable to access usr/bin/nicid <No such file or directory>

            pax: Unable to access usr/share/man/cat8/nicid.8.gz <No such file or directory>

            pax: Unable to access secureos/db/swinteg/2c2225a56d0e0c60d98c213b2fb28acd6e8ae44a_nicid <No such file or directory>

            Fri Jan 25 13:58:46 2013: Starting 70102H20's preinstall

            Fri Jan 25 13:58:46 2013: Finished 70102H20's preinstall without error

            Fri Jan 25 13:58:48 2013: Starting 70102H20's postinstall

            Fri Jan 25 13:58:49 2013: Finished 70102H20's postinstall without error

            Fri Jan 25 13:58:49 2013: Install of package 70102H20 on Operational System successful.

             

            and here from status 3 only for 70103

            ** /dev/da0s3a (NO WRITE)

            ** Last Mounted on /pkgmnt

            ** Phase 1 - Check Blocks and Sizes

            ** Phase 2 - Check Pathnames

            ** Phase 3 - Check Connectivity

            ** Phase 4 - Check Reference Counts

            ** Phase 5 - Check Cyl groups

            839 files, 27099 used, 52124 free (68 frags, 6507 blocks, 0.1% fragmentation)

            ** /dev/da0s3d (NO WRITE)

            ** Last Mounted on /pkgmnt/usr

            ** Phase 1 - Check Blocks and Sizes

            ** Phase 2 - Check Pathnames

            ** Phase 3 - Check Connectivity

            ** Phase 4 - Check Reference Counts

            ** Phase 5 - Check Cyl groups

            9460 files, 162595 used, 343892 free (68 frags, 42978 blocks, 0.0% fragmentation)

            ** /dev/da0s3e (NO WRITE)

            ** Last Mounted on /pkgmnt/secureos

            ** Phase 1 - Check Blocks and Sizes

            ** Phase 2 - Check Pathnames

            ** Phase 3 - Check Connectivity

            ** Phase 4 - Check Reference Counts

            ** Phase 5 - Check Cyl groups

            2699 files, 69331 used, 1373542 free (158 frags, 171673 blocks, 0.0% fragmentation)

            ***********************************************************

            Fri Jan 25 15:45:46 2013: Install of package 70103 on Alternate System started.

            Fri Jan 25 15:45:47 2013: Starting 70103's preinstall

            Your CommandCenter does not support patch 70103.

            Please upgrade your CommandCenter before installing this patch.

            Fri Jan 25 15:45:48 2013: Install of package 70103 on Alternate System failed.

             

            CC is at 5.2.1

             

            hope this helps.

             

            regards

            Marcus

            • 3. Re: Update Sidewinder VA 70102 to 70103
              mtuma

              Hello,

               

              >Fri Jan 25 15:45:47 2013: Starting 70103's preinstall

              >Your CommandCenter does not support patch 70103.

              >Please upgrade your CommandCenter before installing this patch.

              >Fri Jan 25 15:45:48 2013: Install of package 70103 on Alternate System failed.

               

              Can you confirm the version of CC? This is telling us that 70103 is not supported on this version of CC. You mention the CC is at 5.2.1, but that version should be able to manage 70103. Can you send a screenshot of the CC gui showing the version?

               

              Also, can you send the output of "cf package list"?

               

               

              Regards,

               

              Matt

              • 4. Re: Update Sidewinder VA 70102 to 70103
                Marcus Meyer

                Hi,

                yes it is at 5.2.1

                see screenshot below...

                mcaffe_cc_version_screenshot.JPG

                 

                regards,

                Marcus

                • 5. Re: Update Sidewinder VA 70102 to 70103
                  mtuma

                  Interesting, ok, can you send me the output of "cf package list" from the firewall?

                   

                  -Matt

                  • 6. Re: Update Sidewinder VA 70102 to 70103
                    Marcus Meyer

                    Hi,

                    sorry i have skiped this...

                     

                    here is the output:

                     

                    sw2-alpha:Admn {1} % cf pack list

                                                                 Local Packages

                                                              -------------------

                                           CommandCenter Management Version: 7.0.1.02.CC.4.0.0.07.06

                    What              When               Status     Description

                    ================= ================== ========== =======================================================

                    70100             29-Jun-09 16:39    installed  Sidewinder 7.0.1.00 IPv6 Phase 1

                    70101             29-Jun-09 16:39    installed  Sidewinder 7.0.1.01 FIPS 140-2 Level 2

                    70102             29-Jun-09 16:39    installed  Sidewinder 7.0.1.02 Transparent Firewall with McAfee AV and Profiler

                    70102H01          31-Jan-11 15:52    obsolete   Sidewinder 7.0.1.02.H01 McAfee AV Enhancements

                    70102H02          31-Jan-11 15:52    obsolete   Sidewinder 7.0.1.02.H02 CAC

                    70102H03          31-Jan-11 15:53    installed  Sidewinder 7.0.1.02.H03 Profiler

                    70102H04          31-Jan-11 15:53    installed  Sidewinder 7.0.1.02.H04 HA DNS

                    70102H05          31-Jan-11 15:53    obsolete   Sidewinder 7.0.1.02.H05 Scanner DAT file descriptor leak

                    70102H06          31-Jan-11 15:53    installed  Sidewinder 7.0.1.02.H06 dd LCB info to the config change reports

                    70102H07          31-Jan-11 15:53    installed  Sidewinder 7.0.1.02.H07 correct issue with Sidewinder backups on CC

                    70102H08          31-Jan-11 15:53    installed  Sidewinder 7.0.1.02.H08 Apply P3 to BIND 9.4.3 to fix DoS

                    70102H09          31-Jan-11 15:53    obsolete   Sidewinder 7.0.1.02.H09 Hardware Enhancements

                    70102H11          31-Jan-11 15:53    obsolete   Sidewinder 7.0.1.02.H11 TCP fastpath fix

                    70102H12          31-Jan-11 15:53    installed  Sidewinder 7.0.1.02.H12 Improve resilience against renegotiation attacks

                    70102H14          31-Jan-11 15:53    installed  Sidewinder 7.0.1.02.H14 Improve IPS signature set coverage

                    70102H15          31-Jan-11 15:53    installed  Sidewinder 7.0.1.02.H15 make fast path smarter

                    70102H16          31-Jan-11 15:53    installed  Sidewinder 7.0.1.02.H16 TE support for CC 5.0 new packet capture feature

                    70102H17          31-Jan-11 15:53    installed  Sidewinder 7.0.1.02.H17 fix traceback in config reporter

                    70102HW02         31-Jan-11 16:18    obsolete   Sidewinder 7.0.1.02.HW02 Rev B - New network hardware (updated em and ix drivers, new igb driver)

                    70102CC4000706    01-Feb-11 10:47    installed  Sidewinder 7.0.1.02. CommandCenter 70102CC4000706

                    70102H19          25-Jan-13 12:22    obsolete   Sidewinder 7.0.1.02.H19 NTPD, kernel, avupdate.pyc maintenance patch

                    70102H20          25-Jan-13 13:58    installed  Sidewinder 7.0.1.02.H20 NTPD, avupdate, Kernel and Hardware Patch

                    70102H21          25-Jan-13 12:25    loaded     Sidewinder 7.0.1.02.H21 Restore MBR

                    70102H22          25-Jan-13 12:26    loaded     Sidewinder 7.0.1.02.H22 bind maintenance patch

                    70103             25-Jan-13 12:46    loaded     Sidewinder 7.0.1.03 CAC OCSP and SNMPv3

                    70103H01          25-Jan-13 12:46    loaded     Sidewinder 7.0.1.03 SNMPD Maintenance

                    70103H02          25-Jan-13 12:47    loaded     Sidewinder 7.0.1.03 bind maintenance patch

                    70103H03          25-Jan-13 12:47    loaded     Sidewinder 7.0.1.03.H03 General Maintenance

                    70103H04          25-Jan-13 12:48    loaded     Sidewinder 7.0.1.03.H04 General Maintenance

                    70103H05          25-Jan-13 12:48    loaded     Sidewinder 7.0.1.03.H05 General Maintenance

                    70103H06          25-Jan-13 12:49    loaded     Sidewinder 7.0.1.03.P06 General Maintenance

                    701MCV01          25-Jan-13 12:50    loaded     Sidewinder 7.0.1.MCV01 McAfee Anti-Virus Engine Version 5400 Update.

                    • 7. Re: Update Sidewinder VA 70102 to 70103
                      mtuma

                      Hello,

                       

                      Have they upgraded the CC recently? The reason I ask is that the latest CC patch that they have is "7.0.1.02.CC.4.0.0.07.06". This patch is for CC 4.0.0, and is probably why the firewall is complaining that the CC version does not support 70103.

                       

                      Can they push/validate to this firewall? Typically this causes the patch to get installed automatically.

                       

                      I would take a look at this article to push the latest CC patch manually to the firewall, to see if that helps.

                       

                      How to Manually Download a Patch from Control Center to McAfee Firewall Enterprise (KB64259)

                       

                       

                      -Matt