09-28-2021 02:02 AM
Please help, after update Snort Rule 2021-09-22-001-vrt
Log
=========SNORT APPLY=========
Sep 24 03:48:59 Finished Export for AccessControl
Sep 24 03:48:59 Starting Export for ARC
Sep 24 03:48:59 Finished Export for ARC
Sep 24 03:48:59 Starting Export for Beaker
Sep 24 03:48:59 Finished Export for Beaker
Sep 24 03:48:59 Starting Export for Geolocation
Sep 24 03:48:59 Finished Export for Geolocation
Sep 24 03:48:59 Starting Export for Onbox
Sep 24 03:48:59 Finished Export for Onbox
Sep 24 03:48:59 Starting Export for SFDataCorrelator
Sep 24 03:48:59 Finished Export for SFDataCorrelator
Sep 24 03:48:59 Starting Export for SFTunnel
Sep 24 03:48:59 Finished Export for SFTunnel
Sep 24 03:48:59 Starting Export for SensorClustering
Sep 24 03:48:59 Finished Export for SensorClustering
Sep 24 03:48:59 Starting Export for StateSharing
Sep 24 03:48:59 Finished Export for StateSharing
Sep 24 03:48:59 Starting Export for Snort
Sep 24 03:48:59 copytree failed: (/ngfw/usr/bin/rsync -a -L -K -O --no-owner --no-group --no-perms --safe-links /ngfw/var/cisco/deploy/sandbox/modulepack-pkg/so_rules/850cbf45fbf37966f62bc41780c050c3 /ngfw/var/cisco/deploy/sandbox/exported-files/var/sf/detection_engines/6e9f3a88-fb89-11e9-b0e5-212d508a897f/so_rules) with rcode 23
stdout:
stderr: rsync: link_stat "/ngfw/var/cisco/deploy/sandbox/modulepack-pkg/so_rules/850cbf45fbf37966f62bc41780c050c3" failed: No such file or directory (2)
rsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1189) [sender=3.1.3]
========= CLI APPLY =========
========= INFRASTRUCTURE MESSAGES =========
errorString : Sep 24 03:48:59 Finished Export for AccessControl
Sep 24 03:48:59 Starting Export for ARC
Sep 24 03:48:59 Finished Export for ARC
Sep 24 03:48:59 Starting Export for Beaker
Sep 24 03:48:59 Finished Export for Beaker
Sep 24 03:48:59 Starting Export for Geolocation
Sep 24 03:48:59 Finished Export for Geolocation
Sep 24 03:48:59 Starting Export for Onbox
Sep 24 03:48:59 Finished Export for Onbox
Sep 24 03:48:59 Starting Export for SFDataCorrelator
Sep 24 03:48:59 Finished Export for SFDataCorrelator
Sep 24 03:48:59 Starting Export for SFTunnel
Sep 24 03:48:59 Finished Export for SFTunnel
Sep 24 03:48:59 Starting Export for SensorClustering
Sep 24 03:48:59 Finished Export for SensorClustering
Sep 24 03:48:59 Starting Export for StateSharing
Sep 24 03:48:59 Finished Export for StateSharing
Sep 24 03:48:59 Starting Export for Snort
Sep 24 03:48:59 copytree failed: (/ngfw/usr/bin/rsync -a -L -K -O --no-owner --no-group --no-perms --safe-links /ngfw/var/cisco/deploy/sandbox/modulepack-pkg/so_rules/850cbf45fbf37966f62bc41780c050c3 /ngfw/var/cisco/deploy/sandbox/exported-files/var/sf/detection_engines/6e9f3a88-fb89-11e9-b0e5-212d508a897f/so_rules) with rcode 23
stdout:
stderr: rsync: link_stat "/ngfw/var/cisco/deploy/sandbox/modulepack-pkg/so_rules/850cbf45fbf37966f62bc41780c050c3" failed: No such file or directory (2)
rsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1189) [sender=3.1.3]
PrepareExportAppConfigFailed: : Please refer action_queue.log file for more details;
errorCode : device_failure_configuration
DeploymentException : {"errStackTrace":{"-file":"/ngfw/usr/local/sf/bin/policy_apply.pl","-stacktrace":"Sep 24 03:48:59 copytree failed: (/ngfw/usr/bin/rsync -a -L -K -O --no-owner --no-group --no-perms --safe-links /ngfw/var/cisco/deploy/sandbox/modulepack-pkg/so_rules/850cbf45fbf37966f62bc41780c050c3 /ngfw/var/cisco/deploy/sandbox/exported-files/var/sf/detection_engines/6e9f3a88-fb89-11e9-b0e5-212d508a897f/so_rules) with rcode 23\nstdout: \nstderr: rsync: link_stat \"/ngfw/var/cisco/deploy/sandbox/modulepack-pkg/so_rules/850cbf45fbf37966f62bc41780c050c3\" failed: No such file or directory (2)\nrsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1189) [sender=3.1.3]\n\n at /ngfw/usr/local/sf/bin/policy_apply.pl line 195\n","-text":"Sep 24 03:49:05 Sep 24 03:48:59 copytree failed: (/ngfw/usr/bin/rsync -a -L -K -O --no-owner --no-group --no-perms --safe-links /ngfw/var/cisco/deploy/sandbox/modulepack-pkg/so_rules/850cbf45fbf37966f62bc41780c050c3 /ngfw/var/cisco/deploy/sandbox/exported-files/var/sf/detection_engines/6e9f3a88-fb89-11e9-b0e5-212d508a897f/so_rules) with rcode 23\nstdout: \nstderr: rsync: link_stat \"/ngfw/var/cisco/deploy/sandbox/modulepack-pkg/so_rules/850cbf45fbf37966f62bc41780c050c3\" failed: No such file or directory (2)\nrsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1189) [sender=3.1.3]\n\n\n","-package":"main","-line":195},"status":{"error_message":"Sep 24 03:48:59 copytree failed: (/ngfw/usr/bin/rsync -a -L -K -O --no-owner --no-group --no-perms --safe-links /ngfw/var/cisco/deploy/sandbox/modulepack-pkg/so_rules/850cbf45fbf37966f62bc41780c050c3 /ngfw/var/cisco/deploy/sandbox/exported-files/var/sf/detection_engines/6e9f3a88-fb89-11e9-b0e5-212d508a897f/so_rules) with rcode 23\nstdout: \nstderr: rsync: link_stat \"/ngfw/var/cisco/deploy/sandbox/modulepack-pkg/so_rules/850cbf45fbf37966f62bc41780c050c3\" failed: No such file or directory (2)\nrsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1189) [sender=3.1.3]\n\n","device_error":{"csmArgsList":[{"value":"Sep 24 03:48:59 copytree failed: (/ngfw/usr/bin/rsync -a -L -K -O --no-owner --no-group --no-perms --safe-links /ngfw/var/cisco/deploy/sandbox/modulepack-pkg/so_rules/850cbf45fbf37966f62bc41780c050c3 /ngfw/var/cisco/deploy/sandbox/exported-files/var/sf/detection_engines/6e9f3a88-fb89-11e9-b0e5-212d508a897f/so_rules) with rcode 23\nstdout: \nstderr: rsync: link_stat \"/ngfw/var/cisco/deploy/sandbox/modulepack-pkg/so_rules/850cbf45fbf37966f62bc41780c050c3\" failed: No such file or directory (2)\nrsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1189) [sender=3.1.3]\n\n","key":"DeploymentError"}],"error_code":"device_failure_configuration"}}}
posArguments : DeploymentError;;;Sep 24 03:48:59 copytree failed: (/ngfw/usr/bin/rsync -a -L -K -O --no-owner --no-group --no-perms --safe-links /ngfw/var/cisco/deploy/sandbox/modulepack-pkg/so_rules/850cbf45fbf37966f62bc41780c050c3 /ngfw/var/cisco/deploy/sandbox/exported-files/var/sf/detection_engines/6e9f3a88-fb89-11e9-b0e5-212d5,
================================================================
Transaction ID: 94489283403
Device UUID: ccd5023c-fb88-11e9-8817-e312508a897f
09-28-2021 03:52 AM
If you are getting a failure in subsequent deployments as well I would suggest you to contact TAC as they can revert to the old SRU update, and then help you re-install this one, as I'm suspecting this to be an issue due to SRU, which is causing the deploy to fail.
Regards,
Chakshu
Do rate helpful posts!
09-28-2021 04:55 AM
is it possible to apply the configuration without this error, can't change configuration ftd
09-28-2021 12:15 PM
I do see the new SRU came out today Cisco_Firepower_SRU-2021-09-28-001-vrt.sh.REL.tar, try installing that on FMC and then push a deployment.
Regards,
Chakshu
Do rate helpful posts!
09-28-2021 08:26 PM
Thank you!
SRU-2021-09-28-001-vrt.sh solved a problem
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide