Nokia backup integrity

HI,

We have a Nokia ipso 4.1 running NGXR62 firewall module with
a huge
rulebase...we are stuck with some issues in backup
"manual and scheduled"

Whenever we run a manual or scheduled backup we would like
to

1)Know which process is invoked and how can we trace its
success to know a
succesful backup has been done locally

(does it ever show up in ps-aux ???? or /var/log/messages on
succesful
backup...we can see the transfer of backup BUT not local
bakup
success/failure)

2)Is there any way to check the integrity of this backup
without doing a
live restore


Any pointers help on this woudl be greatly appreciated

Thanks

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Hi Gurus,

Can anyone pitch in and help me on this

Thanks and appreciate any pointers

On 8/25/07, john maverick <deepblue25gmail.com> wrote:
>
> HI,
>
> We have a Nokia ipso 4.1 running NGXR62 firewall module
with a huge
> rulebase...we are stuck with some issues in backup
"manual and scheduled"
>
> Whenever we run a manual or scheduled backup we would
like to
>
> 1)Know which process is invoked and how can we trace
its success to know a
> succesful backup has been done locally
>
> (does it ever show up in ps-aux ???? or
/var/log/messages on succesful
> backup...we can see the transfer of backup BUT not
local bakup
> success/failure)
>
> 2)Is there any way to check the integrity of this
backup without doing a
> live restore
>
>
> Any pointers help on this woudl be greatly appreciated
>
> Thanks
>
>
>
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

john maverick wrote:

>> 2)Is there any way to check the integrity of this
backup without doing a
>> live restore

do a restore in a splat (assuming you're doing
upgrade_export). if that 
works, then you're set.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

HI Thanks
I was looking from a Nokia backup and  restore point of view
(Ipso+cp
backup)
I would imagine if i
 Know which process is invoked and how can we trace its
success to know a
succesful backup has been done locally
 ps-aux | grep backup never shows up anything during manual
or time of
scheduled  backup

and i also understand scheduled backup DOES NOT show up in
cron ???? so my
crontab -l also drew a zip


(does it ever show up in ps-aux ???? or /var/log/messages on
succesful
backup...we can see the transfer of backup BUT not local
bakup
success/failure)

Any pointers appreciated


On 8/26/07, sin <sinimacandi.net> wrote:
>
> john maverick wrote:
>
> >> 2)Is there any way to check the integrity of
this backup without doing
> a
> >> live restore
>
> do a restore in a splat (assuming you're doing
upgrade_export). if that
> works, then you're set.
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

john maverick a écrit :
> HI Thanks
> I was looking from a Nokia backup and  restore point of
view (Ipso+cp
> backup)
> I would imagine if i
>  Know which process is invoked and how can we trace its
success to know a
> succesful backup has been done locally
>  ps-aux | grep backup never shows up anything during
manual or time of
> scheduled  backup
>
> and i also understand scheduled backup DOES NOT show up
in cron ???? so my
> crontab -l also drew a zip
>
>
> (does it ever show up in ps-aux ???? or
/var/log/messages on succesful
> backup...we can see the transfer of backup BUT not
local bakup
> success/failure)
>
> Any pointers appreciated
>   
Hello,

the best is to search throuch the tcl script that is invoked
by voyager 
to show the backup and restore page.
I had a look at a 4.1, and the script invoked is /etc/backup
with some 
flags.

if you do this, you'll probably find that the script invoked
is :
/web/cgi-bin/backup_restore.tcl.

and if you search through this script for the backup
command, here it is :
/etc/backup -f /var/etc/sched_backup_vars.sh

/etc/backup is a simple script, so you can read it, modify
it (at your 
own risks), or run it in debug mode via sh -x
to see the details.

that means that the /var/etc/sched_backup_vars.sh is first
populated 
with some entries
from the form in the html, then the backup is launched.

the backup default directory is /var/backup.

I guess from this point you can go on and run your own
tests.
> On 8/26/07, sin <sinimacandi.net> wrote:
>   
>> john maverick wrote:
>>
>>     
>>>> 2)Is there any way to check the integrity
of this backup without doing
>>>>         
>> a
>>     
>>>> live restore
>>>>         
>> do a restore in a splat (assuming you're doing
upgrade_export). if that
>> works, then you're set.
>>     

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Thanks ...i had  spotted this sh earlier BUT mine IP560 does
not have any
process in the script that i can fingerprint thru ps -auxw
at the time of
activity(which is one requirement and still is one)

and the other one "backup succesful"..well an
earlier post thru
Pierre(Thanks a lot)
logger -p local0.notice 'backup complete'  is a logical
help...is sure hope
that works without breaking anything  cos always cautious
about the
production box

Thanks a lot and still have not got to understanding why a
scheduled backup
one monthly never shows up in crontab -l ...so definitely
the cron has
nothing to do with a scheduled backup...and the crontab run
as "admin"

Thanks a lot


On 8/27/07, pkc_mls <pkc_mlsyahoo.fr> wrote:
>
> john maverick a écrit :
> > HI Thanks
> > I was looking from a Nokia backup and  restore
point of view (Ipso+cp
> > backup)
> > I would imagine if i
> >  Know which process is invoked and how can we
trace its success to know
> a
> > succesful backup has been done locally
> >  ps-aux | grep backup never shows up anything
during manual or time of
> > scheduled  backup
> >
> > and i also understand scheduled backup DOES NOT
show up in cron ???? so
> my
> > crontab -l also drew a zip
> >
> >
> > (does it ever show up in ps-aux ???? or
/var/log/messages on succesful
> > backup...we can see the transfer of backup BUT not
local bakup
> > success/failure)
> >
> > Any pointers appreciated
> >
> Hello,
>
> the best is to search throuch the tcl script that is
invoked by voyager
> to show the backup and restore page.
> I had a look at a 4.1, and the script invoked is
/etc/backup with some
> flags.
>
> if you do this, you'll probably find that the script
invoked is :
> /web/cgi-bin/backup_restore.tcl.
>
> and if you search through this script for the backup
command, here it is :
> /etc/backup -f /var/etc/sched_backup_vars.sh
>
> /etc/backup is a simple script, so you can read it,
modify it (at your
> own risks), or run it in debug mode via sh -x
> to see the details.
>
> that means that the /var/etc/sched_backup_vars.sh is
first populated
> with some entries
> from the form in the html, then the backup is
launched.
>
> the backup default directory is /var/backup.
>
> I guess from this point you can go on and run your own
tests.
> > On 8/26/07, sin <sinimacandi.net> wrote:
> >
> >> john maverick wrote:
> >>
> >>
> >>>> 2)Is there any way to check the
integrity of this backup without
> doing
> >>>>
> >> a
> >>
> >>>> live restore
> >>>>
> >> do a restore in a splat (assuming you're doing
upgrade_export). if that
> >> works, then you're set.
> >>
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

john maverick a écrit :
> Thanks ...i had  spotted this sh earlier BUT mine IP560
does not have any
> process in the script that i can fingerprint thru ps
-auxw at the time of
> activity(which is one requirement and still is one)
>
> and the other one "backup succesful"..well an
earlier post thru
> Pierre(Thanks a lot)
> logger -p local0.notice 'backup complete'  is a logical
help...is sure hope
> that works without breaking anything  cos always
cautious about the
> production box
>
> Thanks a lot and still have not got to understanding
why a scheduled backup
> one monthly never shows up in crontab -l ...so
definitely the cron has
> nothing to do with a scheduled backup...and the crontab
run as "admin"
>
> Thanks a lot
>   
nokia made some choices for IPSO, and they didn't choose
simplicity for 
the config.

the crontab is set via /config/active.
you have a /etc/crontab root crontab file.
this file calls 4 other files :
/etc/hourly
/etc/daily
/etc/weekly
/etc/monthly
and (I suppose) the cron entry for the scheduled backup is
in one of 
those files when you st the scheduled backup option.
that's why the crontab -l won't even show you the backup.
I also guess the crontab refers to /var/cron/tabs directory
and not to 
/etc/crontab (don't ask me why).

the best if you still have questions about voyager and IPSO
is to start 
with the cgi (which in most cases is a tcl script, not that
hard to read),
then check which command runs from this script, then use the
command 
directly without the voyager.

hope this'll help.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Thanks a lot...appreciate pointers
regards


On 8/27/07, pkc_mls <pkc_mlsyahoo.fr> wrote:
>
> john maverick a écrit :
> > Thanks ...i had  spotted this sh earlier BUT mine
IP560 does not have
> any
> > process in the script that i can fingerprint thru
ps -auxw at the time
> of
> > activity(which is one requirement and still is
one)
> >
> > and the other one "backup
succesful"..well an earlier post thru
> > Pierre(Thanks a lot)
> > logger -p local0.notice 'backup complete'  is a
logical help...is sure
> hope
> > that works without breaking anything  cos always
cautious about the
> > production box
> >
> > Thanks a lot and still have not got to
understanding why a scheduled
> backup
> > one monthly never shows up in crontab -l ...so
definitely the cron has
> > nothing to do with a scheduled backup...and the
crontab run as "admin"
> >
> > Thanks a lot
> >
> nokia made some choices for IPSO, and they didn't
choose simplicity for
> the config.
>
> the crontab is set via /config/active.
> you have a /etc/crontab root crontab file.
> this file calls 4 other files :
> /etc/hourly
> /etc/daily
> /etc/weekly
> /etc/monthly
> and (I suppose) the cron entry for the scheduled backup
is in one of
> those files when you st the scheduled backup option.
> that's why the crontab -l won't even show you the
backup.
> I also guess the crontab refers to /var/cron/tabs
directory and not to
> /etc/crontab (don't ask me why).
>
> the best if you still have questions about voyager and
IPSO is to start
> with the cgi (which in most cases is a tcl script, not
that hard to read),
> then check which command runs from this script, then
use the command
> directly without the voyager.
>
> hope this'll help.
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

On Mon, 27 Aug 2007, pkc_mls wrote:

> nokia made some choices for IPSO, and they didn't
choose simplicity for the 
> config.
>
> the crontab is set via /config/active.
> you have a /etc/crontab root crontab file.
> this file calls 4 other files :
> /etc/hourly
> /etc/daily
> /etc/weekly
> /etc/monthly
> and (I suppose) the cron entry for the scheduled backup
is in one of those 
> files when you st the scheduled backup option.
> that's why the crontab -l won't even show you the
backup.
> I also guess the crontab refers to /var/cron/tabs
directory and not to 
> /etc/crontab (don't ask me why).

Simple. /var/ is about the only place not mounted in RO
mode.

Hugo.

-- 
 	hvdkooijvanderkooij.org	http://hugo.vanderkooij.
org/
 	    This message is using 100% recycled electrons.

 	Some men see computers as they are and say
"Windows"
 	I use computers with Linux and say "Why
Windows?"
 	(Thanks JFK, for this quote of George Bernard Shaw.)

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================