SourceFIre FS4000 setup

john.streit — Tue, 12 Mar 2019 12:47:45 GMT

I have a new FS4000 appliance that just got powered up.

I have connected a KVM to it and ran the network script but it seems like it isn't working (see below). I can SSH to the unit but the GUI doesn't load

admin@Sourcefire3D:~$ sudo /usr/local/sf/bin/configure-network
Password:

Do you wish to configure IPv4? (y or n) y

Management IP address? [10.x.x.90]
Management netmask? [255.255.252.0]
Management default gateway? [10.x.x.2]

Management IP address?         10.x.x.90
Management netmask?            255.255.252.0
Management default gateway?    10.x.x.2

Are these settings correct? (y or n) y

Do you wish to configure IPv6? (y or n) n

Updated network configuration.
Unable to parse port from iftool line: eth2 90:E2:BA:8A:93:68 ixgbe standard (none) 0000:03:00.0 8086 10fb 8086 000c 0 nolink noautoneg Unknown/Unknown Unknown "10000baseT/Full noautoneg" "10000baseT/Full noautoneg" down ethernet None at /usr/local/sf/lib/perl/5.10.1/SF/System/Privileged.pm line 3753.
Unable to parse port from iftool line: eth3 90:E2:BA:8A:93:69 ixgbe standard (none) 0000:03:00.1 8086 10fb 8086 000c 0 nolink noautoneg Unknown/Unknown Unknown "10000baseT/Full noautoneg" "10000baseT/Full noautoneg" down ethernet None at /usr/local/sf/lib/perl/5.10.1/SF/System/Privileged.pm line 3753.
Unable to access DetectionEngine::bulkLoad
Can't call method "prepare" on an undefined value at /usr/local/sf/lib/perl/5.10.1/SF/EODataHandler/Default.pm line 107.

Printing stack trace:
        called from /usr/lib/perl5/site_perl/5.10.1/Error.pm (150)
        called from /usr/lib/perl5/site_perl/5.10.1/Error.pm (396)
        called from /usr/local/sf/lib/perl/5.10.1/SF/EOHandler.pm (1659)
        called from /usr/local/sf/lib/perl/5.10.1/SF/DetectionEngine.pm (1573)
        called from /usr/local/sf/lib/perl/5.10.1/SF/DetectionEngine.pm (1618)
        called from /usr/local/sf/lib/perl/5.10.1/SF/DetectionEngine.pm (363)
        called from /usr/local/sf/lib/perl/5.10.1/SF/DetectionEngine.pm (1701)
        called from /usr/local/sf/lib/perl/5.10.1/SF/NetworkConf/NetworkSettings.pm (683)
        called from /usr/local/sf/lib/perl/5.10.1/SF/NetworkConf/NetworkSettings.pm (828)
        called from /usr/local/sf/bin/configure-network (488)
        called from /usr/local/sf/bin/configure-network (237)
        called from /usr/local/sf/bin/configure-network (240)

admin@Sourcefire3D:

Hi, With these logs it seems

Aastha Bhardwaj — Fri, 23 Oct 2015 17:48:42 GMT

Hi,

With these logs it seems that the database is corrupted. If it is a new deployment i will suggest you to reimage the device .

Refer : http://www.cisco.com/c/en/us/td/docs/security/firesight/5404/relnotes/FireSIGHT-System-Release-Notes-version5404-and-5413.html

Reasons for corruption of database could be because of hard reboot of device ungracefully.

Regards,

Aastha

Rate if that helps!!!

topic SourceFIre FS4000 setup in Network Security

SourceFIre FS4000 setup

Hi, With these logs it seems