Re: upgrading IDS 4 to IPS 5

From: Muhammad Nasim (muhammad.nasim@gmail.com)
Date: Tue Feb 27 2007 - 14:45:11 ART


Thanks for the reply but it is still not clear to me as many of the people
tried this before but no one was able to do so .

Can you guide us where you find this million dollar information : )

Sasa Milic <smilic2@pexim.co.yu> wrote

Hi,

I've did it long ago, haven't written procedure, but it goes something like
this.

1. You've faken IDS by modifying /etc/ids_functions file. Similar file (with

the same name) is inside archive file, and upgrade procedure (shell script)
extract it first, run it, and find that your platform is not supported. So,
you have to fake it there.

2. Now, only way to get there is from root. Once you try to do upgrade
regular way, archive file is saved onto disk, somewhere under ids directory
(/usr/ids/..., or something like that).

3. Somewhere under same ids folder is folder with upgrade procedures. There
is script that will extract setup script from archive, and run it. Setup
script will extract ids_functions, run it, and decide what next.

4. What you'll have to do is modify extracted setup script to not extract
ids_functions file again and again, and then modify already extracted
ids_functions in the same way you've modified /etc/ids_functions (don't copy

old file over new, they are not the same, but have similar code in it).

5. Now you have modified setup and modified ids_functions. Run setup, it
will run already extracted and modified ids_functions, will consider that
your platform is ok, will extract remaining files from archive, and do the
upgrade.

Hope this helps.

Regards,

On 2/27/07, Muhammad Nasim <muhammad.nasim@gmail.com> wrote:
>
> Dear Sasa Milic ,
>
> Can you further explain how able to upgrade to version 5.0
>
> Thanks
>
> On 2/26/07, Sasa Milic < smilic2@pexim.co.yu> wrote:
> >
> > I've upgraded franked IDS 4.1 running under vmware to 5.0, but 5.0 is
> > running busybox linux and doesn't have vmnet drivers. Didn't have time
> > to
> > compile busybox kernel and drivers ...
> >
> > Regards,
> > Sasa
> >
> > ----- Original Message -----
> > From: "Edward Norton" < doubleccie@yahoo.com>
> > To: <ccielab@groupstudy.com>; <security@groupstudy.com >
> > Sent: Saturday, February 24, 2007 1:01 PM
> > Subject: upgrading IDS 4 to IPS 5
> >
> >
> > > folks
> > > I have franken IDS 4.1 running on PC and working fine .
> > > now since Cisco lab is offering ver 5.x
> > >
> > > I wonder if it is possible to upgrade it on the PC ..is there anyone
> > > managed to get this work ..if yes ..can someone send the steps ?
> > >
> > > thanks in advance
> > >
> > >
> > >
> > > ---------------------------------
> > > Get your own web address.
> > > Have a HUGE year through Yahoo! Small Business.
> > >
> > >
> > _______________________________________________________________________
> > > Subscription information may be found at:
> > > http://www.groupstudy.com/list/CCIELab.html
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
> >
>
>
>
> --
> Muhammad Nasim
> Network Engineer
> SISCOM
> Saudi Arabia

-- 
Muhammad Nasim
Network Engineer
SISCOM
Saudi Arabia


This archive was generated by hypermail 2.1.4 : Thu Mar 01 2007 - 07:38:48 ART