IBM Security QRadar

 View Only
Expand all | Collapse all

Qradar CE update to Fixpack 10 failed "Error: Package: 1:NetworkManager-wifi"

  • 1.  Qradar CE update to Fixpack 10 failed "Error: Package: 1:NetworkManager-wifi"

    Posted Tue March 29, 2022 11:04 AM
    Hello,

    I tried to update my Qradar CE (7.3.3) manually as the auto-update does not work (see my other post).
    I followed the official install instructions step by step Release of QRadar 7.3.3 Fix Pack 10 SFS (7.3.3-QRADAR-QRSIEM-20211125190208)

    But it always fails, see here:

    I obviously have no Wi-Fi enabled on this VM.
    If this is relevant here is my ip a:

    1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc prio state UNKNOWN group default qlen 1000
        link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
        inet 127.0.0.1/8 scope host lo
           valid_lft forever preferred_lft forever
        inet6 ::1/128 scope host 
           valid_lft forever preferred_lft forever
    2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc prio state UP group default qlen 1000
        link/ether 32:ba:47:74:a8:b3 brd ff:ff:ff:ff:ff:ff
        inet 10.20.1.1/16 brd 10.20.255.255 scope global eth0
           valid_lft forever preferred_lft forever
        inet6 fe80::30ba:47ff:fe74:a8b3/64 scope link 
           valid_lft forever preferred_lft forever
    3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
        link/ether 9a:cf:a2:f6:6d:73 brd ff:ff:ff:ff:ff:ff
        inet6 fe80::98cf:a2ff:fef6:6d73/64 scope link 
           valid_lft forever preferred_lft forever
    4: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default 
        link/ether 02:42:f9:be:63:e8 brd ff:ff:ff:ff:ff:ff
        inet 169.254.2.1/24 brd 169.254.2.255 scope global docker0
           valid_lft forever preferred_lft forever
        inet6 2001:db8:4::1/80 scope global tentative 
           valid_lft forever preferred_lft forever
        inet6 fe80::1/64 scope link tentative 
           valid_lft forever preferred_lft forever
    5: dockerApps: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
        link/ether 02:42:bb:fa:66:ec brd ff:ff:ff:ff:ff:ff
        inet 169.254.3.1/24 brd 169.254.3.255 scope global dockerApps
           valid_lft forever preferred_lft forever
        inet6 fe80::42:bbff:fefa:66ec/64 scope link 
           valid_lft forever preferred_lft forever
    9: veth06a070e@if8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master dockerApps state UP group default 
        link/ether 6e:c8:0c:df:54:67 brd ff:ff:ff:ff:ff:ff link-netnsid 0
        inet6 fe80::6cc8:cff:fedf:5467/64 scope link ​


    I have two network interfaces virtually installed using Proxmox. One is for normal communication to the LAN/WAN and one is reserved for future use for Flows.
    The rest of the interfaces have to be from Qradar/CentOS.

    yum update && yum -y upgrade did nothing.

    Can anybody help me? It's a bit frustrating that I can't update Qradar. Not with auto update and not with manual FixPack installation...

    ------------------------------
    M. Offermann
    ------------------------------


  • 2.  RE: Qradar CE update to Fixpack 10 failed "Error: Package: 1:NetworkManager-wifi"

    IBM Champion
    Posted Wed March 30, 2022 12:46 PM
    Hi

    fixpack cant be installed as of CE limitation.
    Manual updates of rpms and hot fixes do work as well as autoupdates.

    Regards
    Karl

    ------------------------------
    [Karl] [Jaeger] [Business Partner]
    [QRadar Specialist]
    [pro4bizz]
    [Karlsruhe] [Germany]
    [4972190981722]
    ------------------------------