cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1712
Views
0
Helpful
1
Replies

SourceFIre FS4000 setup

john.streit
Level 1
Level 1

I have a new FS4000 appliance that just got powered up.

I have connected a KVM to it and ran the network script but it seems like it isn't working (see below).  I can SSH to the unit but the GUI doesn't load

 

admin@Sourcefire3D:~$ sudo /usr/local/sf/bin/configure-network
Password:

Do you wish to configure IPv4? (y or n) y

Management IP address? [10.x.x.90]
Management netmask? [255.255.252.0]
Management default gateway? [10.x.x.2]

Management IP address?         10.x.x.90      
Management netmask?            255.255.252.0      
Management default gateway?    10.x.x.2       

Are these settings correct? (y or n) y

Do you wish to configure IPv6? (y or n) n

Updated network configuration.
Unable to parse port from iftool line:  eth2 90:E2:BA:8A:93:68 ixgbe standard (none) 0000:03:00.0 8086 10fb 8086 000c 0 nolink noautoneg Unknown/Unknown Unknown "10000baseT/Full noautoneg" "10000baseT/Full noautoneg" down ethernet None  at /usr/local/sf/lib/perl/5.10.1/SF/System/Privileged.pm line 3753.
Unable to parse port from iftool line:  eth3 90:E2:BA:8A:93:69 ixgbe standard (none) 0000:03:00.1 8086 10fb 8086 000c 0 nolink noautoneg Unknown/Unknown Unknown "10000baseT/Full noautoneg" "10000baseT/Full noautoneg" down ethernet None  at /usr/local/sf/lib/perl/5.10.1/SF/System/Privileged.pm line 3753.
Unable to access DetectionEngine::bulkLoad
Can't call method "prepare" on an undefined value at /usr/local/sf/lib/perl/5.10.1/SF/EODataHandler/Default.pm line 107.

Printing stack trace:
        called from /usr/lib/perl5/site_perl/5.10.1/Error.pm (150)
        called from /usr/lib/perl5/site_perl/5.10.1/Error.pm (396)
        called from /usr/local/sf/lib/perl/5.10.1/SF/EOHandler.pm (1659)
        called from /usr/local/sf/lib/perl/5.10.1/SF/DetectionEngine.pm (1573)
        called from /usr/local/sf/lib/perl/5.10.1/SF/DetectionEngine.pm (1618)
        called from /usr/local/sf/lib/perl/5.10.1/SF/DetectionEngine.pm (363)
        called from /usr/local/sf/lib/perl/5.10.1/SF/DetectionEngine.pm (1701)
        called from /usr/local/sf/lib/perl/5.10.1/SF/NetworkConf/NetworkSettings.pm (683)
        called from /usr/local/sf/lib/perl/5.10.1/SF/NetworkConf/NetworkSettings.pm (828)
        called from /usr/local/sf/bin/configure-network (488)
        called from /usr/local/sf/bin/configure-network (237)
        called from /usr/local/sf/bin/configure-network (240)

admin@Sourcefire3D:

1 Reply 1

Aastha Bhardwaj
Cisco Employee
Cisco Employee

Hi,

 

With these logs it seems that the database is corrupted. If it is a new deployment i will suggest you to reimage the device .

Refer : http://www.cisco.com/c/en/us/td/docs/security/firesight/5404/relnotes/FireSIGHT-System-Release-Notes-version5404-and-5413.html

Reasons for corruption of database could be because of hard reboot of device ungracefully.

Regards,

Aastha

Rate if that helps!!!

 

 

 

Review Cisco Networking for a $25 gift card