ironport C300 partition log full

[jcmaire01]

hello,

I have this message :

The Critical message is: Log Error: Subscription gui_logs: Log partition is full.

Version: 7.5.1-028

log partition is full and I can't access to remote admin, no ftp, no ssh, no telnet

the machine is stopped, I can't do nothing.....

Have a solution ?

or how to restore the default factory of this ironport C300 ?

Thanks

JC

:( 

[Robert Sherwin]

Sadly the C300 is past End-of-Life, and to add to it - so is 7.5.1-028.  So, it is not a supportable appliance at all.

You would have to get it back to operational order and then need to FTP to the appliance in order to mdel the gui_logs in that directory...

example:

robert@groot:$ ftp 192.168.1.189
Connected to 192.168.1.189.
220 mail.example.com Cisco FTP server (V10.0.0) ready
Name (192.168.1.189:robert): admin
331 Password required.
Password:
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> cd gui_logs
250 CWD command successful.
ftp> ls
200 PORT command successful.
150 Opening ASCII mode data connection for file list
-rw-rw---- 2 root log 92467 Jun 14 08:29 gui.@20160525T101101.c
-rw-rw---- 1 root log 49864 Apr 26 10:37 gui.@20160426T102434.s
-rw-rw---- 1 root log 1438 Apr 26 10:57 gui.@20160426T104050.s
-rw-rw---- 1 root log 846 Apr 26 11:30 gui.@20160426T110337.s
-rw-rw---- 1 root log 178944 May 25 10:01 gui.@20160426T113625.s
-rw-rw---- 2 root log 92467 Jun 14 08:29 gui.current
226 Transfer Complete
ftp> mdel gui*

This would just be an example from my virtual ESA --- but would need to be done against your C300.

Can you hook up direct serial or console to the appliance?

http://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118401-technote-cs-00.html

If you wanted to reset to factory - again, need access of some kind, and then follow:

http://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118392-technote-csa-00.html

[jcmaire01]

Hello Robert,

Thanks for your response. 

But this is THE problem : we can't access to the appliance !!

we can't connect by serial or console

we have NO access and log in :(

This is the log when we connect with serial :

admin
Password:
Last login: Wed Jun  8 16:13:33 on cuad0
Copyright (c) 2001-2011, Cisco Systems, Inc.

AsyncOS 7.5.1 for IronPort C300 build 028

Welcome to the IronPort C300 Messaging Gateway(tm) Appliance

/data: create/symlink failed, no inodes free
Traceback (most recent call last):
  File "/usr/build/iproot/ap/ipoe/ipoe/bootstrap.py", line 55, in <module>
  File "/data/lib/python2.6_7_i386_nothr/runpy.py", line 128, in _run_module_as_                                                                                   main
    "__main__", fname, loader, pkg_name)
  File "/data/lib/python2.6_7_i386_nothr/runpy.py", line 34, in _run_code
    exec code in run_globals
  File "build/bdist.freebsd-7.2-RELEASE-p2-i386/egg/cli.py", line 21, in <module                                                                                   >
  File "/usr/build/iproot/ap/ipoe/ipoe/imputil.py", line 246, in load_module
    # also handle its fromlist (and reliably use __ispkg__).
  File "build/bdist.freebsd-7.2-RELEASE-p2-i386/egg/alert.py", line 11, in <modu                                                                                   le>
  File "/usr/build/iproot/ap/ipoe/ipoe/imputil.py", line 246, in load_module
    # also handle its fromlist (and reliably use __ispkg__).
  File "build/bdist.freebsd-7.2-RELEASE-p2-i386/egg/tags.py", line 8, in <module >
  File "/usr/build/iproot/ap/ipoe/ipoe/imputil.py", line 246, in load_module
    # also handle its fromlist (and reliably use __ispkg__).
  File "/bdist.freebsd-7.2-RELEASE-p2-i386/egg/sysctl.py", line 7, in <module>
  File "/bdist.freebsd-7.2-RELEASE-p2-i386/egg/sysctl.py", line 4, in __bootstra                                                                                   p__
  File "/data/lib/python2.6_7_i386_nothr/site-packages/setuptools-0.6c9-py2.6_7_i386_nothr.egg/pkg_resources.py", line 843, in resource_filename
    self, resource_name
  File "/data/lib/python2.6_7_i386_nothr/site-packages/setuptools-0.6c9-py2.6_7_ i386_nothr.egg/pkg_resources.py", line 1319, in get_resource_filename
    self._extract_resource(manager, self._eager_to_zip(name))
  File "/data/lib/python2.6_7_i386_nothr/site-packages/setuptools-0.6c9-py2.6_7_ i386_nothr.egg/pkg_resources.py", line 1374, in _extract_resource
    manager.extraction_error()  # report a user-friendly error
  File "/data/lib/python2.6_7_i386_nothr/site-packages/setuptools-0.6c9-py2.6_7_ i386_nothr.egg/pkg_resources.py", line 889, in extraction_error
    raise err
pkg_resources.ExtractionError: Can't extract file(s) to egg cache

The following error occurred while trying to extract file(s) to the Python egg
cache:

  [Errno 28] No space left on device: '/data/lib/python-eggs/admin/phoebe_extensions-1.0.0_000-py2.6_7_i386_nothr-freebsd-7.2-RELEASE-p2-i386.ipoe-tmp/tmp0SJt0M                                                                                   .$extract'

The Python egg cache directory is currently set to:

  /data/lib/python-eggs/admin

Perhaps your account does not have write access to this directory?  You can
change the cache directory by setting the PYTHON_EGG_CACHE environment
variable to point to an accessible directory.

If you have another idea.....

thank you very much

Jean-Christophe

[Robert Sherwin]

If you will - please email direct, and will see what further we can provide for you.

robsherw@cisco.com

-Robert

[jcmaire01]

Hi Robert

thanks for you time.

let me know if you receive my last emails :(

when you reset the appliance, it restore on 7.1.5-017

but I need the 7.5.1-028 to import my configuration file

and I can't upgrade : Lost connection to server.

and there is no xml file on the appliance now : I can't save it

and I lost my ip 184, I can not put in more than 32....
and it is on Pending Activation on Feature Keys...

in short my C300 is not correct config :(

thanks
Jean-Christophe

[Robert Sherwin]

Replying back off thread!  :-)

-Robert

[Robert Sherwin]

This was resolved, updating forums threat with final resolution.

[*Please keep in mind that C300 is past End-of-Life (EoL).]

Working 1:1 with Jean-Christophe, in order to clear space and regain access to the data, we were able to remove the old AsyncOS repositories on the appliance in order to clear the space needed and regain operation to the appliance.  

For everyday customers running older appliances and versions - please be sure to keep up-to-date on EoL information that is published:

http://www.cisco.com/c/en/us/products/security/email-security-appliance/eos-eol-notice-listing.html

-Robert