4.1>5.0 IPS upgrade failure

[5mlattimore]

4235 ids meets all requirements.

Upgrade repeatedly fails with following error message:

##BEGIN SNIP##

Broadcast message from root (Thu May 26 17:39:20 2005):

Applying update IPS-K9-maj-5.0-1-S149.

Shutting down all CIDS processes. All connections will be terminated.

The system will be rebooted upon completion of the update.

Broadcast message from root (Thu May 26 17:39:29 2005):

Error converting config. Install aborted.

Error: CIDS 5.0 Validation Error: "service Host" Config Item:"summerTimeZoneNam

e" Reason:The string , *, does not match the required pattern

Error was: -Commit current config-: Validate error for the component "host" and

the instance ""

/summertime-option/recurring/summertime-zone-name/ -- the value is empty and has

no default

###END SNIP##

>Sh ver output>

Application Partition:

Cisco Systems Intrusion Detection Sensor, Version 4.1(4)S138

OS Version 2.4.18-5smpbigphys

Platform: IDS-4235

Using 841523200 out of 921522176 bytes of available memory (91% usage)

Using 2.4G out of 15G bytes of available disk space (17% usage)

MainApp 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500

unning

AnalysisEngine 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500

unning

Authentication 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500

unning

Logger 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500

unning

NetworkAccess 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500

unning

TransactionSource 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500

unning

WebServer 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500

unning

CLI 2004_Apr_15_15.03 (Release) 2004-04-15T15:11:59-0500

Upgrade History:

* IDS-sig-4.1-4-S114 14:48:53 UTC Tue Mar 01 2005

IDS-sig-4.1-4-S138.rpm.pkg 15:14:30 UTC Tue Mar 01 2005

Recovery Partition Version 1.2 - 4.1(1)S47

any ideas?

[gfullage · Accepted solution]

V5 is a lot pickier about correct configurations than v4 was, therefore some things that v4 let slide will produce an error when upgrading to v5. Obviously there is something in your timezone settings that it allowed in v4, but v5 doesn't like.

Do a "sho conf" on your v4 sensor and near the top (just after the IP addresses), check everything under the "timeParams" section. My guess is you've defined some parts in here, but at the very least you haven't defined a summertime zone name. You can define everthing properly under here by running "setup" from the CLI, and when it asks if you want to "Modify system clock settings" answer yes and work your way through the prompts. Then try the upgrade again and let us know how you go.

If you still get the error, send us a cut/paste of your timeParams section and we'll see what's going on.

[5mlattimore]

That seemed to do it. When I went through the setup, instead of accepting the default * for dst I simply named it "DST" amd it liked that

The upgrade succeeded and now I am loading the IDM . It seems to take a while even though I increased the java heap to 256 per the dialogue request box,but it looks a great deal different.

Thanks for your help with this

By the way, are there any links to documentation on the new 5.0 IDM and it features?