The CPinfo utility


Also see:
CPinfo is a utility that collects data on a customer's machine at the time of execution. The CPinfo output file enables Check Point's support engineers to analyze customer setups from a remote location. Engineers can open the CPinfo file in a demo mode, while viewing actual customer Security Policies and objects. This allows the in-depth analysis of all of customer configuration options and environment settings.

Data Collected:

CPinfo collects the entire gateway installation directory, including $FWDIR/log/* files. Some of the other viewable information includes:
  • Routing tables.
  • Output of the netstat command.
  • Output of ipconfig /all command.
  • OS and service-patch levels.
  • CPUs and memory.
  • Output of fw ctl pstat command.
  • System message logs.

 SYNTAX:

cpinfo [-v] [-l] [-n] [-o ] [-r | -t [tablename]] [-c cma ... | -x vs]
  • -z: Output gzipped (effective with '-o' option).
  • -o: Output to a file and to to the screen.
  • -r:  Includes the registry (Windows OS - very large output). 
  • -v: Prints version information.
  • -l:  Embeds log records (very large output).
  • -n: Does not resolve network addresses (cpinfo runs faster).
  • -t: Output consists of tables only (for SecuRemote only).
  • -c: Get information about the specified CMA (for Provider-1).
  • -x: Get information about the specified VS (for VSX).


Supported Platforms

Each supported Operating System (OS) has its own version of CPinfo. CPinfo is OS-sensitive. Download the correct version according to your OS. It is always best to download the latest version of CPinfo. Using an incorrect version is useless, but harmless.

Installing CPinfo

Installing CPinfo involves downloading the proper platform's version of cpinfo, extracting the CPinfo file, and running the command to start the CPinfo script. After installing, send the CPinfo file to Check Point Technical Support via email or FTP.

You can install cpinfo on:
  1. Download the latest CPinfo utility here.

    Note: If the download is impossible, then
    1. install the package from the /sysimg/CPwrapper/linux/CPinfo/CPinfo-10-00.i386.rpm file.

    2. or extract the /linux/CPinfo/CPinfo-10-00.i386.rpm utility package from the CD.

    3. Proceed to Step 2e.

  2. Run the following commands from the directory where you put the downloaded file :

    1. Place the file in a temp directory on the target system and cd into that directory.

    2. Uninstall the current package:
      # rpm -e CPinfo-10-00

    3. Uncompress the downloaded cpinfo package:
      # gunzip cpinfo_X.tgz

    4. Untar the cpinfo tar-ball
      # tar -xvf cpinfo_X.tar

    5. Install the cpinfo utility package:
      # rpm -ivh CPinfo-10-00.i386.rpm
      Also you can use the # rpm -Uvh --force CPinfo-10-00.i386.rpm command.

    6. Verify that the cpinfo utility was installed by running the # rpm -qa | grep CP command.
      Look for the CPinfo-10-00 package.

    7. Check the build number of CPinfo utility:
      # cpvinfo /opt/CPinfo-10/bin/cpinfo

      Look for the Build Number, it is supposed to be 9110000xx

      Note:
      If for some reason the CPinfo-10-00 package does not appear in the output of the '# rpm -qa | grep CP'command, try

      1. to rebuild the rpm database by running # rpm -v --rebuilddb

      2. logout from the shell and log in.

      3. reboot the machine.

  3. Create the cpinfo output file with the command:
    # cpinfo -n -z -o /var/log/hostname.cpinfo


IPSO:

Download the latest CPinfo utility here.

Also see: sk39284 - Configuration Summary Tool

Automatic Installation
  1. Log into "Voyager" and download the package to the IPSO machine by clicking 'Configuration'.

  2. Select 'System Configuration > Packages > Install Package'.

  3. If FTP is accessible, transfer the cpinfo.tgz file to the Site Listing pane. Select the file and click 'Apply'.

  4. Make sure that the package is listed in the Unpack Package pane. Select the package, and then click the "Click here to install/upgrade /opt/packages.tgz" link.

  5. In case FTP is not accessible, copy the package to /opt/packages on the IPSO machine.

  6. Make sure that the package is listed in the Unpack Package pane. Select the package, and then click the "Click here to install/upgrade /opt/packages.tgz" link.

  7. In the Package Installation and Upgrade window, select the Install checkbox and click 'Apply'.

  8. In the Manage Packages window, verify that cpinfo is enabled.


Manual Installation
  1. On the IPSO machine, run 'clish ' command

  2. Download the cpinfo.tgz file to the IPSO machine home directory via FTP.

  3. Run add package media ftp addr user password name cpinfo_.tgz

    Note: If FTP is not accessible, download the cpinfo.tgz file to the IPSO machine /opt/packages directory and modify the add package media command accordingly.

  4. Login to shell again before running cpinfo.

  5. Create the cpinfo output file with the command: cpinfo -z -n -o hostname.cpinfo

  6. Compress the cpinfo output file, and send it to Technical Support.

  1. Download the latest CPinfo utility here.
  2. Install the downloaded package, following instructions in the Installation shield.
  3. Reboot the machine.
  1. Download the latest CPinfo utility here.


    Note:
    If the download is impossible, then

    1. Extract the /solaris2/CPinfo/CPinfo.tgz utility package from the CD.

    2. Proceed to Step 2 e.

  2. Run the following commands from the directory where you put the downloaded file :

    1. Put the downloaded package to the some directory (e.g., /var/cpinfo_X.tgz).

    2. Find and uninstall the current package by running pkgrm <package name>
      Example:

      bash-2.05# pkginfo | grep Check
      application CPfw1-R55W Check Point VPN-1/FireWall-1 NG with Application Intelligence (R55W)
      application CPinfo-R55W Check Point CPinfo NG with Application Intelligence (R55W)
      application CPrtm-R55W Check Point SmartView Monitor NG with Application Intelligence (R55W)
      application CPshrd-R55W Check Point SVN Foundation NG with Application Intelligence (R55W)

      Run
      pkgrm CPinfo-R55W

    3. Uncompress the downloaded cpinfo package:
      gunzip cpinfo_X.tgz

    4. Untar the cpinfo:
      tar -xvf cpinfo_X.tar

    5. Install the cpinfo package:
      pkgadd -d /var/

      or put the contents of the TAR file to the /var/spool/pkg directory and run the pkgadd command.
    6. The following output appears:

      The following packages are available:
      <Number> CPinfo-10 Check Point CPinfo

      • Enter the number that appears on the left of CPinfo-10: <Number>
      • Agree when asked about creating the </opt/CPinfo-RXX> directory
      • Agree to continue with the installation of <CPinfo-RXX>.
      • Quit when you get the message "Installation of <CPinfo-RXX> was successful."

      Follow the instructions on the screen.
    7. Verify that the cpinfo utility was installed by running the pkginfo | grep Check command.

      Example:
      bash-2.05# pkginfo | grep Check
      application CPfw1-R55W Check Point VPN-1/FireWall-1 NG with Application Intelligence (R55W)
      application CPinfo-10 Check Point CPinfo
      application CPrtm-R55W Check Point SmartView Monitor NG with Application Intelligence (R55W)
      application CPshrd-R55W Check Point SVN Foundation NG with Application Intelligence (R55W)
    8. Check the build number of the CPinfo utility by running the cpvinfo /opt/CPinfo-10/bin/cpinfocommand.
      Look for Build Number, it is supposed to be 9110000xx.
    9. Log out and log in to the shell before running cpinfo.


Useful commands:
Gets the version of CPinfo:
# cpinfo -v
Sends results to output file cpinfo.out (no address resolution - works faster):
# cpinfo -n -o cpinfo.out
Sends results to output file cpinfo.out and compresses the file with GZIP:
# cpinfo -z -o cpinfo.out.gz
Collects information on Provider-1 from the CMAs My_CMA and Your_CMA:
# cpinfo -c My_CMA -c Your_CMA -o cpinfo.out
Collects information on VSX from Virtual System number with VSID 5:
# cpinfo -x 5 -o cpinfo.out

6/25/2011 09:24:00 AM

Posted by MK | Filed Under | 0 Comments

Comments

0 Responses to "The CPinfo utility"

Post a Comment

Search This Blog

Blog Archive

Total Pageviews