CPINFO hanging on splat R60

[zyz101z]

We recently upgraded our Management server and logserver from Splat R55 to Splat R60. We noticed a couple days ago when we try to run a CPINFO it gets a couple lines in and just sits there. We have tried letting it run for as long as 6 hours. But nothing. It is utalizing 100% of one of our processors so its atleast trying to do something. Anyone run into any issues like this? Any suggestions?

[kva.kva]

Did you install HFA? I found next - https://secureknowledge.checkpoint.c....do?id=sk31518


"Symptoms

Security administrator runs the CPinfo application in a VPN-1 NGX R60 environment with any R60 HFA installed. CPinfo crashes.

Cause

The CPINFO application is incorrectly allocating memory.

Solution

Check Point support can offer a HotFix (new CPinfo package) to resolve this issue. To open a service request, go to SecureTrak, or contact Worldwide Technical Assistance Centers at:

Americas: 817-606-6600 or International: +972-3-6115100

Applies To:

Any HFA of VPN-1 Pro/Express NGX R60
Any HotFix of VPN-1 Pro/Express NGX R60"

I didn't find cpinfo for NGX on CP site, so i think you need to consult with support.

[zyz101z]

Ya, I have an open ticket with checkpoint and Nokia. But I seem to be getting no where fast. We are on the latest HFA but as far as a new cpinfo you would think checkpoint would of suggested that by now on our ticket. I will be sure to ask them about it. Thanks.

zyz101z

[captain-midnight]

Sorry to spoil the party, but I'm currently supporting SPLAT boxes in 'live' and have some developement/test boxes - running NGX R60 HFA03 - cpinfo command works on these installs.

It issues the odd comment that it can't find the occasional file but I presume this is more to do with the command being able to detail the whole check point software range wide.

For ref, cpinfo was issued on 2x different VPN1-Pro and mgmt combined SPLAT boxes. Possibly explains why check point support are having some 'extended thinking time'.

Phil.

[tpearson]

I had this issue with my SPLAT boxes, when i would run a CPINFO it would hang on adding info from the fw.adtlog. Turns out that file was over 200MB. Support told me to issue a cpstop; delete (or move) all contets of $FWDIR/log; issue a CPSTART. After that I was able to get the CPINFO command to finish.

Tim

[abusharif]

experiencing same troubles :<
irritating like hell.........

anyone had any progress on this one or got an answer from Checkpoint?

edit: This is on splat/r60 hfa04

[NickBrandson]

The KB has been updated.

This problem was fixed. The fix is included in the latest CPinfo packages, available for download from NGX Support & Troubleshooting Tools page.

Installation Procedure:


Remove the existing CPinfo package, using the pkgrm utility. From the command line, issue the following command:

# pkgrm <directory path to the CPinfo package>


Gunzip and untar the downloaded cpinfo package.


Add the package, using the pkgadd utility. From the command line, issue the following command (when issuing this command, you must be located in the same directory in which the downloaded CPinfo package was placed):

# pkgadd -d .


Verify that the pkgadd utility completed successfully. The displayed results of the command execution will indicate whether or not the pkgadd utility successfully completed.


Run the new CPinfo tool.


If you encounter problems during the process, use your own backup and contact the Check Point Technical Assistance Center (TAC).
To open a service request, go to SecureTrak, or contact Worldwide Technical Assistance Centers at:

Americas: 972-444-6600 or International: +972-3-6115100