topic Unable to upgrade IPS 4240 signature from S637 to S640 in Network Security

Unable to upgrade IPS 4240 signature from S637 to S640

Dulal Ray — Sun, 10 Mar 2019 12:39:20 GMT

Hi friends,

Thanks in advance.

I am unable to upgrade IPS 4240 to the latest signature version showing error

"Cannot parse the current config of the component "signatureDefination" and instance "sig 0"

attaching tech-support...

Please suggest if any issue...

Unable to upgrade IPS 4240 signature from S637 to S640

sawgupta — Thu, 12 Apr 2012 11:44:11 GMT

Looks like you are hitting the bug CSCty41356.

You may want to contact Cisco TAC for this.

Regards,

Sawan Gupta

Unable to upgrade IPS 4240 signature from S637 to S640

Dulal Ray — Thu, 12 Apr 2012 14:47:03 GMT

Hi,

as per the show tech i troubleshoot and analysed in various forum found parse error could occur only when signature update modify some signature which they wouldnot allow to change....hence it generates an error................

Similarly it shows the error "error sending sensorApp control transaction " during upgrade.................

Any evidence about IpDualNode non-zero error ???

Thanks in advance....

Unable to upgrade IPS 4240 signature from S637 to S640

sawgupta — Fri, 13 Apr 2012 03:42:15 GMT

main.log shows IpDualNode errors which suggests, it is the same bug as mentioned above.

Regards,

Sawan Gupta

Unable to upgrade IPS 4240 signature from S637 to S640

Dulal Ray — Fri, 13 Apr 2012 06:41:47 GMT

Thanks Sawan,

Sawan any special procedure u use to scan through show tech-support or any error reporting document.

if yes, please suggest which will help us for further troubleshooting......

Unable to upgrade IPS 4240 signature from S637 to S640

marcabal — Fri, 13 Apr 2012 17:08:37 GMT

You are likely hitting a new bug CSCtz29196. It was just written up today, and may not be available on the external Cisco.com page yet.

The bug is "Unable to upgrade signature package to S639 or S640 when 3255/0 is tuned".

Signature 3255/0 was modified in S639 in a way which may not be compatible with previous edits made to this signature.

This will be corrected in the next Signature Update.

I have not looked at your show tech output, but there may still be other issues on your sensor that Sawan is referring to.

Sawan is likely looking at errors in the main.log portion of your show tech output.

Unable to upgrade IPS 4240 signature from S637 to S640

Dulal Ray — Sun, 15 Apr 2012 12:23:46 GMT

Thanks dear I was also expecting some sig. level issue but was not sure on that same issue was also observed on S550 and above.

Please confirm bug ID when cisco will release it for public reference.....

Thanks in advance...