- CheckMates
- :
- Products
- :
- Quantum
- :
- Management
- :
- Show Package Tool stops with "severe error"
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Show Package Tool stops with "severe error"
I already used the showpackage tool (see sk 120342)several times, and it worked fine. (Management R81 T44, Tool version 2.06)
However, now it stops with
"[1/10/22 12:34 PM com.checkpoint.mgmt_api.examples.ShowPackageTool.logoutReportAndExit()INFO]: Script stopped running due to severe error!"
Is there any chance to find out the reason WHY it stops?
(or, what can I do to get it runnung again?)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
What do api.log and api.csv files say for the matter?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
There is no api.log. api.csv contains lines like these:
2022-01-11,06:10:10 +0100,java-api-wrapper,127.0.0.1,127.0.0.1,show-access-rulebase,PASSED,31
2022-01-11,06:11:23 +0100,java-api-wrapper,127.0.0.1,127.0.0.1,show-objects,PASSED,44
All lines have "PASSED".
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Just curious, what is exact flag you are using? I have same version/JHF in lab, so could check for you.
Andy
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I didn't use any flags. Just starting /opt/CPsuite-R81/fw1/scripts/web_api_show_package.sh, which contains
java -jar $MDS_FWDIR/api/samples/lib/web_api_show_package-jar-with-dependencies.jar "$@"
I tried to use -s, but this didn't give any additional information
I'm logged in as admin in expert mode.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I ran it in R81 lab and used -k flag, worked just fine, no errors. Can you try with -k?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Besides RemoteAccessPolicy, we have two other policies on that mgmt server. A small one for some small CP appliances, and a big policy for the main firewall. -k works fine for the small policy, but the "Script stopped running due to severe error!" message is given with the big policy. Maybe it is too big to handle. It includes several inline layers.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
There is definitely logic in what you said, though, I do remember doing this once for customer with more than 500 rules and different layers and worked fine, in R80.40, with -k flag.
Lets see if someone maybe from R&D can confirm. Found below, but does not apply to R81:
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
just an additional info: our policy has grown very large during the last weeks, because we are doing a complete network redesign
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Definitely could be an issue...
