MikroTik

avn

Here is an updated fix_space.npk package for SMIPS devices which should free up to 1.3Mb to allow upgrading. The underlying issue is fixed in this 6.47.10 version, so the issue should not reoccur again. We apologize for any inconvenience.

The fix works, thank you very much!

avn

I've read about the problems of the low disk space. Excuse me for the stupid question, but this problem is limited to the SMIPS architecture? Because also others mikrotik devices have only 16Mbytes of disk space, but, in my case, the upgrade from the 6.46.8 to the 6.47.10 version worked without pro...

avn

Mikrotik Staff, now you have the EXACT procedure for replicate the problem.

Wow, thanks for help.
BTW, I've sent email about this issue to support yesterday, included supout.rif and link to the forum thread.

avn

@avn and @rextended
You should make an own thread with upgrade problems for hAP Lite.
This problem is not unique to 6.47.10

I know all about upgrade problems with hAP lite that was earlier.
This is new and unique for upgrade 6.47.9 -> 6.47.10.

avn

1) Please do not consider me such an idiot... I'm not English but I understand of what device are talking about... (the other, and unique other for my knowledge, smips are hAP mini) sorry, but all answers are on previous posts, are really exaustive. https://forum.mikrotik.com/viewtopic.php?f=21&...

avn

exactly what I've already writed: >>>from 6.47.9 to 6.47.10 with drag & drop of full file<<< (on this case specifyng long-term is useless) 1) The device is hAP lite (RB941-2nD)? 2) Did you upgraded it from 6.46.8 (long-term) to 6.47.9 (long-term) and then to 6.47.10 (long-term)?

avn

I have on previous post updated without issues from 6.47.9 to 6.47.10 with drag & drop of full file...

Did you upgraded your hap lite from 6.46.8 (long-term) to 6.47.9 (long-term) and then to 6.47.10 (long-term)?

avn

Upgrade on hap lites broken only if hap lite earlier was upgraded to 6.47.9. Upgrade from 6.46.8 to 6.47.10 worked without issue. So it's 6.47.9 causing trouble. Tried on several devices, it's the same issue everywhere. Good news, it's just one-time netinstall required per device. Bad news, I have a...

avn

Is a Netinstall really such a complicated option?

Yes it is. And that's not the only device, there's hundreds of such devices in different remote locations.

avn

another "unlocker" for some cases:
Code: Select all
/ip ssh regenerate-host-key
This is not the adequate topic to explain the problem because on some devices this command release memory (delete corrupted database)

Didn't help in my case.

avn

For AVN also suggest to paste this on terminal, without omitting { } this solve other errors, like gigabit ports, default settings, etc. Don't see how this is relevant to the issue. I appreciate suggestion about ssh, maybe I need to change that, although it's not very important. Everything else I l...

avn

WRONG
you can use MAC telnet if the device are full reset without keep any and without apply default config

You tried it yourself? I did, recently. It doesn't work.

avn

please put on forum, without omit nothing, the output of the following commands on terminal: /sys package print Flags: X - disabled # NAME VERSION SCHEDULED 0 routeros-smips 6.47.9 1 system 6.47.9 2 X ipv6 6.47.9 3 wireless 6.47.9 4 X hotspot 6.47.9 5 X mpls 6.47.9 6 X routing 6.47.9 7 ppp 6.47.9 8...

avn

For now, just report the problem to MikroTik support so that they cannot claim "nobody ever reports problems with upgrades and in our testing it always goes well".

Pointless. The anwser will be "Netinstall it".

avn

I mean if you use something to remotely reach the device, lipe pppoe, pptp, dhcp-client, etc. if by "mac telnet" you can reach device, do a system reset without keep nothing and witout apply any default. downgrade is like upgrade, you do not resolve anything because if you can not install...

avn

In the vast majority of cases SMIPS upgrade problems are caused by RAM shortage and not flash shortage. The error message may be misleading, when it talks about disk space it is usually complaining about RAM drive. If you have problems upgrading SMIPS routers try rebooting the device first, then at...

avn

with what metod you are able to reach remotely the device?

Webfig, ssh, telnet, winbox.

read carefully:

Tried this and failed, see above.
If anyone can confirm that downgrade from 6.47.9 to 6.40 is safe, I can try it later this evening.

avn

Try <6.40 if possible. (smaller, the better) Also look if there are any files that can be deleted. Very risky since there was major change from master port to bridge and hw offload introduced. If I lose the device I can't netinstall it remotely. I did file remove [find] before everything else. Ther...

avn

https://www.youtube.com/watch?v=R5rdQp3oKvA MikroTik Tutorial 97 - How to fix hAP Lite upgrade error "Not enough disk space" remember: start with the minimal package set, and then add the needed ones later. Never tried: "uninstall" ( not "disable" ) packages not needed...

avn

Downgrade to an older smaller version, then upgrade to latest version. This has been discussed many times her.

Didn't work either:

21:03:12 system,info installed system-6.42.9 
21:03:12 system,info installed dhcp-6.42.9 
21:03:12 system,error not enough space for upgrade

Any other ideas?

avn

Disabling packages don't add any space. And even without wireless it didn't work: 18:47:20 system,info installed system-6.47.10 18:47:20 system,info installed dhcp-6.47.10 18:47:20 system,info installed ppp-6.47.10 18:47:20 system,info installed security-6.47.10 18:47:20 system,error not enough spac...

avn

Required packages also don't fit (dhcp + ppp + security + system + wireless = 6.7 Mb). I can throw away wireless, but it won't be Home Access Point anymore. It leaves only netinstall, but it can't be done remotely.

avn

Sooo, hap lite no longer support upgrade, is that it?

            channel: long-term
  installed-version: 6.47.9
     latest-version: 6.47.10
             status: ERROR: not enough disk space, 7.0MiB is required and only 6.4MiB is free

avn

10 out of ~100 hap lite were bricked during upgrade from 6.46.8 to 6.47.9 and required netinstall. One of them worked after upgrade but bricked 1 day later with the same simptoms (constant reboot every 10 seconds). Other models were not affected, only hap lites. Seems like the same simptom: https://...

avn

8 out of ~100 hap lite were bricked during upgrade from 6.46.8 to 6.47.9 and required netinstall.
In some cases (seems totally random) Avaya IP phones can't get IP address from Mikrotik with ROS 6.47.9, ROS 6.46.8 is working fine.
Will revert to 6.46.8 everywhere.

avn

I've found a different factory reset behavior after upgrading to v6.42.9. In v6.40.9 the interfaces, DHCP server, and firewall policies were included by default. Now in v6.42.9, only a static IP address of 192.168.88.1 is configured on Interface 1, without a DHCP server, or firewall policies (which...

avn

In new RouterOS releases, at least 6.43.2 and 6.42.9, after reset routers almost don't have default configuration: there's only address 192.168.88.1 on ether1, no bridge, no dhcp, no firewall, etc. I've seen this after reset on hap ac2 and hex lite. On various routers (hap lite, hex lite, hex, rb751...

avn

I read all about fastpath, fasttrack. But...
Sometimes rx greater than fprx and sometimes fprx greater than rx. Why is that? What is "true" value of speed in both cases?
Examples:
rx=0,62; fprx=1,1
rx=1,4; fprx=0,86
It was measured on a real link. It happens all the time.

avn

Is this 6.38.5 and above only? Or does this also work on 6.37.5? I'd also like to know this as well..... Does this explicitly effect devices running 6.38.5 and above. Or would it apply to all devices running 6.38.5 and below? 6.38.5 and 6.37.5 both are affected. Tested it myself. I think all versio...

avn

I've tested exploit on RB750GL with various speed. Traffic was sent from LAN to inside interface of the router. 40 Mbit/s is enough to cause 100% cpu and 100% packet loss. It not happens instantaneously, need some time (2-3 minutes) for 100% packet loss. Firewall raw rule (add action=accept chain=pr...

avn

There is nothing special in this traffic, look at the code. It just makes new TCP RES connections. If you download 100 torrents with 100 peer each, you will get same effect. The trick is to make NEW connections, so that the fasttrack doesn't come into play. Agree. Although it will be nice to have c...

avn

avn. Any traffic in such amounts will load the router, even if it is going to the internet. This is your LAN. Go and unplug this user. If you are an ISP, call the police. There are other methods to solve sabotage in your LAN. Still. It is not an exploit. Such things affect any internet router or in...

avn

In latest RouterOS versions there was added special feature - /ip firewall raw. special filter that can specify what traffic get to connection tracking, what traffic bypass it, what traffic are dropped before getting to connection tracking. Together with suggesting that was already mentioned, you c...

avn

Please post details. We cannot repeat this. Also post your config. RB2011UAS-IN. Config reset to default, see attachment. Software: 6.37.5 (bugfix). Firmware: 3.33 (latest). Exploit: https://cxsecurity.com/issue/WLB-2017030242 Ether1 of the router connected to the internet, ether2 - computer with U...

avn

No need for open ports. Exploit works even in case of transit (forwarding) packets. Just tested it on my RB751G-2HnD.

UPD. The problem exists on many soho routers, tested on Dlink+Openwrt and Huawei with same result as Mikrotik.

Search found 35 matches

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: v6.47.10 [long-term] is released!

Re: RB941-2nD (hap lite) brick after upgrade from 6.46.8 long-term to 6.47.9 long-term

Re: v6.47.9 [long-term] is released!

Re: v6.42.9 [long-term] is released!

Default configuration is broken?

Re: FP Tx/Rx

Re: Vulnerability RouterOS 6.38.5 - Denial of Service

Re: Vulnerability RouterOS 6.38.5 - Denial of Service

Re: Vulnerability RouterOS 6.38.5 - Denial of Service

Re: Vulnerability RouterOS 6.38.5 - Denial of Service

Re: Vulnerability RouterOS 6.38.5 - Denial of Service

Re: Vulnerability RouterOS 6.38.5 - Denial of Service

Re: Vulnerability RouterOS 6.38.5 - Denial of Service