topic Re: IPS 4240 Image Recovery Problem. in Network Security

IPS 4240 Image Recovery Problem.

johnyoon75 — Sun, 10 Mar 2019 09:46:26 GMT

Hello.

I can boot ips 4240 with ids 4.5 image.

Here is the log.

Please tell me how can i boot with this image?

rommon #5> set

ROMMON Variable Settings:

ADDRESS=192.168.1.1

SERVER=192.168.1.10

GATEWAY=192.168.1.10

PORT=Management0/0

VLAN=untagged

IMAGE=IDS-42XX-K9-r-1.1-a-4.0-1-S37.tar.tar

CONFIG=

rommon #6> tftftp

tftp IDS-42XX-K9-r-1.1-a-4.0-1-S37.tar.tar@192.168.1.10 via 192.168.1.10

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Received 137617408 bytes

Bad magic number (0x55a68d31)

rommon #7>

rommon #8> reset

ROMMON Platform Reboot

Rebooting....

Booting system, please wait...

CISCO SYSTEMS

Embedded BIOS Version 1.0(5)0 09/14/04 12:23:35.90

Low Memory: 631 KB

High Memory: 2048 MB

PCI Device Table.

Bus Dev Func VendID DevID Class Irq

00 00 00 8086 2578 Host Bridge

00 01 00 8086 2579 PCI-to-PCI Bridge

00 03 00 8086 257B PCI-to-PCI Bridge

00 1C 00 8086 25AE PCI-to-PCI Bridge

00 1D 00 8086 25A9 Serial Bus 11

00 1D 01 8086 25AA Serial Bus 10

00 1D 04 8086 25AB System

00 1D 05 8086 25AC IRQ Controller

00 1D 07 8086 25AD Serial Bus 9

00 1E 00 8086 244E PCI-to-PCI Bridge

00 1F 00 8086 25A1 ISA Bridge

00 1F 02 8086 25A3 IDE Controller 11

00 1F 03 8086 25A4 Serial Bus 5

00 1F 05 8086 25A6 Audio 5

02 01 00 8086 1075 Ethernet 11

03 01 00 177D 0003 Encrypt/Decrypt 9

03 02 00 8086 1079 Ethernet 9

03 02 01 8086 1079 Ethernet 9

03 03 00 8086 1079 Ethernet 9

03 03 01 8086 1079 Ethernet 9

04 02 00 8086 1209 Ethernet 11

04 03 00 8086 1209 Ethernet 5

Evaluating BIOS Options ...

Launch BIOS Extension to setup ROMMON

Cisco Systems ROMMON Version (1.0(5)0) #1: Tue Sep 14 12:20:30 PDT 2004

Platform IPS-4240-K9

Management0/0

MAC Address: 000f.f775.5b7f

Use ? for help.

rommon #0> set

ROMMON Variable Settings:

ADDRESS=192.168.1.1

SERVER=192.168.1.10

GATEWAY=192.168.1.10

PORT=Management0/0

VLAN=untagged

IMAGE=IDS-42XX-K9-r-1.1-a-4.0-1-S37.tar.tar

CONFIG=

Re: IPS 4240 Image Recovery Problem.

johnyoon75 — Sun, 27 Nov 2005 13:05:09 GMT

zone(0): 4096 pages.

zone(1): 225280 pages.

zone(2): 294912 pages.

DMI not present.

ACPI: Unable to locate RSDP

Intel MultiProcessor Specification v1.1

Virtual Wire compatibility mode.

OEM ID: OEM ID Product ID: PRODUCT ID APIC at: 0xFEE00000

Processor #0 Pentium 4(tm) XEON(tm) APIC version 20

I/O APIC #14 Version 32 at 0xFEC00000.

I/O APIC #13 Version 32 at 0xFEC10000.

Enabling APIC mode: Flat. Using 2 I/O APICs

Processors: 1

Kernel command line: ro ramdisk_size=76800 rootrw=/dev/hda2 root=/dev/ram0 hda=flash nousb console=ttyS0 tlv=BP9QABj+gAovdm1saW51ei1ycg==

ide_setup: hda=flash

Initializing CPU#0

Detected 2000.115 MHz processor.

Console: colour dummy device 80x25

Calibrating delay loop... 3984.58 BogoMIPS

Memory: 2042596k/2097152k available (1620k kernel code, 54160k reserved, 636k data, 136k init, 1179648k highmem)

Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes)

Inode cache hash table entries: 131072 (order: 8, 1048576 bytes)

Mount cache hash table entries: 512 (order: 0, 4096 bytes)

Buffer cache hash table entries: 131072 (order: 7, 524288 bytes)

Page-cache hash table entries: 524288 (order: 9, 2097152 bytes)

CPU: Trace cache: 12K uops, L1 D cache: 8K

CPU: L2 cache: 512K

CPU: Hyper-Threading is disabled

Intel machine check architecture supported.

Intel machine check reporting enabled on CPU#0.

Enabling fast FPU save and restore... done.

Enabling unmasked SIMD FPU exception support... done.

Checking 'hlt' instruction... OK.

POSIX conformance testing by UNIFIX

mtrr: v1.40 (20010327) Richard Gooch (rgooch@atnf.csiro.au)

mtrr: detected mtrr type: Intel

CPU: Trace cache: 12K uops, L1 D cache: 8K

CPU: L2 cache: 512K

CPU: Hyper-Threading is disabled

Intel machine check reporting enabled on CPU#0.

CPU0: Intel(R) Pentium(R) 4 CPU 2.00GHz stepping 09

per-CPU timeslice cutoff: 1462.76 usecs.

enabled ExtINT on CPU#0

ESR value before enabling vector: 00000000

ESR value after enabling vector: 00000000

Error: only one processor found.

Re: IPS 4240 Image Recovery Problem.

johnyoon75 — Sun, 27 Nov 2005 13:05:54 GMT

ENABLING IO-APIC IRQs

Setting 14 in the phys_id_present_map

...changing IO-APIC physical APIC ID to 14 ... ok.

Setting 13 in the phys_id_present_map

...changing IO-APIC physical APIC ID to 13 ... ok.

..TIMER: vector=0x31 pin1=2 pin2=0

testing the IO APIC.......................

.................................... done.

Using local APIC timer interrupts.

calibrating APIC timer ...

..... CPU clock speed is 2000.1116 MHz.

..... host bus clock speed is 100.0054 MHz.

cpu: 0, clocks: 1000054, slice: 500027

CPU0<1000048>

Waiting on wait_init_idle (map = 0x0)

All processors have done init_idle

PCI: PCI BIOS revision 2.10 entry at 0xff648, last bus=4

PCI: Using configuration type 1

PCI: Probing PCI hardware

PCI: Probing PCI hardware (bus 00)

PCI: Ignoring BAR0-3 of IDE controller 00:1f.2

Transparent bridge - Intel Corp. 82801BA/CA/DB/EB PCI Bridge

PCI->APIC IRQ transform: (B0,I29,P0) -> 16

PCI->APIC IRQ transform: (B0,I29,P1) -> 19

PCI->APIC IRQ transform: (B0,I29,P3) -> 23

PCI->APIC IRQ transform: (B0,I31,P0) -> 16

PCI->APIC IRQ transform: (B0,I31,P1) -> 17

PCI->APIC IRQ transform: (B2,I1,P0) -> 18

PCI->APIC IRQ transform: (B3,I1,P0) -> 24

PCI->APIC IRQ transform: (B3,I2,P0) -> 24

PCI->APIC IRQ transform: (B3,I2,P1) -> 25

PCI->APIC IRQ transform: (B3,I3,P0) -> 26

PCI->APIC IRQ transform: (B3,I3,P1) -> 27

PCI->APIC IRQ transform: (B4,I2,P0) -> 16

PCI->APIC IRQ transform: (B4,I3,P0) -> 17

PCI: Cannot allocate resource region 0 of device 00:00.0

isapnp: Scanning for PnP cards...

isapnp: No Plug & Play device found

Linux NET4.0 for Linux 2.4

Based upon Swansea University Computer Society NET3.039

Initializing RT netlink socket

Starting kswapd

allocated 32 pages and 32 bhs reserved for the highmem bounces

Journalled Block Device driver loaded

keyboard: controller not found

pty: 2048 Unix98 ptys configured

Serial driver version 5.05c (2001-07-08) with MANY_PORTS MULTIPORT SHARE_IRQ SERIAL_PCI ISAPNP enabled

ttyS00 at 0x03f8 (irq = 4) is a 16550A

ttyS01 at 0x02f8 (irq = 3) is a 16550A

Real Time Clock Driver v1.10f

RAMDISK driver initialized: 16 RAM disks of 76800K size 1024 blocksize

loop: loaded (max 8 devices)

lpc: version 0.1 (Mar 4 2005)

Uniform Multi-Platform E-IDE driver Revision: 7.00beta4-2.4

ide: Assuming 33MHz system bus speed for PIO modes; override with idebus=xx

hdb: C/H/S=0/0/0 from BIOS ignored

hda: SanDisk SDCFB-512, CFA DISK drive

ide0 at 0x1f0-0x1f7,0x3f6 on irq 14

hda: attached ide-disk driver.

hda: task_no_data_intr: status=0x51 { DriveReady SeekComplete Error }

hda: task_no_data_intr: error=0x04 { DriveStatusError }

hda: 1000944 sectors (512 MB) w/1KiB Cache, CHS=993/16/63

Partition check:

hda: hda1 hda2 hda3 hda4

ide: late registration of driver.

SCSI subsystem driver Revision: 1.00

i2c-core.o: i2c core module version 2.8.7 (20040611)

i2c-dev.o: i2c /dev entries driver module version 2.8.7 (20040611)

Re: IPS 4240 Image Recovery Problem.

johnyoon75 — Sun, 27 Nov 2005 13:06:15 GMT

i2c-proc.o version 2.8.7 (20040611)

i2c-i801 version 2.8.7 (20040611)

NET4: Linux TCP/IP 1.0 for NET4.0

IP Protocols: ICMP, UDP, TCP, IGMP

IP: routing cache hash table of 16384 buckets, 128Kbytes

TCP: Hash tables configured (established 262144 bind 65536)

Linux IP multicast router 0.06 plus PIM-SM

NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.

RAMDISK: Compressed image found at block 0

Freeing initrd memory: 26526k freed

VFS: Mounted root (ext2 filesystem) readonly.

Freeing unused kernel memory: 136k freed

init started: BusyBox v1.00-rcEXT2-fs warning: checktime reached, running e2fsck is recommended

1 (2005.03.04-09:39+0000) multi-call binary

init started: BusyBox v1.00-rc1 (2005.03.04-09:39+0000) multi-call binary

Starting pid 10, console /dev/ttyS0: '/etc/init.d/rcS'

Recovery version 1.13

Started on Sun Nov 27 22:05:09 UTC 2005

IPS application recovery

Checking for previous config

Making filesystems on /dev/hda1

Copying grub to /dev/hda1

Installing grub to /dev/hda1

Making filesystems on /dev/hda2

Installing base image

Updating idsRoot/shared

Updating grub

Installing IPS components

Installed: /tmp/IPS-5.0-maj-S1.pkg

Finalizing system settings:

Creating boot.info[ OK ]

Checking for system modifications since last boot[WARNING]

Checking model identification[ OK ]

Model: IPS-4240

Checking kernel allocated memory: [ OK ]

Done...

The system is going down NOW !!

Sending SIGTERM to all processes.

Sending SIGKILL to all processes.

Please stand by while rebooting the system.

Booting system, please wait...

CISCO SYSTEMS

Embedded BIOS Version 1.0(5)0 09/14/04 12:23:35.90

Low Memory: 631 KB

High Memory: 2048 MB

PCI Device Table.

Bus Dev Func VendID DevID Class Irq

00 00 00 8086 2578 Host Bridge

00 01 00 8086 2579 PCI-to-PCI Bridge

00 03 00 8086 257B PCI-to-PCI Bridge

00 1C 00 8086 25AE PCI-to-PCI Bridge

00 1D 00 8086 25A9 Serial Bus 11

00 1D 01 8086 25AA Serial Bus 10

00 1D 04 8086 25AB System

00 1D 05 8086 25AC IRQ Controller

00 1D 07 8086 25AD Serial Bus 9

00 1E 00 8086 244E PCI-to-PCI Bridge

00 1F 00 8086 25A1 ISA Bridge

00 1F 02 8086 25A3 IDE Controller 11

00 1F 03 8086 25A4 Serial Bus 5

00 1F 05 8086 25A6 Audio 5

02 01 00 8086 1075 Ethernet 11

03 01 00 177D 0003 Encrypt/Decrypt 9

03 02 00 8086 1079 Ethernet 9

03 02 01 8086 1079 Ethernet 9

03 03 00 8086 1079 Ethernet 9

03 03 01 8086 1079 Ethernet 9

04 02 00 8086 1209 Ethernet 11

04 03 00 8086 1209 Ethernet 5

Evaluating BIOS Options ...

Launch BIOS Extension to setup ROMMON

Cisco Systems ROMMON Version (1.0(5)0) #1: Tue Sep 14 12:20:30 PDT 2004

Platform IPS-4240-K9

Management0/0

MAC Address: 000f.f775.5b7f

Use ? for help.

Re: IPS 4240 Image Recovery Problem.

marcabal — Mon, 28 Nov 2005 19:19:06 GMT

You are using the wrong file (IDS-42XX-K9-r-1.1-a-4.0-1-S37.tar.pkg)

You need to use: IPS-4240-K9-sys-4.1-4-S91.img

The Recovery Image (-r- in the filename) can only be applied using the sensor's CLI "upgrade" command.

To load an image through ROMMON you need to load a System Image file (-sys- in the filename).

The file contents of a Recovery Image (-r-) and a System Image (-sys-) of the same version are almost exactly the same image. The difference is in the extra stuff wrapped around the underlying image. The Recovery Image (-r-) files are wrapped with extra information that the CLI upgrade command uses to install the underlying image.

The System Image (-sys-) files are wrapped with extra information that the ROMMMON uses to install the underlying image.

Also be aware that 4.0(1) is not supported on the 4240. The 4240 was first supported in version 4.1(4) so you need to use the IPS-4240-K9-sys-4.1-4-S91.img image.