IDS-4215 issues

aamit — Sun, 10 Mar 2019 11:58:00 GMT

I acquired this unit and I am having issues with it, I did the recovery and I set the new password and it is keep going back to it, how do I get out of it?

CISCO SYSTEMS IDS-4215
Embedded BIOS Version 5.1.7 03/02/04 11:20:35.01
Compiled by dnshep
Evaluating Run Options ...
Check for Valid Disk Image
GRUB Loading stage1.5.

GRUB loading, please wait...

GRUB version 0.91 (632K lower / 523264K upper memory)

-------------------------------------------------------------------
0: Cisco IDS (vmlinuz-2.4.26-IDS-smp-bigphys}
1: Cisco IDS Recovery
-------------------------------------------------------------------

      Use the ^ and v keys to select which entry is highlighted.
      Press enter to boot the selected OS, 'e' to edit the
      commands before booting, 'a' to modify the kernel arguments
      before booting, or 'c' for a command-line.

Entry 0 will be booted automatically in 1 seconds.
Booting 'Cisco IDS (vmlinuz-2.4.26-IDS-smp-bigphys}'

root (hd0,0)
Filesystem type is ext2fs, partition type 0x83
kernel (hd0,0)/boot/vmlinuz-2.4.26-IDS-smp-bigphys ro root=/dev/hdb1 hda=flash
console=ttyS0 bigphysarea=16384
[Linux-bzImage, setup=0x1400, size=0x11b282]

Linux version 2.4.26-IDS-smp-bigphys (root@phoenix_build_master) (gcc version 2.96 20000731 (Red Hat Linux 7.3 2.96-112)) #2 SMP Thu Aug 18 11:03:13 CDT 2005
BIOS-provided physical RAM map:
BIOS-e820: 0000000000000000 - 000000000009e000 (usable)
BIOS-e820: 000000000009e000 - 00000000000a0000 (reserved)
BIOS-e820: 00000000000e0000 - 0000000000100000 (reserved)
BIOS-e820: 0000000000100000 - 0000000020000000 (usable)
BIOS-e820: 00000000fff00000 - 0000000100000000 (reserved)
0MB HIGHMEM available.
512MB LOWMEM available.
On node 0 totalpages: 131072
zone(0): 4096 pages.
zone(1): 126976 pages.
zone(2): 0 pages.
DMI not present.
ACPI: Unable to locate RSDP
Kernel command line: ro root=/dev/hdb1 hda=flash console=ttyS0 bigphysarea=16384
ide_setup: hda=flash
Local APIC disabled by BIOS -- reenabling.
Found and enabled local APIC!
Initializing CPU#0
Detected 845.655 MHz processor.
Console: colour dummy device 80x25
Calibrating delay loop... 1684.27 BogoMIPS
Memory: 449240k/524288k available (1621k kernel code, 74656k reserved, 639k data, 136k init, 0k highmem)
Dentry cache hash table entries: 65536 (order: 7, 524288 bytes)
Inode cache hash table entries: 32768 (order: 6, 262144 bytes)
Mount cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer cache hash table entries: 32768 (order: 5, 131072 bytes)
Page-cache hash table entries: 131072 (order: 7, 524288 bytes)
CPU: L1 I cache: 16K, L1 D cache: 16K
CPU: L2 cache: 128K
Intel machine check architecture supported.
Intel machine check reporting enabled on CPU#0.
Enabling fast FPU save and restore... done.
Enabling unmasked SIMD FPU exception support... done.
Checking 'hlt' instruction... OK.
POSIX conformance testing by UNIFIX
mtrr: v1.40 (20010327) Richard Gooch (rgooch@atnf.csiro.au)
mtrr: detected mtrr type: Intel
CPU: L1 I cache: 16K, L1 D cache: 16K
CPU: L2 cache: 128K
Intel machine check reporting enabled on CPU#0.
CPU0: Intel Celeron (Coppermine) stepping 0a
per-CPU timeslice cutoff: 365.62 usecs.
SMP motherboard not detected.
enabled ExtINT on CPU#0
ESR value before enabling vector: 00000000
ESR value after enabling vector: 00000000
Using local APIC timer interrupts.
calibrating APIC timer ...
..... CPU clock speed is 845.6568 MHz.
..... host bus clock speed is 99.4889 MHz.
cpu: 0, clocks: 994889, slice: 497444
CPU0<T0:994880,T1:497424,D:12,S:497444,C:994889>
Waiting on wait_init_idle (map = 0x0)
All processors have done init_idle
PCI: PCI BIOS revision 2.10 entry at 0xff6a9, last bus=1
PCI: Using configuration type 1
PCI: Probing PCI hardware
PCI: Probing PCI hardware (bus 00)
Limiting direct PCI/PCI transfers.
isapnp: Scanning for PnP cards...
isapnp: No Plug & Play device found
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
bigphysarea: Allocated 16384 pages at 0xc1606000.
Journalled Block Device driver loaded
pty: 2048 Unix98 ptys configured
keyboard: Timeout - AT keyboard not present?(ed)
keyboard: Timeout - AT keyboard not present?(f4)
Serial driver version 5.05c (2001-07-08) with MANY_PORTS MULTIPORT SHARE_IRQ SERIAL_PCI ISAPNP enabled
ttyS00 at 0x03f8 (irq = 4) is a 16550A
ttyS01 at 0x02f8 (irq = 3) is a 16550A
Real Time Clock Driver v1.10f
RAMDISK driver initialized: 16 RAM disks of 4096K size 1024 blocksize
loop: loaded (max 8 devices)
lpc: version 0.1 (Aug 18 2005)
Uniform Multi-Platform E-IDE driver Revision: 7.00beta4-2.4
ide: Assuming 33MHz system bus speed for PIO modes; override with idebus=xx
PIIX4: IDE controller at PCI slot 00:07.1
PIIX4: chipset revision 1
PIIX4: not 100% native mode: will probe irqs later
    ide0: BM-DMA at 0xf800-0xf807, BIOS settings: hda:pio, hdb:pio
    ide1: BM-DMA at 0xf808-0xf80f, BIOS settings: hdc:pio, hdd:pio
hda: SanDisk SDCFB-256, CFA DISK drive
hdb: IC25N020ATCS04-0, ATA DISK drive
hda: Disabling (U)DMA for SanDisk SDCFB-256
blk: queue c03bf1a8, I/O limit 4095Mb (mask 0xffffffff)
ide0 at 0x1f0-0x1f7,0x3f6 on irq 14
hda: attached ide-disk driver.
hda: task_no_data_intr: status=0x51 { DriveReady SeekComplete Error }
hda: task_no_data_intr: error=0x04 { DriveStatusError }
hda: 501760 sectors (257 MB) w/1KiB Cache, CHS=497/16/63
hdb: attached ide-disk driver.
hdb: host protected area => 1
hdb: 39070080 sectors (20004 MB) w/1768KiB Cache, CHS=2432/255/63, UDMA(33)
Partition check:
hda: hda1 hda2 hda3
hdb: hdb1 hdb2 hdb3 hdb4
ide: late registration of driver.
SCSI subsystem driver Revision: 1.00
i2c-core.o: i2c core module version 2.8.7 (20040611)
i2c-dev.o: i2c /dev entries driver module version 2.8.7 (20040611)
i2c-proc.o version 2.8.7 (20040611)
i2c-i801 version 2.8.7 (20040611)
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 4096 buckets, 32Kbytes
TCP: Hash tables configured (established 131072 bind 65536)
Linux IP multicast router 0.06 plus PIM-SM
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
kjournald starting. Commit interval 5 seconds
EXT3-fs: mounted filesystem with ordered data mode.
VFS: Mounted root (ext3 filesystem) readonly.
Freeing unused kernel memory: 136k freed
INIT: version 2.84 booting
                Welcome to CIDS v4.1(1)S47 (Phoenix)
Mounting proc filesystem: [ OK ]
Configuring kernel parameters: [ OK ]
Setting clock (localtime): Mon Apr 19 19:14:53 UTC 2010 [ OK ]
Activating swap partitions: [ OK ]
Setting hostname sensor: [ OK ]
modprobe: Can't open dependencies file /lib/modules/2.4.26-IDS-smp-bigphys/modules.dep (No such file or directory)
Checking root filesystem
/dev/hdb1: clean, 27334/83520 files, 56775/166666 blocks
[/sbin/fsck.ext3 (1) -- /] fsck.ext3 -a /dev/hdb1
[ OK ]
Remounting root filesystem in read-write mode: [ OK ]
Finding module dependencies: depmod: Can't open /lib/modules/2.4.26-IDS-smp-bigphys/modules.dep for writing
[FAILED]
Checking filesystems
/dev/hdb3: clean, 12/2008 files, 1300/8032 blocks
/dev/hda1: clean, 33/2656 files, 4184/10584 blocks
/dev/hdb4: clean, 32/2280320 files, 80505/4558443 blocks
/dev/hda3: clean, 20/58232 files, 84949/232848 blocks
Checking all file systems.
[/sbin/fsck.ext3 (1) -- /bootmnt] fsck.ext3 -a /dev/hda1
[/sbin/fsck.ext3 (2) -- /usr/cids/idsRoot/shared] fsck.ext3 -a /dev/hdb3
[/sbin/fsck.ext3 (2) -- /usr/cids/idsRoot/var] fsck.ext3 -a /dev/hdb4
[/sbin/fsck.ext3 (2) -- /mnt/recovery] fsck.ext3 -a /dev/hda3
[ OK ]
Mounting local filesystems: [ OK ]
Enabling local filesystem quotas: [ OK ]
Enabling swap space: [ OK ]
Entering non-interactive startup
Setting network parameters: [ OK ]
Bringing up loopback interface: [ OK ]
modprobe: Can't open dependencies file /lib/modules/2.4.26-IDS-smp-bigphys/modules.dep (No such file or directory)
Bringing up interface eth1: [ OK ]
Starting system logger: [ OK ]
Starting kernel logger: [ OK ]
Loading keymap: [ OK ]
Loading system font: [ OK ]
Initializing random number generator: [ OK ]
Checking kernel allocated memory: [ OK ]
No XL card present
Load cidmodcap: Warning: kernel-module version mismatch
        /lib/modules/cid/cidmodcap.o was compiled for kernel version 2.4.18-5smpbigphys
        while this kernel is version 2.4.26-IDS-smp-bigphys
/lib/modules/cid/cidmodcap.o: unresolved symbol register_chrdev_Rsmp_0450333d
/lib/modules/cid/cidmodcap.o:
Hint: You are trying to load a module without a GPL compatible license
      and it has unresolved symbols. Contact the module supplier for
      assistance, only they can help you.

[FAILED]
Creating boot.info[ OK ]
Checking for system modifications since last boot[WARNING]
Checking model identification[ OK ]
Model: IDS-4215
Error: mainApp did not start
Starting sshd: [ OK ]
Starting xinetd: [ OK ]
Starting crond: [ OK ]
Starting anacron: [ OK ]

login: cisco
Password:
You are required to change your password immediately (password aged)
Changing password for cisco
(current) UNIX password:
New password:
Retype new password:
***NOTICE***
This product contains cryptographic features and is subject to United States
and local country laws governing import, export, transfer and use. Delivery
of Cisco cryptographic products does not imply third-party authority to import,
export, distribute or use encryption. Importers, exporters, distributors and
users
sensor login: cisco
Password:
***NOTICE***
This product contains cryptographic features and is subject to United States
and local country laws governing import, export, transfer and use. Delivery
of Cisco cryptographic products does not imply third-party authority to import,
export, distribute or use encryption. Importers, exporters, distributors and
users are responsible for compliance with U.S. and local country laws. By using
this product you agree to comply with applicable laws and regulations. If you
are unable to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto

If you require further assistance please contact us by sending email to
export@cisco.com.

sensor login:

Re: IDS-4215 issues

rhermes — Tue, 20 Apr 2010 18:37:51 GMT

Since you've done the recovery I assumeyou already tried powering the unit down and back up.

This is an odd problem I havn't seen before, but somtimes the sensors get currupt and need a full reimage to get back to normal.

I would download the latest 4215 image and TFTP it into your sensor in ROMMON.

http://www.cisco.com/en/US/partner/docs/security/ips/6.0/installation/guide/hwImage.html#wp1030874

- Bob

Re: IDS-4215 issues

phyxoz — Mon, 26 Apr 2010 20:30:43 GMT

Reimage. Especially if you "acquired" this unit. Who knows what was done to the config. Save yourself the headaches later and just do a full re-image.

Re: IDS-4215 issues

aamit — Mon, 26 Apr 2010 20:36:37 GMT

Full re-imaged worked, thank you very much

topic IDS-4215 issues in Network Security

IDS-4215 issues

Re: IDS-4215 issues

Re: IDS-4215 issues

Re: IDS-4215 issues