IPS + CBAC problem

Hi guys,
I've got a strange problem here - I activated IOS IPS on both internal and external interfaces in incoming direction and also had to run CBAC on the incoming direction of the external interface. The result of all these things is that the IPS is counting connections from the internal network and it's overwriting for some reason the statistics generated by CBAC, no matter that CBAC is enabled only on the external interface in incoming direction. I'm using 1812 router with 12.4(2)XA IOS. Searched for bugs in the Bug Toolkit, nothing showed up. Here are the outputs:
interface FastEthernet0
description WAN
bandwidth 6000
ip address xxx
ip access-group 102 in
ip verify unicast reverse-path
no ip redirects
no ip unreachables
no ip proxy-arp
ip nbar protocol-discovery
ip nat outside
ip inspect Web in
ip ips IPS in
ip virtual-reassembly
ip route-cache flow
ip tcp adjust-mss 1452
duplex auto
speed auto
service-policy output TrafficPolicy-OUT
end
interface Vlan1
description LAN
bandwidth 6000
ip address xxx
ip access-group 100 in
no ip redirects
no ip unreachables
no ip proxy-arp
ip nbar protocol-discovery
ip flow egress
ip nat inside
ip ips IPS in
ip virtual-reassembly
ip route-cache flow
ip tcp adjust-mss 1452
service-policy output TrafficPolicy-IN
end
ip inspect name Web http alert on audit-trail off
sh ip inspect statistics
Packet inspection statistics [process switch:fast switch]
tcp packets: [1315:117238]
udp packets: [4681:36103]
packets: [12:54]
packets: [4747:119509]
http packets: [0:829]
Interfaces configured for inspection 1
Session creations since subsystem startup or last reset 5024
Current session counts (estab/half-open/terminating) [739:78:0]
Maxever session counts (estab/half-open/terminating) [815:96:8]
Last session created 00:00:00
Last statistic reset 00:10:08
Last session creation rate 487
Last half-open session total 78
sh ip ips statistics
Signature statistics [process switch:fast switch]
signature 3050:0 packets checked: [4:0]
signature 3173:0 packets checked: [18:0]
signature 5477:2 packets checked: [0:3]
signature 6253:0 packets checked: [0:159]
signature 6064:0 packets checked: [1:0]
signature 6056:0 packets checked: [1:0]
signature 5170:1 packets checked: [0:11]
signature 5322:1 packets checked: [0:2013]
signature 4620:0 packets checked: [0:339822]
signature 2157:1 packets checked: [1:37077]
signature 2157:0 packets checked: [0:2]
signature 1102:0 packets checked: [50:0]
Interfaces configured for ips 2
Session creations since subsystem startup or last reset 5153
Current session counts (estab/half-open/terminating) [744:72:0]
Maxever session counts (estab/half-open/terminating) [815:96:8]
Last session created 00:00:00
Last statistic reset 00:10:26
Any idea about that? I'm pretty sure it's a bug but still can't prove it. As you can see I'm monitoring only http traffic entering the internal network with CBAC (they have a single web server which for sure cannot handle that much connections). I'll be glad if you can help but anyway if we can't find the truth behind this I'll simply disable the IPS on the internal interface and I think I'll get statistics pretty closer to the reality (I need them to tune CBAC TCP Intercept values). Besides that it's pretty nasty that you can't see separate statistics for each interface but anyway - I can live with that if I manage to get accurate statistics with limited security in that case. Thanks in advance!
Best Regards,
Stefan

Latest update: I found a bug for IPS 5.0 which I think is related to my problem, but I'm using IPS v4 signatures cause I need something like 12.4(15)T for IPS 5.0 signatures so I'm not sure that's my case.
Headline IPS5.0 : Signature statistics not displayed correctly
Product IOS
Feature OTHERS Components Duplicate of
Severity 3 Severity help Status Resolved Status help
First Found-in Version 12.4(10.8)T01 All affected versions First Fixed-in Version 12.4(12.15)T Version help
Release Notes
Symptoms:
This is a CLI display bug
Conditions:
idConf/IPS 5.0 is configured on the IOS router
Workaround:
None
Further Problem Description:
None
First thing that disturbs me - it's for 5.0, second thing - sounds like IPS statistics are not correct and in my case we are talking about CBAC statistics. Any idea?

Similar Messages

  • Can IPs create   problem

    Hi,
    We have installed oracleAS 10g and our application is deployed for sms.Now we are shifting machine in new building. In new building IPs will be change.
    Please let me know, Can changed IPs create problems or 10g will work normally after change in IP.
    saqib

    You might want to check and see if your hostname or DNS information is going to change along with the IP. Any and all of these changes WILL affect the move, and all have to be dealt with - usually by reconfiguring the listener and server parameters. Changing these items is not a trivial task and expect a few bumps before you get things back up. The name resolution will be key to the clients, so don't forget to check the DNS records.

  • IPS 4240 problem

    Hi All,
    we've installed IPS 4240 since 6 months ago and everything worked fine. Then I noticed time in IPS was not correct, then in the IDM, I've changed summer time to 60 minutes offset to get the right time from NTP. then reboot the IPS, since that time users inside the network are not able to connect to internet, and basically traffic from inside to outside is blocked. But traffic from outside to inside is fine and outside users are able to hit to the web server in DMZ zone.
    any idea would be very appreciated.
    thanks
    Alex

    Changing your time offset should not cause this type of problem. Check for any non-running processes with a "sh ver", reboot your sensor and check the system log for some signs of trouble or blocking with "sh events past 01:00".
    Open a TAC case to get additional help.

  • Unique X220 IPS Screen Problem

    I couldn't find anything about this, I'm having an issue that one day just came up on the x220's ips screen. This isn't ghosting or white spots. Its hard to describe but its basically a large semi transparent rectangle on the screen that becomes darker as the screen flexes. Sometimes you can barely see it and other times it is really clear.
    Heres two pictures to hopefully illustrate the problem.
    http://imgur.com/8cDUDFH,GYh9VgZ

    you could possible try to reconnect the LCD cable and see whether that helps. If not, then it is most likely that you are in for a LCD replacement.
    Regards,
    Jin Li
    May this year, be the year of 'DO'!
    I am a volunteer, and not a paid staff of Lenovo or Microsoft

  • AIM-IPS bootloading problem

    Hi
    I have a problem to initialize AIM-IPS.
    I'm thinking it's problem with BOOTLOADER FILE.
    ROUTER#service-module ids-Sensor 0/0 session
    [Resuming connection 2 to 10.1.9.1 ... ]
    ServicesEngine MFG Failsafe boot-loader > show
    IP addr: 10.1.9.2
    Netmask: 255.255.255.0
    TFTP Server: 10.1.9.1
    GW IP adr: 10.1.9.1
    eth int: octeth1
    Number cores: 2
    Default boot: disk
    MFG Failsafe Bootloader Version: 1.1.7
    Failsafe Bootloader File: pse_mfg_failsafe_1.1.7.bin
    Default Bootloader File:
    MiniKernel: mini_kernel_1.1.7.64.bz2
    ServicesEngine MFG Failsafe boot-loader >
    I can't find DEFAULT BOOTLOADER FILE on Cisco's site.
    In documentation I found informaction:
    http://www.cisco.com/en/US/docs/security/ips/6.1/configuration/guide/cli/cli_obtaining_software.html
    Bootloader As needed bl AIM-IPS pse_aim_x.y.z.bin (where x, y, z is the release number)
    Can anybody help me ?
    Peter

    Ok a little more details:
    IPS Software: 7.0(4) E4
    I removed the zone firewall and all VPN configuration from the router and now have a 1841 with a pretty minimal config.
    With only NAT, no firewall, no routing protocols, no IPS - it runs a pretty constant 60Mbits throughput between a inside and outside host (using iperf)
    Insert the ids-service-module monitor into either (or both interfaces) and the throughput drops from 60Mbits to 20Mbits.
    Interestingly the throughput stays the same even with both FastEthernet interfaces configured for the IPS.  i.e. It never drops below 20Mbits.
    The router CPU is @ 85% (with and without the IPS enabled)
    The IPS module inspection load is constant at about 22%
    Any thoughts?
    Thanks!!

  • IPS-4270 problem with FWSM

    Hi,
    I am facing some strange issue with IPS 4270. As soon as I am connecting one interface of IPS into any free port(default configs) on 7609, after some time FWSM stops forwarding traffic for around 5 to 10 minutes. I have never seen this type of problem before. During the problem I have noticed that MSFC forwards traffic properly to other devices but traffic across FWSM halts for some time.
    FWSM Code: 4.0(1)
    IPS Code: 6.1(2)E3
    FWSM COnfigs: Multiple Context configured
    IPS Config: Only Interface Pairing configured.
    Would appreciate any feedback on this.
    Regards,
    Akhtar

    I will have to get setup to record more data, but I do know the FWSM showed a ping request and a ping reply at the "inside" interface.
    I believe my problem is related to the IOS command "firewall multiple-vlan-interfaces" which I put in place to allow IPX traffic to be brought around the FWSM. The little documentation that there is for this command, states that policy routing may need to be implemented to prevent ip packets from going around the firewall. I do not have any policy routing in place.
    I also do not have any active layer three interfaces defined for any of the vlans assigned to the firewall except the "inside" interface. So my resoning was that I did not need to be concerned about ip packets having a way around the FWSM. My suspicion is that this command and the fact that I have mls on is causing some type of a problem which results in the packet being "lost" when it needs to be going through the MSFC in the switch with the active FWSM to get to the PC. Hopefully that makes some sense.
    Do you have any idea where better documention on using the "firewall multiple-vlan-interfaces" may be, or a better explanation of all that is happening inside the switch when that command is used?
    Thanks.

  • Self-assigned IPS address problem

    Hi,
    I have Airport Extreme on G4 with OSX 10:3.9. On open networks, (such as in a coffee shop) I get on no problem. But in some homes with wireless base stations I can't get on, no matter what we try. I keep getting the message:
    "Airport has a self-assigned IP address and may not be able to connect to the Internet."
    I travel a lot and this has become a real problem. I've tried everything to try and figure out how to make my Airport receive the IP address assigned to it by the base station, but with no luck. Does anyone know the secret?
    Thanks so much!!!
    Blake

    Do you have "ask to join new networks" enabled in System Preferences / Network with the "Airport" option in the left hand pane selected, Dale? If not, try enabling it.
    Is Airport the "top" option in the left hand side of the Network panel? If not, try shifting it to the top using the "Set Service order" option (available through the "rosette" next to the "+" and "-" buttons.
    In the System preferences /Network panel, with Airport selected on the left, If you click on the "Advanced" button and select the TCP/IP tab, do you have "Using DHCP" selected in the IPv4 box and "Automatically" chosen in the IPv6 box?
    How are you going about seeking to join the networks? (the process can vary depending on the provider)
    Cheers
    Rod

  • C891 advipservices IPS license problem

    Hi forumers'
    my C891 router IOS is using 15.1 adipservices, which shoudl have IPS and misc security features
    my question is
    1. IPS license status is not installed
    i able to load the IPS signature into the box. would this causing the IPS not running on my router?
    2. ios-ips-update enable is NO
    what should i do in order to make this running? is it involving licensing issue?
    please suggest what to do in order to let IOS IPS running on the router, thanks
    Noel

    Hi Sir,
    Thanks for the reply.
    Just few more question with it, cause I'm not familiar with cisco licensing.
    question 1
    So this C890 box enable to have IPS feature on it? To make it running is it i should apply for Cisco Services for IPS trial license (Version 6.0.x and earlier) \ Cisco Services for IPS on IOS?
    question 2
    After 60 days expired of trial license, what will happen on the device IPS services?
    question 3
    tor the license type :Evaluation, what should i do to make it eligible to use?
    thanks
    Noel

  • SMTP IPS block problem

    I setup ID 3110 (suspicious mail attachment)to deny attacker inline thinking that nobody needs to send those type of attachments and it would cut down on virus's. Worked fine until today when someone internal tried to send one and the IPS blocked my internal smtp server from going to the internet. Is there a way of setting up execptions in the IPS so that my internal IP range is allways allowed access? Or is there a better way of doing this?
    Thanks for the help.

    We've seen false positives with that signature, but YMMV...they've modified it recently so maybe it's fixed.
    anyway, to answer your question...there are two ways to handle this.
    1) Use an event filter to subtract the action from the alarm. The mail server source ip would part of the criteria in the filter. You might want to consider creating an event variable for your entire DMZ and creating an event filter that subtracts any of the "deny" actions if DMZ=source. See Event Action Rules->Even Action Filters in the IDM.
    2) add the source ip or network to the "never block addresses". See Blocking->Blocking Properties in the IDM. I don't believe this works for actions that are "deny"...you'll need an event filter for those.

  • A thinkpad is no longer a Thinkpad.

    I feel like I need to make a post about it. My first thinkpad was a T43, it was really well build even with all the bad treatment, I got it for 3yrs and I got a good resale price for it. Then I got the X300, which was the best laptop I ever had. Lite, powerful, solid, I got it for 3 yrs too. Then it was a no brainer to get an other X220. I was a bit surprise about the lower price and the small screen resolution, but, hey, it's a thinkpad! so I got one. That was my first mistake.
    Here all the problems that I got with my X220 so far:
    1. The first one was the fan noise issue (FIXED with a BIOS update after few months).
    2. I got a docking station and the connectivity between the docking and the laptop is not really good. As long as you don't touch your laptop (open or close the lib for exemple, or simply type on it) you won't have problem, but if you do, it will disconnect and reconnect from the docking (making external screen issue, usb to connect and disconnect, etc.) .
    3. Screen issue, I got those white spot (I got them on my T43 after 3 yrs only, on the X220 it took 4 months). http://forums.lenovo.com/t5/X-Series-ThinkPad-Laptops/X220-IPS-display-problem-weird-bright-spot-on-...
    4. Then I got the double clicking with the trackpad (even if you press once, it's like a click, and when you press harder you get an other click (it doesn't do a double click in windows, I talking about the sound and what you feel when you press on the trackpad). To make it simple, it's nearly impossible to click with the trackpad, bad design!) There is a post about it on the forum. (Right now, instead of double click, I sometime get tripple click...). Ok nice, I can live with an external mouse....
    5. I now have the trackpad crack too (maybe it explain issue #4). Same issue as here: http://forums.lenovo.com/t5/X-Series-ThinkPad-Laptops/Chassis-Crack-on-X220-covered-under-warranty/t...
    6. I have this electrical noise in the background (you can ear it in your speaker too, but you will ear it even if you mute your laptop). Before we was not noticing it since the fan was making so much noise.... Same as here: http://forums.lenovo.com/t5/X-Series-ThinkPad-Laptops/X220-loud-electrical-buzzing-Is-this-normal/td...
    7. The lastest issue that I noticed a week or so ago, it's the lib that split in two, you can see some pics here: http://forums.lenovo.com/t5/X-Series-ThinkPad-Laptops/X220-Lid-breaking/td-p/559871
    Basically the only last good thing with that laptop is the keyboard. I still like to type on it, it's probably why I still like it even if it's all falling apart. But on the X230, they drop the keyboard, so now there is nothing that keep me with thinkpad. It's sad to say so, but thinkpad it's now something of the past. I will move on and try to find a nice laptop of a different brand. After 11months with that laptop I feel it's now the time to replace it (already), while before I was using them for 3 yrs. Also, I have move around with my T43 a lot more in the first month of it's use then this X220 during the last 11 months. Is it possible for lenovo to resell the brand of thinkpad back to IBM? It would be appreciated, thank you. 
    Now time to move on, goodbye lenovo, I miss Thinkpad.
    ThinkPad X220, I7 2620M, 8GB RAM, Intel 320 160GB SSD, IPS screen, USB 3.0, Bluethoot, Cam, Win 7 pro 64, BIOS: 1.17, Model: 4286-CTO, Fabrication date: 07/11

    Lead is most certainly not the only X220 owner with a built X220. My X220i is fantastic. It's almost a year old and looks new. I'd agree the trackpad is not that great if you don't like the stick, but you can't have it all I guess.
    Latitude 14

  • The corrections made on my DNGs in LR4 are not being acquired by BridgePS4 or Elements 10

    Set-up-
    LR4, LR3, Bridge and PS4 and Elements 10 on a MacBook Pro (OS 10.6.8), calibrated 24” HP ips monitor
    Problem-
    The corrections made on my DNGs in LR4 are not being acquired by BridgePS4 or Elements 10
    The neither the images in the filmstrip nor the DNG file when opened in PS4 or Elements Camera Raw reflect the LR4 corrections.
    Puzzling, since the Cropping and Corrections Applied Indicators are shown with the Bridge filmstrip images.
    And, when I re-Save  Bridge does acknowledge that it is doing new thumbnail extractions .
    I’ve done all I’m aware to do.
    Save in LR4 in Library Mode with filters off
    Did an Update DNG previews and metedata
    Automatically write changes to XMP is ON
    Restarted the machine
    To troubleshoot, I brought a few of those images( again DNGs)  into LR3, did corrections and saved.
    These images were rendered properly in Bridge’s filmstrip and corrections were carried into Camera Raw without issue.
    Any insights?
    Thank you in advance,
    Marvin

    LR4 defaults to using the new toning model and only ACR 6.7+ can understand the settings.  You can probably update your ACR to 6.7 for PSE10, but there is no update for the older PS-CS4 if that’s what you’re using.  The PSE10-specific update for ACR 6.7 on a Mac is here:  http://www.adobe.com/support/downloads/detail.jsp?ftpID=5382
    and Windows update is here:  http://www.adobe.com/support/downloads/detail.jsp?ftpID=5383
    The issue is that Process Version 2012 is what LR4 defaults to and this is not understood by the older ACRs. 
    Using PV2010 in LR4 would also probably work but the new toning model is one of the main reasons to use LR4 so that’s not the optimal choice.

  • Add a 2560x1414 monitor

    Hi all
    I would like add a second 27" 2560x1440 monitor to my iMac 20" (2010). The monitor is a Fujitsu P27T-6P IPS.
    the problem is that when I connect the monitor, and the Mac start to work in a dual-monitor mode, the only relolution available for the second one is 1920x1080 (2560x1440 is not listed) and the the quality is not OK (a little foggy).
    Someone can help?
    Thanks!

    What connections does the montor have, it soinds like you're connecting via HDMI or DVI which cannot do 2560*1440, Dual-Link DVI can, likely VGA & MDP can also.
    Video Card:
    Radeon HD 5670
    VRAM Type:
    GDDR3
    Details:
    This model has an ATI Radeon HD 5670 graphics processor with 512 MB of dedicated GDDR3 memory. Also see: What type of video processor is provided by the Aluminum iMac systems? Is it upgradable?
    Standard VRAM:
    512 MB
    Maximum VRAM:
    512 MB
    Built-in Display:
    21.5" 16:9 Widescreen
    Native Resolution:
    1920x1080
    Details:
    This model has a 21.5" glossy LED-backlit 16:9 widescreen TFT active matrix display with "IPS technology" and a native resolution of 1920x1080. Apple also reports a "typical" brightness of 330 cd/m2, and viewing angle of 178 degrees horizontal and 178 degrees vertical. The contrast ratio is 1000:1 and the PPI is 102. Site sponsor Mission Repair offers free diagnosis of iMac hardware problems and a 24-hour repair service for this iMac. Display replacement, keyboard replacement, a hard drive upgrade service, and more are provided.
    2nd Display Support:
    Dual/Mirroring
    2nd Max. Resolution:
    2560x1600
    Details:
    Apple reports that this model simultaneously supports the native resolution of the built-in display and up-to a 30-inch external display (2560x1600).
    http://www.everymac.com/systems/apple/imac/specs/imac-core-i5-3.6-21-inch-alumin um-mid-2010-specs.html

  • Airport Express and Internet Connection Sharing through XP

    Hi all,
    Quick question that I'm stumbling over a little.
    I'm currently staying at a relative's house using their XP desktop, so I can't change the settings too much without seeming like a discourteous guest! Their PC is set up with a USB broadband modem, and no router. What I would like to do is share that internet connection with a couple of Macbooks wirelessly.
    Internet -> USB modem -> XP desktop -> LAN cable -> Airport Express -> Wireless Macbooks
    I have added an Airport Express and connected it straight into the PC's LAN port. The AE is in bridge mode, so it does not distribute IP addresses. Instead, the PC is distributing IP addresses in the range 192.168.0.xxx. This is working without a problem, as no fewer than four laptops and an iPhone have been designated unique IPs without problem.
    Unfortunately, I don't know where to go from there, as nothing but the XP desktop will connect to the internet. Also, curiously, the XP machine can ping everything on the network, but the devices connecting to the AE wirelessly can only ping as far as the AE, and can't 'see' the XP desktop.
    I feel like I'm not far from a solution, and any suggestions would be hugely appreciated!
    Message was edited by: Sam Roberts

    Never mind! Figured it out myself. Turns out my relatives had McAffee running on their XP desktop. Disabled it, and everything works wonderfully.

  • 11g 데이타베이스 문제 원인 분석을 위한 정보 수집 방법 (동영상 포함)

    </br><li>목적 : </li></br>
    Oracle 11g 부터 Alert.log 와 trace file 은 새로운 형식으로 생성이 되며, 이는 ADR (Automatic Diagnotic Repository) 에 생성이 된다.
    본 문서에서는 Database 에 심각한 에러가 발생한 경우, ADRCI 명령어를 이용하여 에러를 확인하고 관련된 alert.log 및 trace file 을 오라클 고객지원센터로 전송하는 방법에 대해서 설명한다.
    <li>IPS 사용법 : </li></br>
    ORACLE 11g 는 problem (Database 에서 발생한 에러코드)과 incident (에러가 발생한 기록)에 관련된 trace file 들을 자동으로 수집해주는 기능을 제공한다.
    이 기능을 IPS (Incident Packaging Service) 라고 하며, 인터페이스로 GUI 환경과 ADRCI command 를 제공한다.
    Database 에 발생한 모든 심각한 에러들은 각각의 incident 를 생성한다.
    IPS 를 통해서 생성된 압축 파일은 에러에 대한 alert.log file, 모든 trace file 과 진단 정보를 포함하고 있기 때문에, 해당 error 에 대한 정보수집을 간편히 수행할 수 있다.
    Database 의 에러 확인 및 관련 file을 오라클 고객지원센터로 전송하는 방법 :
    1. Database 에서 발생한 심각한 에러 발생
    SQL> select * from atab;
    select * from atab
    ERROR at line 1:
    ORA-01578: ORACLE data block corrupted (file # 6, block # 11)
    ORA-01110: data file 6: '/opt/oracle/oradata/db11g/tt.dbf'
    2. ADR과 Alert.log 에서 에러를 확인한다.
    ADR에서 에러를 확인하기 위하여 11g 환경의 OS prompt에서 adrci를 실행한다.
    *%] adrci*
    ADR 홈 경로를 확인한다.
    adrci> show home
    --> 모든 ADR HOME 을 보여준다. 확인하고자 하는 ADR HOME 을 지정한다.
    adrci> set homepath <ADR HOME>
    에러 코드를 problem 이라고 하며, 이를 확인하기 위해서 다음을 실행한다.
    adrci> show problem
    ADR Home = /opt/oracle/diag/rdbms/db11g/db11g:
    PROBLEM_ID PROBLEM_KEY LAST_INCIDENT LASTINC_TIME
    1 ORA 1578 18104 2009-06-01 22:06:19.501207 +10:00
    1 rows fetched
    Database 에 문제가 되고 있는 에러 코드를 확인할 수 있다.
    이 중, 분석이 필요한 에러코드에 대하여 압축파일을 생성할 수 있다.
    3. 분석이 필요한 에러의 발생 기록을 확인한다.
    에러의 발생 기록들은 Incident 라고 하며, 모든 incident 는 Alert.log 에 기록된다.
    각각의 incident 는 유일한 incident ID 를 가진다.
    ADR 에서 'show incident' 명령을 수행하여 에러 발생 기록을 확인할 수가 있으며,
    에러에 대한 problem key를 확인하기 위해서는 'show problem' 을 수행한다.
    adrci> show incident -p "problem_key='ORA 1578'"
    ADR Home = /opt/oracle/diag/rdbms/db11g/db11g:
    INCIDENT_ID PROBLEM_KEY CREATE_TIME
    18147 ORA 1578 2009-06-01 22:02:08.805002 +10:00
    동일한 problem에 대한 incidnet는 여러 건이 발생할 수 있다.
    4. IPS (incident packaging service) 를 수행하여 alert.log , trace file 및 diag 정보에 대한 압축 파일 생성.
    압축 파일을 생성하기 위해서는 특정 경로를 포함한 'IPS pack' 명령을 사용한다.
    다음의 예는 incident 관련 file들을 /tmp directory 에 압축 파일로 생성하는 방법이다.
    adrci> ips pack incident 18147 in /tmp
    Generated package 9 in file /tmp/ORA1578_20090602113045_COM_1.zip, mode complete
    IPS pack 의 예제)
    ips pack problem 100 in /tmp
    -- problem id 100 에 관련된 trace file 들을 /tmp directory 에 압축파일로 생성한다.
    ips pack incident 6439 in /tmp
    -- incident id 6439 에 관련된 trace file 들을 /tmp directory 에 압축파일로 생성한다.
    ips pack problemkey "ORA 1578"
    -- problem_key 'ORA 1578' 를 가지는 모든 problem 에 관련된 trace file 들을 현재 directory 에 압축파일로 생성한다.
    ips pack seconds 8
    -- 최근 8 초 이내에 발생한 incident 에 대한 압축 파일을 생성한다.
    ips pack time '2007-05-01 10:00:00.00' to '2007-05-01 23:00:00.00'
    -- 특정 시간대의 incident 에 대한 압축파일을 생성한다.
    'IPS pack' 명령은 'IPC create' 와 'IPS generage' 명령을 일괄적으로 수행할 수 있는 명령이다.
    이와 같이 생성된 압축 파일을 SR (service request)을 통해 오라클 고객지원센터로 전송하면 된다.
    동영상 참조 :
    IPS package 를 생성하는 방법 (동영상 자료 02:30)</br>
    (My Oracle Support 접속 필요)
    참고자료 :
    DOC ID : 443529.1
    11g Quick Steps to Package and Send Critical Error Diagnostic Information to Support (Video)
    DOC ID: 738732.1
    ADR Different Methods to Create IPS Package

  • Replace of X230 screen without voiding warranty

    Hi,
    My X230 suffers same issues here: 
    http://forums.lenovo.com/t5/X-Series-ThinkPad-Laptops/X220-IPS-display-problem-weird-bright-spot-on-...
    Too bad that Lenovo refuses to replace my screen. I wonder if I can order the screen myself and get it replaced. 
    - Is it damage the warranty of the remaining parts? If yes, then how can I do?
    Thanks.
    /Q

    Hi,
    Welcome to Lenovo Community Forums!
    I’m sorry to hear that you had display issues in your Lenovo ThinkPad X230 and the warranty didn’t cover the replacement of the screen.
    Normally, replacing or upgrading customer replaceable parts like HDD or memory will not affect the system warranty.
    Replacing parts like screen on your own may void the system warranty. I would recommend you to visit the nearest authorized Lenovo Service center to get the screen replaced so that your warranty remains intact.
    Best regards,
    Mithun.
    Did someone help you today? Press the star on the left to thank them with a Kudo!
    If you find a post helpful and it answers your question, please mark it as an "Accepted Solution"! This will help the rest of the Community with similar issues identify the verified solution and benefit from it.
    Follow @LenovoForums on Twitter!

Maybe you are looking for

  • Sending encrypted emails from the iPad is not working

    I can't get sending encrypted emails working on my iPad3 running iOS 8.0.2 Let me explain what I did: 1. I created S/MIME certificates for 2 email addresses on my iMac in Keychain Access. One email address exists only on the iMac the other only on th

  • Trouble Installing Windows 8.1 on Yosemite

    I am having trouble installing Windows 8.1 using the Bootcamp utility on OS X Yosemite. I downloaded the ISO file for 64 bit 8.1 from Microsoft and put it onto an 8gb USB drive using Bootcamp. My Macbook Pro is an early 2011 (MacBookPro8,2) and is cu

  • 5230 - Problem with theme

    I installed a theme with contact thumbnails in black in my SD card. When I tried to switch to other themes, the contact thumbnails remained black, didn't change with theme. I tried to remove the theme. It's the same. Even if I removed the SD card and

  • ITunes thinks my iPod Video can't handle video!

    I have a 60G 5th Generation iPod video. I have subscribed to a Podcast that includes video postings. Although these play fine in iTunes, they won't transfer them to my iPod. Originally, iTunes claimed my iPod isn't compatible with video! These days I

  • CSS or ACE

    Hi, We would like to load blance  Sharepoint app on two servers in two datacentres.I would like to know which applince is better for this purposes. CSS 11501/11503 series or ACE 4710 Regards.