When trying to update the signature database from the CLI on my 4215 I get

[rowleyt]

the following:

pmaa_cids(config)# upgrade

% Incomplete command

pmaa_cids(config)# upgrade ftp:

User: pmaa

Server's IP Address: 192.168.40.98

Port[21]:

File name: IDS-sig-4.1-1-S58.rpm.pkg

Password: **********

Warning: Executing this command will apply a signature update to the application

partition.

Continue with upgrade? : yes

Error: download file does not exist: /usr/cids/idsRoot/var/updates/IDS-sig-4.1-1

-S58.rpm.pkg

pmaa_cids(config)#

I have no idea why it is looking for that path as it does not exist! The book and IDS MC tells me to make sure that the signature files are in c:\Program Files\CSCOpx\MDC\etc\ids\updates. I downloaded the file to this directory, but it does not work. Any idea what is going on here? Help!!!!!!!!!

Thanks! Tom

[marcabal]

It sounds like you are confusing 2 different methods for applying the update.

If you are using the IDS MC for managing the sensor you should use the IDS MC itself to update the sensor instead of manuall executing the CLI's upgrade command yourself.

The IDS MC has certain screens you need to navigate through to tell the IDS MC to upgrade the sensor. The IDS MC will then connect to the sensor and execute the upgrade command for you.

NOTE: When the IDS MC executes the upgrade command it will use https instead of ftp. This is because IDS MC uses a web server for sharing out these upgrade files instead of an ftp server.

The error you are receiving is because the sensor was unable to locate the upgrade file on your ftp server in the default directory of the ftp server.

The sensor eventually timed out and looked to for the file on the sensor and didn't find it. The directory in the error is the directory on the sensor itself where the file would have been downloaded to if it had not had an error during the ftp download.

If you decide to use the CLI's upgrade command instead of going through the IDS MC's windows then you need to follow the correct method for the CLI.

Place the upgrade file onto an FTP server. Now manually ftp the FTP server from your own desktop and cd to the location where you placed the file (sometimes the cd in the FTP is slightly different than if you were directly logged into the box). Now download the upgrade to you local desktop just to ensure that the file can be downloaded.

Now execute the upgrade command on the sensor's CLI. You want to use the exact same ftp server ip address, username, and password as you did when connecting from your desktop.

And instead of just putting in the filename you put in the ftp path (the one use in your ftp cd command) as part of the filename for example: "mydownloads/idsupdates/IDS-sigs-4.1-1-S58.rpm.pkg" instead of just "IDS-sig-4.1-1-S58.rpm.pkg".

By putting in the ftp directory path the sensor will understand that the file is not in the immediate home directory of the ftp user and must instead use the cd command to get to the correct directory.