Exporting Importing R77.x and Earlier Configuration (Odumper and Ofiller) - Check Point CheckMates

(/)
Want to win
 AirPods?
S U B M I T A R E V I E W ! ( / t 5 / G e n e r a l -To p i c s / S h a r e - y o u r - f e e d b a c k - f o r - y o u r - c h a n c e - t o - W I N - n e w - A p p l e - A i r P o d s - P r o / m - p / 6 8 9 4 9 )

Search all content
Create a Post (/t5/forums/postpage/board-id/policy-management)
CheckMates (/)  Products (/t5/Products/ct-p/infinity)  Management (/t5/Management/ct-p/Management)

 Policy Management (/t5/Policy-Management/bd-p/policy-management)  Exporting/Importing R77.x and Earlier Configuratio...

(/t5/user/viewprofilepage/user-id/7)
PhoneBoy (/t5/user/viewprofilepage/user-id/7)
Admin
2019-04-22 04:28 PM
Exporting/Importing R77.x and Earlier Configuration (odumper and ofiller)

I've referred to this tool enough times on CheckMates that I figure I should put a copy of it here so it's a little easier to find.
Ofiller and Odumper are tools that were created by former Check Point SE Martin Hoz. They are not official Check Point tools, but have been used
extensively over the years to export and import data from Check Point object databases, whether Security Management, or Multi-Domain (Provider-
1). A common use case for the tool is to export the existing database into CSV format and make edits with Excel.
The attached archive contains the last version of this tool released in January 2007 when R65 was the latest release. That said, the tools should work on
releases up to and including R77.30. The archive includes documentation with examples to get you up to speed quickly.
It goes without saying that Check Point provides NO SUPPORT or WARRANTY for this tool. It is provided merely as a convenience.
 ofiller_v2.4-MD5-013b1b7a5ee24db33212951e08d539be.tgz 7271 KB (/fyrhh23835/attachments/fyrhh23835/policy-management/3076/1/ofiller_…
 (https://community.checkpoint.com/t5/forums/v4/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/51536?t:ac=bo
(/t5/Policy-Management/Exporting-Importing-R77-x-and-Earlier-Configuration-odumper-and/td-p/51536)
 Share (http://www.addthis.com/bookmark.php?url=https%3A%2F%2Fcommunity.checkpoint.com%2Ft5%2FPolicy-Management%2FExporting-Importing-R77-x-and
Reply (/t5/forums/replypage/board-id/policy-management/message-id/3076)
All forum topics (/t5/Policy-Management/bd-p/policy-management/page/3)
 Previous Topic (/t5/Policy-Management/R80-Do-Not-Set-Policy-Installation-Targets/td-p/25234) Next Topic 
11 Replies
lucascaetano9 (/t5/user/viewprofilepage/user-id/28513)
Iron
2019-05-08 10:25 AM
Re: Exporting/Importing R77.x and Earlier Configuration (odumper and ofiller)

I would like your help to know if there is a newest version of this? I am running the odumper command in CMD to convert the file to .CSV and getting the
issue "cannot start odumper or run due to incomaptibility with 64-bit versions of windows. Please contact the software vendor to ask if a 64-bit windows
compatible version is available."
I am using the 2.4 where the last update is 2006.

 Top ()

(/)
Admin
2019-05-08 06:02 PM
Re: Exporting/Importing R77.x and Earlier Configuration (odumper and ofiller) 

Yes, these are the latest version of these tools.
While they were developed by a now former Check Point employee, they are not now nor have they ever been official Check Point tools.
As such, they are provided as-is and there are no plans for further enhancements or recompiles for more modern operating systems.
Another option that runs in PERL is: https://github.com/mattburch/CPParser (https://github.com/mattburch/CPParser)

It does not have a CSV export/import function natively, but it does appear to export the necessary dbedit commands to recreate the object.
 (https://community.checkpoint.com/t5/forums/v4/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/52959?t:ac=
 Share (http://www.addthis.com/bookmark.php?url=https%3A%2F%2Fcommunity.checkpoint.com%2Ft5%2FPolicy-Management%2FExporting-Importing-R77-x-a
dannyclee (/t5/user/viewprofilepage/user-id/33470)
Ivory
2019-08-28 07:54 AM

Thank you sir.
 (https://community.checkpoint.com/t5/forums/v4/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/61404?t:
 Share (http://www.addthis.com/bookmark.php?url=https%3A%2F%2Fcommunity.checkpoint.com%2Ft5%2FPolicy-Management%2FExporting-Importing-R77
Ivory
2019-08-28 11:03 AM

In the GUI is there anyway to copy multiple objects out into notepad\word? I can only seem to double click on one object then go up to the top
copy\paste. I have firewall rules with several objects in one rule and don't want to copy\paste one at a time?
 Top ()
(/)
Vladimir (/t5/user/viewprofilepage/user-id/11879)
Pearl
2019-05-08 08:15 PM

Happy to see you bringing these up, just recently had to point them out to one of my buddies.
Also, no luck running them in 64 bit Windows.
Admin
2019-05-08 11:18 PM

I linked to an external version of them more than once.
Also used to host this on phoneboy.com, so it seemed appropriate.
Ivory
2019-08-27 02:00 PM

Thank you!
JozkoMrkvicka (/t5/user/viewprofilepage/user-id/1702)
Platinum
 Top ()
2019-08-27 03:25 PM
While 64bit versions of Windows(/)are not supported, you can still run these tools on any Linux machine (even on Check Point Management).
Just move folder "Linux_and_SPLAT" from archive to the machine. Run following command on all .lin files inside this folder:
chmod +x *.lin
and after that you can run both tools by running the following commands:
./odumper.lin
./ofiller.lin
Output from my R77.30 MDS:
 Spoiler
[Expert@MDS:0]# ./odumper.lin
Unofficial/Unsupported Object Dumper v2.4 - Developed by Martin Hoz
(c) 2003-2006 by Check Point Software Technologies, Inc.
===============================================================================
*** WARNING!: Missing at least a required parameter: (-f) Input (objects) file
or (-p) Input (rules) file.
*** WARNING!: Missing a required parameter: (-o) Output file.
This program takes an Objects_5_0.C or rulebases_5_0.C file, and writes a

formatted CSV file (spreadsheet) that contains the objects you have on the
objects database and/or the rules you have on your rulebases.
You may open later this file with Microsoft Excel or any other alike
spreadsheet program.
Program syntax:
1) odumper.lin help (prints help pages)
2) odumper.lin -I (Interactive mode)
3) odumper.lin [-f file | -p file] -o file [-d] [-html] [-v]
-f specifies the path to the objects (Objects_5_0.C or objects.C)

file you want to process
-p specifies the path to the rulebases (rulebases_5_0.fws) file
you want to process
-o specified the path to the output formatted file you want to have
-d tells the program to also print the default objects - Optional
 Top ()
-html formats the output to HTML (instead of default CSV format) - Optional
-v activates verbose mode (/)
file is a valid filename - such as output.txt, output.html or objects.C
Required parameters: (-f and/or -p) and -o
===============================================================================
No valid objects were processed! - Thank you for using Object Dumper v2.4!
[Expert@MDS:0]# ./ofiller.lin
Unofficial/Unsupported Object Filler v2.4 - Developed by Martin Hoz
===============================================================================
Missing Object type specification (-t)
Missing Initial IP (-s)
Missing Final (Ending) IP (-d)
Missing Mask length (-m)
Missing Output file (-o|-a)
*** WARNING!: Missing at least 1 required parameter. Please verify the syntax
and try again...
This program helps you populate your Check Point SmartCenter server by
producing CLI commands you can directly execute using DBedit in batch mode.
Program syntax:
1) ofiller.lin help (prints help pages - with examples)
2) ofiller.lin -I (Interactive mode)
3) ofiller.lin -f file -i input [-o|-a] file [-c color] [-t type]
[-p policy] [-nopv] [-nonat] [-v]
4) ofiller.lin -t type -s ip -d ip -m mask [-c color]
[-n ip | -ns ip -nd ip -nm mask] [-b obj] [-o|-a] file [-v]
Where valid (case sensitive in all cases) switches input examples are:
file is a valid filename - such as myfile.csv or output.txt
policy is a valid imported policy name - such as imp_pol or my_policy
input is the type of input configuration - csv, list, hosts, pix, netscreen,
gauntlet, sidewinder, raptor, ciscorouter
ip is a valid IP number - such as 192.168.10.45
type can be either host, plaingw, net, range, cpgw, ss, idevice, ose
ledge, lip40
mask is the mask length in bits. A number between 8 and 30
color can be black, blue, green, red, brown or others (see help)
obj it's an existing Check Point gateway object, for NAT purposes
Required parameters: (-f, -i and [-o|-a]) or (-t, -s, -d, -m and [-o|-a])
===============================================================================
No valid objects were processed! - Thank you for using Object Filler v2.4!
PS: Coredumps are created once the tools are run from the management:
 Spoiler
[Expert@MDS:0]# ./odumper.lin -p /opt/CPmds-R77/customers/cma_imported/CPsuite-R77/fw1/conf/rulebases_5_0.fws -o

/home/admin/imported.csv
Unofficial/Unsupported Object Dumper v2.4 - Developed by Martin Hoz
 Top ()
===============================================================================
(/)
===============================================================================
* Processing rules...
-------------------------------------------------------------------------------
.............................................................................................................................................................................................................................................
.............................................................................................................................................................................................................................................
.............................................................................................................................................................................................................................................
.............................................................................................................................................................................................................................................
.............................................................................................................................................................................................................................................
.............................................................................................................................................................................................................................................
.............................................................................................................................................................................................................................................
.............................................................................................................................................................................................................................................
.............................................................................................................................................................................................................................................
.............................................................................................................................................................................................................................................
.............................................................................................................................................................................................................................................
.............................................................................................................................................................................................................................................
.........................................................................................................
===============================================================================
Processed 460444 possible objects and found 3246 valid ones.
It took 6.0 seconds on quiet mode.
===============================================================================
*******************************************************************************
Wow! That's a big amount of objects! - Have you considered helping to make
Object Dumper better? - Please do! - Read Questions 1.11, 1.12, 1.13 and 2.6 in
the FAQ Section of the User's Manual to find out how you can help!!!
*******************************************************************************
-------------------------------------------------------------------------------
Total successfully processed Rules = 3246
===============================================================================
Task done successfully! - Thank you for using Object Dumper v2.4!
Segmentation fault (core dumped)
Kind regards,
Jozko Mrkvicka
Ivory
2019-08-28 07:53 AM

First thanks so much for the info, but I am not a Linux guy and SCARED TO DEATH to run this on our PROD Checkpoint Box. Is there a simpler way to
extract the config from the Checkpoint either via command line or the management server?
 Top ()
(/)
JozkoMrkvicka (/t5/user/viewprofilepage/user-id/1702)
Platinum
2019-08-28 01:48 PM

You can run this tool on ANY Linux machine, not specifically related to Check Point.
Kind regards,
Jozko Mrkvicka
Admin
2019-09-03 08:59 AM

You can copy the two files (objects_5_0.C and rulebases_5_0.fws) from your production management server (both in $FWDIR/conf) and run the
tools from a Linux machine.
About CheckMates 
Learn Check Point 
Advanced Learning 
Resources 
Non-English Discussions 
We’re Social. Follow Us
 (http://linkedin.com/company/cpcheckmates)  (https://twitter.com/CPCheckMates) 
(https://www.youtube.com/user/CPGlobal)  (https://www.facebook.com/cpcheckmates/) 
(https://www.instagram.com/cpcheckmates/)  (https://soundcloud.com/cpcheckmates)  Top ()
©1994-2019 Check Point Software Technologies Ltd. All rights reserved. Copyright (https://www.checkpoint.com/copyright/) Privacy Policy (https://www.checkpoint.com/privacy/)
Facts at a Glance (https://www.checkpoint.com/about-us/facts-a-glance/) User Center (https://usercenter.checkpoint.com/usercenter/index.jsp)
(/)
 Top ()

Exporting Importing R77.x and Earlier Configuration (Odumper and Ofiller) - Check Point CheckMates

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Exporting Importing R77.x and Earlier Configuration (Odumper and Ofiller) - Check Point CheckMates

Uploaded by

Copyright:

Available Formats

(/)

Create a Post (/t5/forums/postpage/board-id/policy-management)

CheckMates (/)  Products (/t5/Products/ct-p/infinity)  Management (/t5/Management/ct-p/Management)

Exporting/Importing R77.x and Earlier Configuration (odumper and ofiller)

 ofiller_v2.4-MD5-013b1b7a5ee24db33212951e08d539be.tgz 7271 KB (/fyrhh23835/attachments/fyrhh23835/policy-management/3076/1/ofiller_…

All forum topics (/t5/Policy-Management/bd-p/policy-management/page/3)

 Previous Topic (/t5/Policy-Management/R80-Do-Not-Set-Policy-Installation-Targets/td-p/25234) Next Topic 

Re: Exporting/Importing R77.x and Earlier Configuration (odumper and ofiller)

I am using the 2.4 where the last update is 2006.

Re: Exporting/Importing R77.x and Earlier Configuration (odumper and ofiller) 

Another option that runs in PERL is: https://github.com/mattburch/CPParser (https://github.com/mattburch/CPParser)

Re: Exporting/Importing R77.x and Earlier Configuration (odumper and ofiller)

Re: Exporting/Importing R77.x and Earlier Configuration (odumper and ofiller)

Re: Exporting/Importing R77.x and Earlier Configuration (odumper and ofiller)

Also, no luck running them in 64 bit Windows.

Re: Exporting/Importing R77.x and Earlier Configuration (odumper and ofiller)

Re: Exporting/Importing R77.x and Earlier Configuration (odumper and ofiller)

Output from my R77.30 MDS:

*** WARNING!: Missing a required parameter: (-o) Output file.

This program takes an Objects_5_0.C or rulebases_5_0.C file, and writes a

-f specifies the path to the objects (Objects_5_0.C or objects.C)

Required parameters: (-f and/or -p) and -o

[Expert@MDS:0]# ./odumper.lin -p /opt/CPmds-R77/customers/cma_imported/CPsuite-R77/fw1/conf/rulebases_5_0.fws -o

Re: Exporting/Importing R77.x and Earlier Configuration (odumper and ofiller)

Re: Exporting/Importing R77.x and Earlier Configuration (odumper and ofiller)

Re: Exporting/Importing R77.x and Earlier Configuration (odumper and ofiller)

Learn Check Point 

We’re Social. Follow Us

You might also like