Stuck importing running-config.xml

Reply
Highlighted
L1 Bithead

Stuck importing running-config.xml

I'm trying to import a PA-5020 config so that I can export the config to the Panorama syntax.

But the progress bar stops at: "File:running-config.xml Phase 8 Referencing Groups"

Memory and CPU goes very high for less than a minute and then drops to almost zero.
The start button doesn't became available so I can't export the config.

As far as I can see the security rules, NATs, routes, objects are all there.

Is there somewhere a log to debug this problem? Or is anyone got into this kind of problem?

Thanks

Tags (2)
L7 Applicator

Re: Stuck importing running-config.xml

Hi,

Try to check the output error log on https://<youmt3ipaddress>/debug

L1 Bithead

Re: Stuck importing running-config.xml

This is the output:

[Tue Apr 28 15:40:01.982050 2015] [:error] [pid 2588] [client 192.168.157.1:54979] PHP Fatal error: Allowed memory size of 1048576000 bytes exhausted (tried to allocate 632 bytes) in /var/www/html/libs/shared.php on line 2556, referer: https://192.168.157.130/

Already increased the VM memory but I cannot access the .php config to modify the value.

BTW, nice to know this debug page.

L7 Applicator

Re: Stuck importing running-config.xml

I will check how to auto increment the memory for the next hotfix release.

L1 Bithead

Re: Stuck importing running-config.xml

So, I found a way to edit the php.ini file and edit the memory_limit parameter to 512M. But it just took a little longer to get the same error.
Then troubleshooting further, I tried to split the xml to import multiple files and not just a single one.

But I'm struggling with the syntax, I guess...

Is this supposed to work?

<?xml version="1.0"?>

<config version="6.1.0" urldb="paloaltonetworks">

  <devices>

    <entry name="localhost.localdomain">

  <vsys>

  <entry name="vsys1">

  <service>

  <entry name="tcp-www">

   <protocol>

  <tcp>

   <port>80</port>

  </tcp>

   </protocol>

  </entry>

  <entry name="tcp-https">

   <protocol>

  <tcp>

   <port>443</port>

  </tcp>

   </protocol>

  </entry>

  </service>

  <service-group>

   <entry name="sg-www">

  <members>

   <member>tcp-www</member>

   <member>tcp-https</member>

  </members>

   </entry>

  </service-group>

  </entry>

  </vsys>

    </entry>

  </devices>

</config>

It imported with no errors, the debug shows nothing, but also does not populate the objects. Am I missing something?

L7 Applicator

Re: Stuck importing running-config.xml

Hi,

I found an issue importing your configuration. I have fixed and I will publish the hotfix today. Thanks

L1 Bithead

Re: Stuck importing running-config.xml

Hello,


Just updated the MT3 and the results are the following:

:smileycheck: The small xml above it's now working

:smileyx: The big file (+15k lines) still stops at: "File:running-config.xml Phase 8 Referencing Groups"
and it gives the error on debug page:

[Wed Apr 29 15:03:09.087935 2015] [:error] [pid 2550] [client 192.168.157.1:49958] PHP Fatal error:  Allowed memory size of 2097152000 bytes exhausted (tried to allocate 576 bytes) in /var/www/html/libs/shared.php on line 2556, referer: https://192.168.157.130/

:smileyalert: I also notice that every time I remove a project the debug page floods with this type of message:

[Wed Apr 29 15:05:37.381678 2015] [:error] [pid 2714] [client 192.168.157.1:50331] PHP Warning: mysqli::mysqli(): (HY000/1049): Unknown database 'project00' in /var/www/html/libs/projectdb.php on line 8, referer: https://192.168.157.130/

I'm importing partial configs and...so far so good :smileyhappy:

L7 Applicator

Re: Stuck importing running-config.xml

Hi,

Looks its a memory leak produced by some endloop. Would you be able to share your config with us to study? we cannot reproduce it. Feel free to send it if you are ok to fwmigrate@paloaltonetworks.com

Thanks

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!