Home Page | Skip to Navigation | Skip to Content | Skip to Search | Skip to Footer
 Support Center > Search Results > SecureKnowledge Details
Support Center
 Print    Email
The CPinfo utility (Old CPinfo)

Solution ID: sk30567
Product: CPInfo
Version: All
Platform / Model: All
Date Created: 25-Feb-2005
Last Modified: 03-Dec-2013
Rate this document
[1=Worst,5=Best]
Solution

Important notes:

  • The CPinfo version in this solution is valid for all Operating Systems and Check Point versions.
  • A newer CPinfo version with additional features is available.

 


 

Table of Contents:

  • Introduction
  • Data Collected
  • Syntax
  • Installing CPinfo
  • Useful commands
  • Related solutions

Introduction

CPinfo is a utility that collects data on a customer's machine at the time of execution. The CPinfo output file allows to analyze customer setups from a remote location. Check Point's support engineers can open the CPinfo file in a demo mode, while viewing actual customer Security Policies and objects. This allows the in-depth analysis of all of customer configuration options and environment settings.

 

Data Collected

CPinfo collects the entire gateway installation directory, including $FWDIR/log/* files. Some of the other viewable information includes:

  • Routing tables.
  • Output of the netstat command.
  • Output of ipconfig /all command.
  • OS and service-patch levels.
  • CPUs and memory.
  • Output of fw ctl pstat command.
  • System message logs.

 

Syntax

cpinfo [-v] [-l] [-n] [-z] [-o] [-r | -t [tablename]] [-c CMA_NAME ... | -x VSID] [-y <product_name>|all]

  • -v Prints version information
  • -l Includes log records (very large output)
  • -n Does not resolve network addresses (faster)
  • -z Output file is compressed (GZIP-ed) (works only with '-o' option)
  • -o Output to a file (default output is redirected to <hostname>_<date> file)
  • -r On Windows OS: Includes the Windows OS registry (very large output)
  • -t Output consists of tables only (for SecuRemote only)
  • -c Get information about the specified Domain Management Server (for Multi-Domain Security Management)
  • -x Get information about the specified VS (for VSX)
  • -y Displays all hotfixes installed on machine by <product_name> or all products together (refer to sk83860)
  • -i Non-interactive mode
  • -d Does not check for updates
  • -a Upload CPinfo file to Check Point (file will be compressed with GZIP)
  • -f Upload additional files to Check Point
  • -u Connect to User Center with username and password
  • -e E-mails (comma separated) to notify about upload status
  • -s SR Number
  • -k Include firewall tables
  • -h Display this help and exit

 

Installing CPinfo

Installing CPinfo involves downloading the proper platform's version of cpinfo, extracting the CPinfo file, and running the command to start the CPinfo script. After installing, send the CPinfo file to Check Point Technical Support via email or FTP.

You can install cpinfo on:

  • Linux/SecurePlatform/Gaia
  • IPSO
  • Windows
  • Solaris
  • Linux on Security Gateway 8x



Linux/SecurePlatform/Gaia

  1. Download the latest CPinfo utility here

    Note: If the download of CPinfo utility is impossible, then

    1. Either install it from the /sysimg/CPwrapper/linux/CPinfo/CPinfo-10-00.i386.rpm file.
    2. Or extract the /linux/CPinfo/CPinfo-10-00.i386.rpm utility package from the CD.


  2. Run the following commands from the directory where you put the downloaded file:

    1. Place the file in a temp directory on the target system and go into that directory.

    2. Unzip and untar the cpinfo: tar -xvzf cpinfo_X.tgz

    3. Install the cpinfo utility package: rpm -ivh CPinfo-10-00.i386.rpm

      Also you can use: rpm -Uvh --force CPinfo-10-00.i386.rpm

    4. Verify that the cpinfo utility was installed:
      rpm -qa | grep CPinfo

    5. Check the build number of CPinfo utility:
      cpvinfo /opt/CPinfo-10/bin/cpinfo

      Look for the Build Number, it is supposed to be 9110000xxx. It is stated "911000xxx" instead of the exact build number since new builds are being released all the time. Note that usually the build number is mentioned in the file name.

      Note: if the CPinfo-10-00 package does not appear in the output of rpm -qa | grep CP, try to rebuild the rpm database:
      rpm -v --rebuilddb


  3. Log out and log in to the shell before running the 'cpinfo' command.

  4. Create the cpinfo output file:
    cpinfo -n -z -o /var/log/hostname.cpinfo



IPSO

Download the latest CPinfo utility here.

Automatic Installation

  1. Log into "Voyager" and download the package to the IPSO machine by clicking 'Configuration'.

  2. Select System Configuration > Packages > Install Package.

  3. If FTP is accessible, transfer the cpinfo.tgz file to the Site Listing pane. Select the file and click 'Apply'.

  4. Make sure that the package is listed in the Unpack Package pane. Select the package, and then click the "Click here to install/upgrade /opt/packages<package name>.tgz" link.

  5. If FTP is not accessible, copy the package to /opt/packages on the IPSO machine.

  6. Make sure that the package is listed in the Unpack Package pane. Select the package, and then click the "Click here to install/upgrade /opt/packages<package name>.tgz" link.

  7. In the Package Installation and Upgrade window, select the Install checkbox and click 'Apply'.

  8. In the Manage Packages window, verify that cpinfo is enabled.



Manual Installation

  1. On the IPSO machine, run clish command.

  2. Download the cpinfo.tgz file to the IPSO machine home directory via FTP.

  3. Run in clish:
    add package media ftp addr <IP Address> user <Username> password <Password> name cpinfo_<cpinfo build>.tgz

    Note: If FTP is not accessible, download the cpinfo.tgz file to the IPSO machine /opt/packages directory and modify the add package media command accordingly.

  4. Log out from clish to usual shell before running the 'cpinfo' command.

  5. Create the cpinfo output file:
    cpinfo -z -n -o /var/log/hostname.cpinfo

 

Windows

  1. Download the latest CPinfo utility here.

  2. Install the downloaded package, following instructions in the Installation shield (if it is not possible to uninstall the current version of CPinfo, refer to sk65030).

  3. Reboot the machine.



Solaris

  1. Download the latest CPinfo utility here.

    Note: If the download is impossible, extract the /solaris2/CPinfo/CPinfo.tgz utility package from the CD.
  2. Run the following commands from the directory where you put the downloaded file:

    1. Put the downloaded package to the some directory (e.g., /var/cpinfo_X.tgz).

    2. Find and uninstall the current package by running pkgrm <package name>
      Example:

      bash-2.05# pkginfo | grep Check
      application CPfw1-R55W Check Point VPN-1/FireWall-1 NG with Application Intelligence (R55W)
      application CPinfo-R55W Check Point CPinfo NG with Application Intelligence (R55W)
      application CPrtm-R55W Check Point SmartView Monitor NG with Application Intelligence (R55W)

      Run: pkgrm CPinfo-R55W

    3. Uncompress the downloaded cpinfo package: gunzip cpinfo_X.tgz

    4. Untar the cpinfo: tar -xvzf cpinfo_X.tar

    5. Install the cpinfo package: pkgadd -d /var/

      or put the contents of the TAR file to the /var/spool/pkg directory and run the pkgadd command.

    6. The following output appears:

      The following packages are available:
      <Number> CPinfo-10 Check Point CPinfo
      • Enter the number that appears on the left of CPinfo-10: <Number>
      • Agree when asked about creating the </opt/CPinfo-RXX> directory
      • Agree to continue with the installation of <CPinfo-RXX>.
      • Quit when you get the message "Installation of <CPinfo-RXX> was successful."

      Follow the instructions on the screen.

    7. Verify that the cpinfo utility was installed by running the pkginfo | grep Check command.

      Example:
      bash-2.05# pkginfo | grep Check
      application CPfw1-R55W Check Point VPN-1/FireWall-1 NG with Application Intelligence (R55W)
      application CPinfo-10 Check Point CPinfo
      application CPrtm-R55W Check Point SmartView Monitor NG with Application Intelligence (R55W)

    8. Check the build number of the CPinfo utility by running the cpvinfo /opt/CPinfo-10/bin/cpinfo command.
      Look for Build Number, it is supposed to be 9110000xxx.

    9. Log out and log in to the shell before running cpinfo.



Linux on Security Gateway 8x

There are two ways to create a cpinfo file on SG 8x:

  1. Connect with IE browser to WebUI at https://External_IP_address:4434.

  2. Go to Diagnostics -> Tools menu.

  3. Click "Generate CPinfo File" at the bottom.

  4. Wait for the file to be collected.

  5. Click the same button, which is now called "Download CPinfo File" and save the file on your computer.

OR

Run the cpinfo command with usual flags from the command line and then extract the file from the machine (via FTP, SCP, etc).

Note: the default version of CPinfo utility that comes with SG appliance cannot be changed - you cannot uninstall it and install another version, since the OS of SG appliance (BusyBox) does not work with usual RPM packages and since there is no such executable file (the CPinfo's functionality is integrated into /opt/fw1/bin/fw file).

 

Useful commands

Gets the version of CPinfo:
# cpinfo -v

Sends results to output file cpinfo.out (no address resolution - works faster):
# cpinfo -n -o <machine.name>.cpinfo

Sends results to output file cpinfo.out and compresses the file with GZIP:
# cpinfo -z -o <machine.name>.cpinfo

Collects information on Provider-1 from the CMAs My_CMA and Your_CMA:
# cpinfo -c My_CMA -c Your_CMA -o <machine.name>.cpinfo

Collects information on VSX from Virtual System number with VSID 5:
# cpinfo -x 5 -o <machine.name>.cpinfo

 


Applies To:
  • This solution replaces skI4243.
Give us Feedback
Rate this document
[1=Worst,5=Best]
Additional comments...(Max 2000 characters allowed)
Characters left: 2000