Issues With Automatic Update - Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual

Troubleshooting the 4200 Series Appliance
Figure C-1
Figure C-1
Update Type
Major Version Level
Minor Version Level
Service Pack Level
IDS-K9-sp-5.0-2-.pkg–Service Pack Update
IDS-K9-min-5.1-1-.pkg–Minor Version Update
IDS-K9-maj-5.0-1-.pkg–Major Version Update
Update Type
Signature Level
Minimum Software Requirement

Issues With Automatic Update

The following list provides suggestions for troubleshooting automatic update:
•
•
•
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
C-32
demonstrates how to interpret the IPS software filenames.
IPS Software Filenames
IPS-maj-w.x-y-.pkg
IPS-sig-Sx-minreq-5.0-1.pkg
Run tcpDump
Create a service account. Su to root and run tcpDump on the command and control interface to
–
capture packets between the sensor and the FTP server.
For the procedure, see
Use the upgrade command to manually upgrade the sensor.
–
For the procedure, see
Look at the tcpDump output for errors coming back from the FTP server.
–
Make sure the sensor is in the correct directory.
The directory must be specified correctly. This has caused issues with Windows FTP servers.
Sometimes an extra "/" or even two "/" are needed in front of the directory name.
To verify this, use the same FTP commands you see in the tcpDump output through your own FTP
connection.
Make sure you have not modified the FTP server to use custom prompts.
If you modify the FTP prompts to give security warnings, for example, this causes a problem,
because the sensor is expecting a hard-coded list of responses.
Creating the Service Account, page
Chapter 17, "Upgrading, Downgrading, and Installing System Images."
Appendix C Troubleshooting
4-13.
78-16527-01