From mathiruban at gmail.com  Tue Dec  1 04:24:03 2009
From: mathiruban at gmail.com (Mathiruban Rajagopal)
Date: Tue, 1 Dec 2009 09:54:03 +0530
Subject: [rancid]  router.db
Message-ID: <136e115c0911302024w1233a46at1704619dbe593639@mail.gmail.com>

Dear all,

My rancid is working fine but after deleting one router from router.db I am
getting retrieving revision for router.db every one hour.

What is the wrong with my configuration? Pls let me know.

Rgds,

Mathy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091201/00ab49ba/attachment.html 

From mstefani at redhat.com  Tue Dec  1 09:38:40 2009
From: mstefani at redhat.com (Michael Stefaniuc)
Date: Tue, 01 Dec 2009 10:38:40 +0100
Subject: [rancid] Re: Backing Up Cisco ACE Modules
In-Reply-To: <74A76F5DF2E5124CBE0396FD39D1718607CC33A1B2@NALASEXMB03.na.qualcomm.com>
References: <74A76F5DF2E5124CBE0396FD39D1718607CC33A1B2@NALASEXMB03.na.qualcomm.com>
Message-ID: <4B14E420.5080909@redhat.com>

Hi Bill,

Brown IV, Bill (MFT) wrote:
> I?ve been trying to backup the Cisco ACE but Rancid seems to time out
> during the connection.  I think it has to do with the pager.  On the
> ACE, every time I login the pager gets set back to its default.  Logging
> in and then setting ?term length 0? only works for the session.  After
> Rancid logs out, the pager gets reset.
you can try to use my patch from
http://www.shrubbery.net/pipermail/rancid-discuss/2008-October/003338.html

> Scenario: I can login to the device using clogin.  Issuing a ?show run?
> from there reveals that the pager is set, (noted by the --more--
> prompt).  I set ?term length 0? and ?sho run? completes with no pager. 
> Logging out and then back in reveals that the pager is once again set. 
> Using the rancid script with ?d, the last output is:
> 
>  
> 
> HIT COMMAND:<device>/Admin#show running-config
> 
>     In WriteTerm: <device>/Admin#show running-config
> 
> HIT COMMAND: <device>/Admin#write term
> 
>     In WriteTerm: <device>/Admin#write term
> 
> <device>: End of run not found
> 
> <device>: End of run not found
> 
>  
> 
> My assumption is that somehow Rancid is expecting the enable prompt but
> not getting it because of the pager.  I looked at the rancid script but
> I?m just not proficient enough to know where to hard code a ?term length
> 0? and I definitely don?t want to change the behavior for other devices,
> (I don?t want to ?mess up?).  Does anyone have a piece of code that will
> accomplish this?
It's not the pager but rancid's detection of the end of the config file
which goes wrong.

> If possible, if you have it, I would really like to backup all the
> contexts within the ACE as well.
For now you have to give each context an IP and use that. I plan to add
that feature but I'm pretty busy lately.

bye
	michael
-- 
Michael Stefaniuc                           Tel.: +49-711-96437-199
Consulting Communications Engineer          Fax.: +49-711-96437-111
--------------------------------------------------------------------
Reg. Adresse: Red Hat GmbH, Otto-Hahn-Strasse 20, 85609 Dornach
Handelsregister: Amtsgericht Muenchen HRB 153243
Gesch?ftsf?hrer: Brendan Lane, Charlie Peters, Michael Cunningham,
                 Charles Cachera

From remyheiden at gmail.com  Tue Dec  1 12:35:59 2009
From: remyheiden at gmail.com (Remy Heiden)
Date: Tue, 1 Dec 2009 13:35:59 +0100
Subject: [rancid] Re: Backing Up Cisco ACE Modules
In-Reply-To: <4B14E420.5080909@redhat.com>
References: <74A76F5DF2E5124CBE0396FD39D1718607CC33A1B2@NALASEXMB03.na.qualcomm.com>
	<4B14E420.5080909@redhat.com>
Message-ID: <bf3c43510912010435o186023b5l640296ae8939fcc6@mail.gmail.com>

Strange..

We backup our ACEs with no trouble at all..
Just using the standard rancid script and separate management IP's on the
contexts.

No issues with pagers or end of config files...

I'll have a look to see if i can find some details..

Remy

On Tue, Dec 1, 2009 at 10:38 AM, Michael Stefaniuc <mstefani at redhat.com>wrote:

> Hi Bill,
>
> Brown IV, Bill (MFT) wrote:
> > I?ve been trying to backup the Cisco ACE but Rancid seems to time out
> > during the connection.  I think it has to do with the pager.  On the
> > ACE, every time I login the pager gets set back to its default.  Logging
> > in and then setting ?term length 0? only works for the session.  After
> > Rancid logs out, the pager gets reset.
> you can try to use my patch from
> http://www.shrubbery.net/pipermail/rancid-discuss/2008-October/003338.html
>
> > Scenario: I can login to the device using clogin.  Issuing a ?show run?
> > from there reveals that the pager is set, (noted by the --more--
> > prompt).  I set ?term length 0? and ?sho run? completes with no pager.
> > Logging out and then back in reveals that the pager is once again set.
> > Using the rancid script with ?d, the last output is:
> >
> >
> >
> > HIT COMMAND:<device>/Admin#show running-config
> >
> >     In WriteTerm: <device>/Admin#show running-config
> >
> > HIT COMMAND: <device>/Admin#write term
> >
> >     In WriteTerm: <device>/Admin#write term
> >
> > <device>: End of run not found
> >
> > <device>: End of run not found
> >
> >
> >
> > My assumption is that somehow Rancid is expecting the enable prompt but
> > not getting it because of the pager.  I looked at the rancid script but
> > I?m just not proficient enough to know where to hard code a ?term length
> > 0? and I definitely don?t want to change the behavior for other devices,
> > (I don?t want to ?mess up?).  Does anyone have a piece of code that will
> > accomplish this?
> It's not the pager but rancid's detection of the end of the config file
> which goes wrong.
>
> > If possible, if you have it, I would really like to backup all the
> > contexts within the ACE as well.
> For now you have to give each context an IP and use that. I plan to add
> that feature but I'm pretty busy lately.
>
> bye
>        michael
> --
> Michael Stefaniuc                           Tel.: +49-711-96437-199
> Consulting Communications Engineer          Fax.: +49-711-96437-111
> --------------------------------------------------------------------
> Reg. Adresse: Red Hat GmbH, Otto-Hahn-Strasse 20, 85609 Dornach
> Handelsregister: Amtsgericht Muenchen HRB 153243
> Gesch?ftsf?hrer: Brendan Lane, Charlie Peters, Michael Cunningham,
>                 Charles Cachera
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss




-- 
==========================================================

"The smell, you know that gasoline smell, the whole hill. Smelled like...
victory."

(Lieutenant Colonel Bill Kilgore)

==========================================================
--
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091201/3cbd6b45/attachment.html 

From remyheiden at gmail.com  Tue Dec  1 12:43:19 2009
From: remyheiden at gmail.com (Remy Heiden)
Date: Tue, 1 Dec 2009 13:43:19 +0100
Subject: [rancid] Re: Backing Up Cisco ACE Modules
In-Reply-To: <bf3c43510912010435o186023b5l640296ae8939fcc6@mail.gmail.com>
References: <74A76F5DF2E5124CBE0396FD39D1718607CC33A1B2@NALASEXMB03.na.qualcomm.com>
	<4B14E420.5080909@redhat.com>
	<bf3c43510912010435o186023b5l640296ae8939fcc6@mail.gmail.com>
Message-ID: <bf3c43510912010443x7f47e85h296a6afe6b7d569e@mail.gmail.com>

Actually, we do have a slight issue with thge ACEs...

Rancid ONLY collects the configs and not any of the other commands:

!RANCID-CONTENT-TYPE: cisco
!
!
!
!
!
!
!
!
!
!
                          ^
% invalid command detected at '^' marker.

Generating configuration....
<SNIP>

As for now we only are interested in the configs this is no issue for us.

R.


On Tue, Dec 1, 2009 at 1:35 PM, Remy Heiden <remyheiden at gmail.com> wrote:

> Strange..
>
> We backup our ACEs with no trouble at all..
> Just using the standard rancid script and separate management IP's on the
> contexts.
>
> No issues with pagers or end of config files...
>
> I'll have a look to see if i can find some details..
>
> Remy
>
>
> On Tue, Dec 1, 2009 at 10:38 AM, Michael Stefaniuc <mstefani at redhat.com>wrote:
>
>> Hi Bill,
>>
>> Brown IV, Bill (MFT) wrote:
>> > I?ve been trying to backup the Cisco ACE but Rancid seems to time out
>> > during the connection.  I think it has to do with the pager.  On the
>> > ACE, every time I login the pager gets set back to its default.  Logging
>> > in and then setting ?term length 0? only works for the session.  After
>> > Rancid logs out, the pager gets reset.
>> you can try to use my patch from
>> http://www.shrubbery.net/pipermail/rancid-discuss/2008-October/003338.html
>>
>> > Scenario: I can login to the device using clogin.  Issuing a ?show run?
>> > from there reveals that the pager is set, (noted by the --more--
>> > prompt).  I set ?term length 0? and ?sho run? completes with no pager.
>> > Logging out and then back in reveals that the pager is once again set.
>> > Using the rancid script with ?d, the last output is:
>> >
>> >
>> >
>> > HIT COMMAND:<device>/Admin#show running-config
>> >
>> >     In WriteTerm: <device>/Admin#show running-config
>> >
>> > HIT COMMAND: <device>/Admin#write term
>> >
>> >     In WriteTerm: <device>/Admin#write term
>> >
>> > <device>: End of run not found
>> >
>> > <device>: End of run not found
>> >
>> >
>> >
>> > My assumption is that somehow Rancid is expecting the enable prompt but
>> > not getting it because of the pager.  I looked at the rancid script but
>> > I?m just not proficient enough to know where to hard code a ?term length
>> > 0? and I definitely don?t want to change the behavior for other devices,
>> > (I don?t want to ?mess up?).  Does anyone have a piece of code that will
>> > accomplish this?
>> It's not the pager but rancid's detection of the end of the config file
>> which goes wrong.
>>
>> > If possible, if you have it, I would really like to backup all the
>> > contexts within the ACE as well.
>> For now you have to give each context an IP and use that. I plan to add
>> that feature but I'm pretty busy lately.
>>
>> bye
>>        michael
>> --
>> Michael Stefaniuc                           Tel.: +49-711-96437-199
>> Consulting Communications Engineer          Fax.: +49-711-96437-111
>> --------------------------------------------------------------------
>> Reg. Adresse: Red Hat GmbH, Otto-Hahn-Strasse 20, 85609 Dornach
>> Handelsregister: Amtsgericht Muenchen HRB 153243
>> Gesch?ftsf?hrer: Brendan Lane, Charlie Peters, Michael Cunningham,
>>                 Charles Cachera
>> _______________________________________________
>> Rancid-discuss mailing list
>> Rancid-discuss at shrubbery.net
>> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>
>
>
>
> --
> ==========================================================
>
> "The smell, you know that gasoline smell, the whole hill. Smelled like...
> victory."
>
> (Lieutenant Colonel Bill Kilgore)
>
> ==========================================================
> --
>
>


-- 
==========================================================

"The smell, you know that gasoline smell, the whole hill. Smelled like...
victory."

(Lieutenant Colonel Bill Kilgore)

==========================================================
--
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091201/fd48149c/attachment.html 

From remyheiden at gmail.com  Tue Dec  1 12:50:50 2009
From: remyheiden at gmail.com (Remy Heiden)
Date: Tue, 1 Dec 2009 13:50:50 +0100
Subject: [rancid] Re: Problems retrieving configs with rancid-run
In-Reply-To: <7a76d30f0911260430k4a9d4cd7oa2729ca09f1d13dd@mail.gmail.com>
References: <7a76d30f0911260430k4a9d4cd7oa2729ca09f1d13dd@mail.gmail.com>
Message-ID: <bf3c43510912010450q66eb110fm65362c7e48361090@mail.gmail.com>

Hi,

Let me guess, whel logging in with bin/clogin, you cannot enter any commands
or hit return?

If this is the case, most probably the device you are accessing doesn't have
an enable-mode and you should replace the 'autoenable' command in .clogin
with 'noenable'.

Hope this helps.

Remy

2009/11/26 Ronni Jensen <ronnij at gmail.com>

> Hi,
>
> I hope you can help me getting rancid to work.
>
> When I run "bin/clogin 10.10.10.10" from rancid homedir, it logs into the
> target switch and enters enable mode - autoenable is set to 1. But after a
> little while, it disconnects again with message:
>
> ---
> *Switch10#
> Error: TIMEOUT reached*
> ---
>
> When I run "bin/rancid-run switches", where switches is the group where
> 10.10.10.10 - and only that one switch for now - resides, I get the
> following in logfile:
>
>
>
> *starting: Thu Nov 26 12:33:19 CET 2009*
> **
> *Trying to get all of the configs.
> 10.10.10.10 clogin error: Error: TIMEOUT reached
> 10.10.10.10: missed cmd(s): admin show diag,dir /all slavedisk2:,show rsp
> chassis-info,dir /all sec-slot2:,show diag,dir /all disk1:,
> show gsr chassis,dir /all sec-nvram:,show diag chassis-info,dir /all
> disk2:,dir /all sec-bootflash:,show spe version,dir /all slaves
> lot2:,dir /all disk0:,show install active,show bootvar,dir /all
> slaveslot0:,dir /all sec-slot1:,dir /all harddiska:,dir /all slavenv
> ram:,show flash,dir /all sec-disk2:,dir /all slavesup-bootflash:,dir /all
> sec-disk0:,dir /all harddiskb:,show variables boot,show bo
> ot,show inventory raw,dir /all slavedisk1:,show env all,show module,admin
> show env all,show controllers,admin show version,show diag
> bus,more system:running-config,dir /all slavedisk0:,show debug,show idprom
> backplane,dir /all bootflash:,dir /all sec-slot0:,dir /al
> l sec-disk1:,write term,show vtp status,dir /all sup-bootflash:,dir /all
> slot2:,dir /all harddisk:,dir /all slot0:,dir /all sup-micr
> ocode:,show vlan,dir /all slavebootflash:,show controllers cbus,dir /all
> slaveslot1:,dir /all nvram:,show version,show vlan-switch,a
> dmin show variables boot,show redundancy secondary,show running-config,show
> c7200,dir /all slot1:
> 10.10.10.10: End of run not found
> !
> =====================================
> Getting missed routers: round 1.
> 10.10.10.10 clogin error: Error: TIMEOUT reached
> 10.10.10.10: missed cmd(s): admin show diag,dir /all slavedisk2:,show rsp
> chassis-info,dir /all sec-slot2:,show diag,dir /all disk1:,
> show gsr chassis,dir /all sec-nvram:,show diag chassis-info,dir /all
> disk2:,dir /all sec-bootflash:,show spe version,dir /all slaves
> lot2:,dir /all disk0:,show install active,show bootvar,dir /all
> slaveslot0:,dir /all sec-slot1:,dir /all harddiska:,dir /all slavenv
> ram:,show flash,dir /all sec-disk2:,dir /all slavesup-bootflash:,dir /all
> sec-disk0:,dir /all harddiskb:,show variables boot,show bo
> ot,show inventory raw,dir /all slavedisk1:,show env all,show module,admin
> show env all,show controllers,admin show version,show diag
> bus,more system:running-config,dir /all slavedisk0:,show debug,show idprom
> backplane,dir /all bootflash:,dir /all sec-slot0:,dir /al
> l sec-disk1:,write term,show vtp status,dir /all sup-bootflash:,dir /all
> slot2:,dir /all harddisk:,dir /all slot0:,dir /all sup-micr
> ocode:,show vlan,dir /all slavebootflash:,show controllers cbus,dir /all
> slaveslot1:,dir /all nvram:,show version,show vlan-switch,a
> dmin show variables boot,show redundancy secondary,show running-config,show
> c7200,dir /all slot1:
> 10.10.10.10: End of run not found
> !
> =====================================
> Getting missed routers: round 2.
> 10.10.10.10 clogin error: Error: TIMEOUT reached
> 10.10.10.10: missed cmd(s): admin show diag,dir /all slavedisk2:,show rsp
> chassis-info,dir /all sec-slot2:,show diag,dir /all disk1:,
> show gsr chassis,dir /all sec-nvram:,show diag chassis-info,dir /all
> disk2:,dir /all sec-bootflash:,show spe version,dir /all slaves
> lot2:,dir /all disk0:,show install active,show bootvar,dir /all
> slaveslot0:,dir /all sec-slot1:,dir /all harddiska:,dir /all slavenv
> ram:,show flash,dir /all sec-disk2:,dir /all slavesup-bootflash:,dir /all
> sec-disk0:,dir /all harddiskb:,show variables boot,show bo
> ot,show inventory raw,dir /all slavedisk1:,show env all,show module,admin
> show env all,show controllers,admin show version,show diag
> bus,more system:running-config,dir /all slavedisk0:,show debug,show idprom
> backplane,dir /all bootflash:,dir /all sec-slot0:,dir /al
> l sec-disk1:,write term,show vtp status,dir /all sup-bootflash:,dir /all
> slot2:,dir /all harddisk:,dir /all slot0:,dir /all sup-micr
> ocode:,show vlan,dir /all slavebootflash:,show controllers cbus,dir /all
> slaveslot1:,dir /all nvram:,show version,show vlan-switch,a
> dmin show variables boot,show redundancy secondary,show running-config,show
> c7200,dir /all slot1:
> 10.10.10.10: End of run not found
> !
> =====================================
> Getting missed routers: round 3.
> 10.10.10.10 clogin error: Error: TIMEOUT reached
> 10.10.10.10: missed cmd(s): admin show diag,dir /all slavedisk2:,show rsp
> chassis-info,dir /all sec-slot2:,show diag,dir /all disk1:,
> show gsr chassis,dir /all sec-nvram:,show diag chassis-info,dir /all
> disk2:,dir /all sec-bootflash:,show spe version,dir /all slaves
> lot2:,dir /all disk0:,show install active,show bootvar,dir /all
> slaveslot0:,dir /all sec-slot1:,dir /all harddiska:,dir /all slavenv
> ram:,show flash,dir /all sec-disk2:,dir /all slavesup-bootflash:,dir /all
> sec-disk0:,dir /all harddiskb:,show variables boot,show bo
> ot,show inventory raw,dir /all slavedisk1:,show env all,show module,admin
> show env all,show controllers,admin show version,show diag
> bus,more system:running-config,dir /all slavedisk0:,show debug,show idprom
> backplane,dir /all bootflash:,dir /all sec-slot0:,dir /al
> l sec-disk1:,write term,show vtp status,dir /all sup-bootflash:,dir /all
> slot2:,dir /all harddisk:,dir /all slot0:,dir /all sup-micr
> ocode:,show vlan,dir /all slavebootflash:,show controllers cbus,dir /all
> slaveslot1:,dir /all nvram:,show version,show vlan-switch,a
> dmin show variables boot,show redundancy secondary,show running-config,show
> c7200,dir /all slot1:
> 10.10.10.10: End of run not found
> !
> =====================================
> Getting missed routers: round 4.
> 10.10.10.10 clogin error: Error: TIMEOUT reached
> 10.10.10.10: missed cmd(s): admin show diag,dir /all slavedisk2:,show rsp
> chassis-info,dir /all sec-slot2:,show diag,dir /all disk1:,
> show gsr chassis,dir /all sec-nvram:,show diag chassis-info,dir /all
> disk2:,dir /all sec-bootflash:,show spe version,dir /all slaves
> lot2:,dir /all disk0:,show install active,show bootvar,dir /all
> slaveslot0:,dir /all sec-slot1:,dir /all harddiska:,dir /all slavenv
> ram:,show flash,dir /all sec-disk2:,dir /all slavesup-bootflash:,dir /all
> sec-disk0:,dir /all harddiskb:,show variables boot,show bo
> ot,show inventory raw,dir /all slavedisk1:,show env all,show module,admin
> show env all,show controllers,admin show version,show diag
> bus,more system:running-config,dir /all slavedisk0:,show debug,show idprom
> backplane,dir /all bootflash:,dir /all sec-slot0:,dir /al
> l sec-disk1:,write term,show vtp status,dir /all sup-bootflash:,dir /all
> slot2:,dir /all harddisk:,dir /all slot0:,dir /all sup-micr
> ocode:,show vlan,dir /all slavebootflash:,show controllers cbus,dir /all
> slaveslot1:,dir /all nvram:,show version,show vlan-switch,a
> dmin show variables boot,show redundancy secondary,show running-config,show
> c7200,dir /all slot1:
> 10.10.10.10: End of run not found
> !*
> *cvs diff: Diffing .
> cvs diff: Diffing configs
> cvs commit: Examining .
> cvs commit: Examining configs*
> *ending: Thu Nov 26 12:40:58 CET 2009*
>
>
>
>
> Any ideas how to solve the problem? I am using:
>
> - Fedora release 12 (Constantine)
> - rancid 2.3.2
> - expect-5.43.0-19.fc12.i686 (installed from yum)
> - tcl-8.5.7-4.fc12.i686 (installed from yum)
>
> Best regards,
> Ronni
>
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>



-- 
==========================================================

"The smell, you know that gasoline smell, the whole hill. Smelled like...
victory."

(Lieutenant Colonel Bill Kilgore)

==========================================================
--
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091201/30c67601/attachment.html 

From mstefani at redhat.com  Tue Dec  1 12:51:49 2009
From: mstefani at redhat.com (Michael Stefaniuc)
Date: Tue, 01 Dec 2009 13:51:49 +0100
Subject: [rancid] [PATCH] Remove empty lines at the beginning of the
	running-config
Message-ID: <4B151165.5060401@redhat.com>

Hello,

I've finally found the time to migrated to from 2.3.2a8 to the final
2.3.2. The difference between the two is that WriteTerm() relies now on
"more system:running-config". On newer IOS (seen it on 12.4(22)Tx but
not on 12.4(15)T or older) that will start with an empty line which gets
saved to the config file giving:
!
config-register 0x2102

!
version 12.4

The attached patch strips empty lines at the beginning of the
running-config.

License: Whatever it takes to get it accepted to rancid.

bye
	michael
-- 
Michael Stefaniuc                           Tel.: +49-711-96437-199
Consulting Communications Engineer          Fax.: +49-711-96437-111
--------------------------------------------------------------------
Reg. Adresse: Red Hat GmbH, Otto-Hahn-Strasse 20, 85609 Dornach
Handelsregister: Amtsgericht Muenchen HRB 153243
Gesch?ftsf?hrer: Brendan Lane, Charlie Peters, Michael Cunningham,
                 Charles Cachera
-------------- next part --------------
A non-text attachment was scrubbed...
Name: rancid-2.3.2-skipempty.patch
Type: text/x-patch
Size: 477 bytes
Desc: not available
Url : http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091201/3aba964a/attachment.bin 

From mstefani at redhat.com  Tue Dec  1 13:02:48 2009
From: mstefani at redhat.com (Michael Stefaniuc)
Date: Tue, 01 Dec 2009 14:02:48 +0100
Subject: [rancid] [PATCH] Handle "invalid command" / " ^" lines in WriteTerm
	too
Message-ID: <4B1513F8.9090509@redhat.com>

Hello,

the ACE and SANOS devices do not know the "more system:running-config" thus
                                   ^
% invalid command detected at '^' marker.

will show up in the saved config.

The ASAs do not know the command either but they return "Invalid input"
which rancid already detects. Nevertheless a stray
                  ^
will be added to the saved config file.
The attached patch deals with both problems.

License: Whatever it takes to get it accepted to rancid.

bye
	michael
-- 
Michael Stefaniuc                           Tel.: +49-711-96437-199
Consulting Communications Engineer          Fax.: +49-711-96437-111
--------------------------------------------------------------------
Reg. Adresse: Red Hat GmbH, Otto-Hahn-Strasse 20, 85609 Dornach
Handelsregister: Amtsgericht Muenchen HRB 153243
Gesch?ftsf?hrer: Brendan Lane, Charlie Peters, Michael Cunningham,
                 Charles Cachera
-------------- next part --------------
A non-text attachment was scrubbed...
Name: rancid-2.3.2-invalidcommand.patch
Type: text/x-patch
Size: 645 bytes
Desc: not available
Url : http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091201/5589cdaf/attachment.bin 

From mstefani at redhat.com  Tue Dec  1 13:05:27 2009
From: mstefani at redhat.com (Michael Stefaniuc)
Date: Tue, 01 Dec 2009 14:05:27 +0100
Subject: [rancid]  [PATCH] Filter out more keys from the ASA
Message-ID: <4B151497.3020809@redhat.com>

Hello,

the attached patch removes more keys from the ASA; basically every line
in the format:
 key <anything>
Seen it on the ASAs for TACACS+ and radius keys.

License: Whatever it takes to get it accepted to rancid.

bye
	michael
-- 
Michael Stefaniuc                           Tel.: +49-711-96437-199
Consulting Communications Engineer          Fax.: +49-711-96437-111
--------------------------------------------------------------------
Reg. Adresse: Red Hat GmbH, Otto-Hahn-Strasse 20, 85609 Dornach
Handelsregister: Amtsgericht Muenchen HRB 153243
Gesch?ftsf?hrer: Brendan Lane, Charlie Peters, Michael Cunningham,
                 Charles Cachera
-------------- next part --------------
A non-text attachment was scrubbed...
Name: rancid-2.3.2-asakey.patch
Type: text/x-patch
Size: 481 bytes
Desc: not available
Url : http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091201/950f70fa/attachment.bin 

From mstefani at redhat.com  Tue Dec  1 13:08:06 2009
From: mstefani at redhat.com (Michael Stefaniuc)
Date: Tue, 01 Dec 2009 14:08:06 +0100
Subject: [rancid] Re: Backing Up Cisco ACE Modules
In-Reply-To: <bf3c43510912010443x7f47e85h296a6afe6b7d569e@mail.gmail.com>
References: <74A76F5DF2E5124CBE0396FD39D1718607CC33A1B2@NALASEXMB03.na.qualcomm.com>	<4B14E420.5080909@redhat.com>	<bf3c43510912010435o186023b5l640296ae8939fcc6@mail.gmail.com>
	<bf3c43510912010443x7f47e85h296a6afe6b7d569e@mail.gmail.com>
Message-ID: <4B151536.2030900@redhat.com>

Remy Heiden wrote:
> Actually, we do have a slight issue with thge ACEs...
> 
> Rancid ONLY collects the configs and not any of the other commands:
The "right" commands for the ACE aren't in and the IOS ones aren't known.

> !RANCID-CONTENT-TYPE: cisco
> !
> !
> !
> !
> !
> !
> !
> !
> !
> !
> 
>                           ^
> % invalid command detected at '^' marker.
This is actually a different bug for which I have just sent a patch:
http://www.shrubbery.net/pipermail/rancid-discuss/2009-December/004447.html

bye
	michael


> Generating configuration....
> <SNIP>
> 
> As for now we only are interested in the configs this is no issue for us.
> 
> R.
> 
> 
> On Tue, Dec 1, 2009 at 1:35 PM, Remy Heiden <remyheiden at gmail.com
> <mailto:remyheiden at gmail.com>> wrote:
> 
>     Strange..
> 
>     We backup our ACEs with no trouble at all..
>     Just using the standard rancid script and separate management IP's
>     on the contexts.
> 
>     No issues with pagers or end of config files...
> 
>     I'll have a look to see if i can find some details..
> 
>     Remy
> 
> 
>     On Tue, Dec 1, 2009 at 10:38 AM, Michael Stefaniuc
>     <mstefani at redhat.com <mailto:mstefani at redhat.com>> wrote:
> 
>         Hi Bill,
> 
>         Brown IV, Bill (MFT) wrote:
>         > I?ve been trying to backup the Cisco ACE but Rancid seems to
>         time out
>         > during the connection.  I think it has to do with the pager.
>          On the
>         > ACE, every time I login the pager gets set back to its
>         default.  Logging
>         > in and then setting ?term length 0? only works for the
>         session.  After
>         > Rancid logs out, the pager gets reset.
>         you can try to use my patch from
>         http://www.shrubbery.net/pipermail/rancid-discuss/2008-October/003338.html
> 
>         > Scenario: I can login to the device using clogin.  Issuing a
>         ?show run?
>         > from there reveals that the pager is set, (noted by the --more--
>         > prompt).  I set ?term length 0? and ?sho run? completes with
>         no pager.
>         > Logging out and then back in reveals that the pager is once
>         again set.
>         > Using the rancid script with ?d, the last output is:
>         >
>         >
>         >
>         > HIT COMMAND:<device>/Admin#show running-config
>         >
>         >     In WriteTerm: <device>/Admin#show running-config
>         >
>         > HIT COMMAND: <device>/Admin#write term
>         >
>         >     In WriteTerm: <device>/Admin#write term
>         >
>         > <device>: End of run not found
>         >
>         > <device>: End of run not found
>         >
>         >
>         >
>         > My assumption is that somehow Rancid is expecting the enable
>         prompt but
>         > not getting it because of the pager.  I looked at the rancid
>         script but
>         > I?m just not proficient enough to know where to hard code a
>         ?term length
>         > 0? and I definitely don?t want to change the behavior for
>         other devices,
>         > (I don?t want to ?mess up?).  Does anyone have a piece of code
>         that will
>         > accomplish this?
>         It's not the pager but rancid's detection of the end of the
>         config file
>         which goes wrong.
> 
>         > If possible, if you have it, I would really like to backup all the
>         > contexts within the ACE as well.
>         For now you have to give each context an IP and use that. I plan
>         to add
>         that feature but I'm pretty busy lately.


-- 
Michael Stefaniuc                           Tel.: +49-711-96437-199
Consulting Communications Engineer          Fax.: +49-711-96437-111
--------------------------------------------------------------------
Reg. Adresse: Red Hat GmbH, Otto-Hahn-Strasse 20, 85609 Dornach
Handelsregister: Amtsgericht Muenchen HRB 153243
Gesch?ftsf?hrer: Brendan Lane, Charlie Peters, Michael Cunningham,
                 Charles Cachera

From mv652 at softhome.net  Tue Dec  1 14:28:45 2009
From: mv652 at softhome.net (mv652 at softhome.net)
Date: Tue, 01 Dec 2009 07:28:45 -0700
Subject: [rancid] Re: Applying Expect Patch Manually
In-Reply-To: <20091127203734.GC7853@shrubbery.net> 
References: <courier.4B101AC6.000076E8@softhome.net>
	<20091127203734.GC7853@shrubbery.net>
Message-ID: <courier.4B15281D.00002B6B@softhome.net>

Thanks. 

Ok, I couldn't work out how to correctly patch the already-installed expect 
5.43.0-5.1, so I uninstalled it and tcl 8.4.13-4.el5 and used the 
pre-patched versions from your FTP site. 

They both seemed to compile and install fine. 

Unfortunately I am still have a 'freezing' with two CISCO 800 devices.  I 
have 3 catalyst switches (4948 and 3750) and two routers (2811) which work 
fine. 

The only difference with the CISCO 800 is that there is a <username> 
<password> to login rather than simply a <password>. 


The log file from rancid-run shows:
clogin error: Error: TIMEOUT reached
.....
<cisco-800>: End of run not found 


A clogin test shows: 

./clogin <cisco-800>
<cisco-800> 

spawn telnet <cisco-800>
Trying 172.16.11.1...
Connected to <cisco-800> (172.16.11.1).
Escape character is '^]'. 


User Access Verification 

Username: administrator
Password: 

<cisco-800># 

and then it just stays there.  I thought that maybe it was the expect bug 
mentioned on your website, but it seems the freeze is still happening. 


Could someone advise on what to check next? 


Mario 

 

john heasley writes: 

> Fri, Nov 27, 2009 at 11:30:30AM -0700, mv652 at softhome.net:
>> Hello,  
>> 
>> Please excuse this mail if this has been answered before, but I have 
>> completed a new rancid install and only need to apply the expect patch 
>> (running on Linux).  
>> 
>> Could someone please provide the syntax to apply the patch manually? 
> 
> see patch(1). 
> 
>> I'm running expect 5.43 on CentOS.  
>> 
>>   
>> 
>> Thank you,
>> Mario  
>> 
>> _______________________________________________
>> Rancid-discuss mailing list
>> Rancid-discuss at shrubbery.net
>> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
 

From mv652 at softhome.net  Tue Dec  1 14:40:44 2009
From: mv652 at softhome.net (mv652 at softhome.net)
Date: Tue, 01 Dec 2009 07:40:44 -0700
Subject: [rancid] Re: Applying Expect Patch Manually
In-Reply-To: <courier.4B15281D.00002B6B@softhome.net> 
References: <courier.4B101AC6.000076E8@softhome.net>
	<20091127203734.GC7853@shrubbery.net>
	<courier.4B15281D.00002B6B@softhome.net>
Message-ID: <courier.4B152AEC.00003647@softhome.net>

Scratch the post below, I just read a reply to someone else's post and the 
solution was there (I had to autoenable <device name>). 


Regards and thanks, 

 

mv652 at softhome.net writes: 

> Thanks.  
> 
> Ok, I couldn't work out how to correctly patch the already-installed expect 
> 5.43.0-5.1, so I uninstalled it and tcl 8.4.13-4.el5 and used the 
> pre-patched versions from your FTP site.  
> 
> They both seemed to compile and install fine.  
> 
> Unfortunately I am still have a 'freezing' with two CISCO 800 devices.  I 
> have 3 catalyst switches (4948 and 3750) and two routers (2811) which work 
> fine.  
> 
> The only difference with the CISCO 800 is that there is a <username> 
> <password> to login rather than simply a <password>.  
> 
> 
> The log file from rancid-run shows:
> clogin error: Error: TIMEOUT reached
> .....
> <cisco-800>: End of run not found  
> 
> 
> A clogin test shows:  
> 
> ./clogin <cisco-800>
> <cisco-800>  
> 
> spawn telnet <cisco-800>
> Trying 172.16.11.1...
> Connected to <cisco-800> (172.16.11.1).
> Escape character is '^]'.  
> 
> 
> User Access Verification  
> 
> Username: administrator
> Password:  
> 
> <cisco-800>#  
> 
> and then it just stays there.  I thought that maybe it was the expect bug 
> mentioned on your website, but it seems the freeze is still happening.  
> 
> 
> Could someone advise on what to check next?  
> 
> 
> Mario  
> 
>   
> 
> john heasley writes:  
> 
>> Fri, Nov 27, 2009 at 11:30:30AM -0700, mv652 at softhome.net:
>>> Hello,   
>>> 
>>> Please excuse this mail if this has been answered before, but I have 
>>> completed a new rancid install and only need to apply the expect patch 
>>> (running on Linux).   
>>> 
>>> Could someone please provide the syntax to apply the patch manually? 
>> 
>> see patch(1).  
>> 
>>> I'm running expect 5.43 on CentOS.   
>>> 
>>>    
>>> 
>>> Thank you,
>>> Mario   
>>> 
>>> _______________________________________________
>>> Rancid-discuss mailing list
>>> Rancid-discuss at shrubbery.net
>>> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>  
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
 

From cgauthier at mapscu.com  Tue Dec  1 19:36:36 2009
From: cgauthier at mapscu.com (Chris Gauthier)
Date: Tue, 1 Dec 2009 11:36:36 -0800
Subject: [rancid] Re: [PATCH] Filter out more keys from the ASA
In-Reply-To: <4B151497.3020809@redhat.com>
References: <4B151497.3020809@redhat.com>
Message-ID: <0A9A5A2BC1C0A94C981AF5FCF2D2F338146F0DFD@mshin01.mapscu.com>

Personally, I would vote against a patch that removes more keys.  If anything, since this is used to archive configurations as well as track changes, I think keys should be included.  Here is where some of my ignorance will probably show, but here goes anyway:  How about a command line option that you can turn on or off hiding the key values?

Chris Gauthier
Network Administrator
MaPS Credit Union
v: 503.375.2445
f: 503.779.1083
http://www.mapscu.com


?For once you have tasted flight you will walk the earth with your eyes turned skywards, for there you have been and there you will long to return.?
?Leonardo da Vinci

-----Original Message-----
From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Michael Stefaniuc
Sent: Tuesday, December 01, 2009 5:05 AM
To: rancid-discuss at shrubbery.net
Subject: [rancid] [PATCH] Filter out more keys from the ASA

Hello,

the attached patch removes more keys from the ASA; basically every line in the format:
 key <anything>
Seen it on the ASAs for TACACS+ and radius keys.

License: Whatever it takes to get it accepted to rancid.

bye
	michael
-- 
Michael Stefaniuc                           Tel.: +49-711-96437-199
Consulting Communications Engineer          Fax.: +49-711-96437-111
--------------------------------------------------------------------
Reg. Adresse: Red Hat GmbH, Otto-Hahn-Strasse 20, 85609 Dornach
Handelsregister: Amtsgericht Muenchen HRB 153243
Gesch?ftsf?hrer: Brendan Lane, Charlie Peters, Michael Cunningham,
                 Charles Cachera

From heas at shrubbery.net  Tue Dec  1 20:06:49 2009
From: heas at shrubbery.net (john heasley)
Date: Tue, 1 Dec 2009 12:06:49 -0800
Subject: [rancid] Re: [PATCH] Filter out more keys from the ASA
In-Reply-To: <0A9A5A2BC1C0A94C981AF5FCF2D2F338146F0DFD@mshin01.mapscu.com>
References: <4B151497.3020809@redhat.com>
	<0A9A5A2BC1C0A94C981AF5FCF2D2F338146F0DFD@mshin01.mapscu.com>
Message-ID: <20091201200649.GZ9706@shrubbery.net>

Tue, Dec 01, 2009 at 11:36:36AM -0800, Chris Gauthier:
> Personally, I would vote against a patch that removes more keys.  If anything, since this is used to archive configurations as well as track changes, I think keys should be included.  Here is where some of my ignorance will probably show, but here goes anyway:  How about a command line option that you can turn on or off hiding the key values?

see rancid.conf(5)

> Chris Gauthier
> Network Administrator
> MaPS Credit Union
> v: 503.375.2445
> f: 503.779.1083
> http://www.mapscu.com
> 
> 
> ?For once you have tasted flight you will walk the earth with your eyes turned skywards, for there you have been and there you will long to return.?
> ?Leonardo da Vinci
> 
> -----Original Message-----
> From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Michael Stefaniuc
> Sent: Tuesday, December 01, 2009 5:05 AM
> To: rancid-discuss at shrubbery.net
> Subject: [rancid] [PATCH] Filter out more keys from the ASA
> 
> Hello,
> 
> the attached patch removes more keys from the ASA; basically every line in the format:
>  key <anything>
> Seen it on the ASAs for TACACS+ and radius keys.
> 
> License: Whatever it takes to get it accepted to rancid.
> 
> bye
> 	michael
> -- 
> Michael Stefaniuc                           Tel.: +49-711-96437-199
> Consulting Communications Engineer          Fax.: +49-711-96437-111
> --------------------------------------------------------------------
> Reg. Adresse: Red Hat GmbH, Otto-Hahn-Strasse 20, 85609 Dornach
> Handelsregister: Amtsgericht Muenchen HRB 153243
> Gesch?ftsf?hrer: Brendan Lane, Charlie Peters, Michael Cunningham,
>                  Charles Cachera
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

From steve.obrien at hdesd.org  Wed Dec  2 01:21:24 2009
From: steve.obrien at hdesd.org (Steve O'Brien)
Date: Tue, 1 Dec 2009 17:21:24 -0800
Subject: [rancid]  Rancid Emailing Blank Diffs and Foundry
Message-ID: <B552F1CEF7EAA349B399923F668DBAFA844DBF83C0@exch01.hdesd.org>

Hi All,
I am sure this was probably covered at some point but google and the
keyword rancid do not make for an easy search...

1.)I am getting notified with blank emails when nothing changes in my
configs, any way to stop that?

2.) I have some foundry gear that gives me some bogus diffs in regards
to fan speed changes, flash space, etc... How to have rancid ignore?

        @@ -64,15 +64,14 @@
          ! Power supply 3 (32005000 - AC - Regular) present, status ok
          ! Power supply 4 (30351100 - AC - Regular) present, status ok
          !=20
        - ! Fan 1 ok, speed (auto): [[1]]<->2<->3<->4
        - ! Fan 2 ok, speed (auto): [[1]]<->2<->3<->4
        - ! Fan 3 ok, speed (auto): [[1]]<->2<->3<->4
        - ! Fan 4 ok, speed (auto): [[1]]<->2<->3<->4
        - ! Fan 5 ok, speed (auto): [[1]]<->2<->3<->4
        - ! Fan 6 ok, speed (auto): [[1]]<->2<->3<->4
        + ! Fan 1 ok
        + ! Fan 2 ok
        + ! Fan 3 ok
        + ! Fan 4 ok
        + ! Fan 5 ok
        + ! Fan 6 ok
          !=20
          !=20
        - ! Fan speed switching temperature thresholds:
          !=20
          !
          !Module:     Module                                   Status
        Ports Starting MAC =20
        Index: configs/router
        =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
        - -- configs/router      (revision 2404)
        @@ -20,9 +20,6 @@
          ! Boot Prom MAC: 000c.dbd1.da8c
          ! Management MAC: 000c.dbd1.da8c
          !
        - !Module: Invalid input -> module
        - !Module: Type ? for a list
        - !
          !Flash: Compressed Pri Code size =3D 2460784, Version 04.1.01Tc1
        (FES04101.bin)
          !Flash: Compressed Sec Code size =3D 3887438, Version
        04.1.01aTc3 (FER04101a.bin)
          !Flash: Compressed Boot-Monitor Image size =3D 50505, Version
        04.1.01Tc4
        Index: configs/s-core-rhs.redmond.k12.or.us
        =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
        - -- configs/router       (revision 2381)
        @@ -51,7 +51,6 @@
          !Flash: Used Configuration Flash Size=3D24572, Max Configuration
        Flash Size=3D262144.
          !
          !Building configuration...
        - !Current configuration : 24569 bytes
          !
          !
          !
       =20

TIA,
Steve
-------------- next part --------------
A non-text attachment was scrubbed...
Name: winmail.dat
Type: application/ms-tnef
Size: 3492 bytes
Desc: not available
Url : http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091201/547919a3/attachment.bin 

From jeremys at rickyninja.net  Wed Dec  2 03:51:27 2009
From: jeremys at rickyninja.net (Jeremy Singletary)
Date: Tue, 1 Dec 2009 20:51:27 -0700
Subject: [rancid] Re: Rancid Emailing Blank Diffs and Foundry
In-Reply-To: <B552F1CEF7EAA349B399923F668DBAFA844DBF83C0@exch01.hdesd.org>
References: <B552F1CEF7EAA349B399923F668DBAFA844DBF83C0@exch01.hdesd.org>
Message-ID: <20091202035127.GA15298@pegasus.billn.net>

Read this thread for information on how to adjust or ignore foundry
output:
http://www.shrubbery.net/pipermail/rancid-discuss/2008-January/002652.html

-jeremy

On 12/01/09, Steve O'Brien <steve.obrien at hdesd.org> said:
> Hi All,
> I am sure this was probably covered at some point but google and the
> keyword rancid do not make for an easy search...
> 
> 1.)I am getting notified with blank emails when nothing changes in my
> configs, any way to stop that?
> 
> 2.) I have some foundry gear that gives me some bogus diffs in regards
> to fan speed changes, flash space, etc... How to have rancid ignore?
> 
>         @@ -64,15 +64,14 @@
>           ! Power supply 3 (32005000 - AC - Regular) present, status ok
>           ! Power supply 4 (30351100 - AC - Regular) present, status ok
>           !=20
>         - ! Fan 1 ok, speed (auto): [[1]]<->2<->3<->4
>         - ! Fan 2 ok, speed (auto): [[1]]<->2<->3<->4
>         - ! Fan 3 ok, speed (auto): [[1]]<->2<->3<->4
>         - ! Fan 4 ok, speed (auto): [[1]]<->2<->3<->4
>         - ! Fan 5 ok, speed (auto): [[1]]<->2<->3<->4
>         - ! Fan 6 ok, speed (auto): [[1]]<->2<->3<->4
>         + ! Fan 1 ok
>         + ! Fan 2 ok
>         + ! Fan 3 ok
>         + ! Fan 4 ok
>         + ! Fan 5 ok
>         + ! Fan 6 ok
>           !=20
>           !=20
>         - ! Fan speed switching temperature thresholds:
>           !=20
>           !
>           !Module:     Module                                   Status
>         Ports Starting MAC =20
>         Index: configs/router
>         =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
>         - -- configs/router      (revision 2404)
>         @@ -20,9 +20,6 @@
>           ! Boot Prom MAC: 000c.dbd1.da8c
>           ! Management MAC: 000c.dbd1.da8c
>           !
>         - !Module: Invalid input -> module
>         - !Module: Type ? for a list
>         - !
>           !Flash: Compressed Pri Code size =3D 2460784, Version 04.1.01Tc1
>         (FES04101.bin)
>           !Flash: Compressed Sec Code size =3D 3887438, Version
>         04.1.01aTc3 (FER04101a.bin)
>           !Flash: Compressed Boot-Monitor Image size =3D 50505, Version
>         04.1.01Tc4
>         Index: configs/s-core-rhs.redmond.k12.or.us
>         =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
>         - -- configs/router       (revision 2381)
>         @@ -51,7 +51,6 @@
>           !Flash: Used Configuration Flash Size=3D24572, Max Configuration
>         Flash Size=3D262144.
>           !
>           !Building configuration...
>         - !Current configuration : 24569 bytes
>           !
>           !
>           !
>        =20
> 
> TIA,
> Steve


> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

From mathiruban at gmail.com  Wed Dec  2 10:02:49 2009
From: mathiruban at gmail.com (Mathiruban Rajagopal)
Date: Wed, 2 Dec 2009 15:32:49 +0530
Subject: [rancid]  Same config diff mail
Message-ID: <136e115c0912020202s1a221ffcjd1c4960c2ded42bb@mail.gmail.com>

Hello all,

After deleting one router from the device group I am getting same config
diff mail.
Pls refer the log below and advice me.

Trying to get all of the configs.
All routers sucessfully completed.
cvs diff: Diffing .
cvs diff: Diffing configs
*cvs diff: cannot find configs/idc1
cvs commit: Examining .
cvs commit: Examining configs
cvs commit: Up-to-date check failed for `configs/idc1'
cvs [commit aborted]: correct above errors first!*
**
**
Rgds,

Mathy.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091202/792ae7a2/attachment.html 

From jethro.binks at strath.ac.uk  Wed Dec  2 13:29:23 2009
From: jethro.binks at strath.ac.uk (Jethro R Binks)
Date: Wed, 2 Dec 2009 13:29:23 +0000 (GMT)
Subject: [rancid] Re: Rancid Emailing Blank Diffs and Foundry
In-Reply-To: <B552F1CEF7EAA349B399923F668DBAFA844DBF83C0@exch01.hdesd.org>
References: <B552F1CEF7EAA349B399923F668DBAFA844DBF83C0@exch01.hdesd.org>
Message-ID: <alpine.BSF.2.00.0912021327020.39876@qrswnz.pp.fgengu.np.hx>

On Tue, 1 Dec 2009, Steve O'Brien wrote:

> 2.) I have some foundry gear that gives me some bogus diffs in regards
> to fan speed changes, flash space, etc... How to have rancid ignore?

I can't remember how much is now in the distributed francid, but my 
ShowChassis subroutine looks like this, to filter out some of that extra 
crud.  It is apparently based on francid.in,v 1.48.

sub ShowChassis {
    my($skip) = 0;

    print STDERR "    In ShowChassis: $_" if ($debug);

    while (<INPUT>) {
        tr/\015//d;
        last if (/^$prompt/);
        next if (/ from /);
        next if (/current temperature/i);

        if (/^---/ || /^$/) { # next section reached
            $skip = 0;
        }
        if (/(POWERS|TEMPERATURE READINGS)/) {
            $skip = 1;
        }
        if (/fan controlled temperature:/i) {
            $skip = 1;
        }
        if (/THERMAL PLANE/) {
            $skip = 1;
        }
        if (/temperature:/i) {
            $skip = 1;
        }
        s/(Fan \d+ \S+), speed .*/$1/;
        if (/speed/i) {
            $skip = 1;
        }
        next if $skip;

        ProcessHistory("CHASSIS","","","! $_");
    }
    ProcessHistory("CHASSIS","","","!\n");
    return(0);
}



.  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .
Jethro R Binks
Computing Officer, IT Services, University Of Strathclyde, Glasgow, UK

From dpz at berkeley.edu  Wed Dec  2 17:56:00 2009
From: dpz at berkeley.edu (David Paul Zimmerman)
Date: Wed, 2 Dec 2009 09:56:00 -0800
Subject: [rancid] Re: freebsd, tcl and expect
In-Reply-To: <m2k4xcxfme.wl%randy@psg.com>
References: <m2vdgx3ix0.wl%randy@psg.com>
	<20091127064115.GL22013@shrubbery.net>
	<m2k4xcxfme.wl%randy@psg.com>
Message-ID: <3FE481DA-8185-40C1-9EEF-DA43B6CD9279@berkeley.edu>

On Nov 27, 2009, at 5:27 AM, Randy Bush wrote:

> i was wondering if any fellow freebsd users had tried a newew tcl,
> e.g. 8.4.19 or 8.5.8 or 8.6.b.1, and would be willing to declare it
> usable.
>
> randy

dpz at pourri$ uname -s -r
FreeBSD 7.2-RELEASE-p3

dpz at pourri$ pkg_info | egrep "rancid-|tcl|expect"
expect-nox11-5.44.1.11_1 A sophisticated scripter based on tcl/tk
rancid-2.3.2        Really Awesome New Cisco confIg Differ
tcl-8.4.19_3,1      Tool Command Language

Running solid for months, no hangs.

	dp


From heas at shrubbery.net  Thu Dec  3 00:09:10 2009
From: heas at shrubbery.net (john heasley)
Date: Wed, 2 Dec 2009 16:09:10 -0800
Subject: [rancid] Re: Rancid Emailing Blank Diffs and Foundry
In-Reply-To: <alpine.BSF.2.00.0912021327020.39876@qrswnz.pp.fgengu.np.hx>
References: <B552F1CEF7EAA349B399923F668DBAFA844DBF83C0@exch01.hdesd.org>
	<alpine.BSF.2.00.0912021327020.39876@qrswnz.pp.fgengu.np.hx>
Message-ID: <20091203000910.GI18370@shrubbery.net>

Wed, Dec 02, 2009 at 01:29:23PM +0000, Jethro R Binks:
> On Tue, 1 Dec 2009, Steve O'Brien wrote:
> 
> > 2.) I have some foundry gear that gives me some bogus diffs in regards
> > to fan speed changes, flash space, etc... How to have rancid ignore?
> 
> I can't remember how much is now in the distributed francid, but my 
> ShowChassis subroutine looks like this, to filter out some of that extra 
> crud.  It is apparently based on francid.in,v 1.48.

i believe these are all in rancid 2.3.2.

> sub ShowChassis {
>     my($skip) = 0;
> 
>     print STDERR "    In ShowChassis: $_" if ($debug);
> 
>     while (<INPUT>) {
>         tr/\015//d;
>         last if (/^$prompt/);
>         next if (/ from /);
>         next if (/current temperature/i);
> 
>         if (/^---/ || /^$/) { # next section reached
>             $skip = 0;
>         }
>         if (/(POWERS|TEMPERATURE READINGS)/) {
>             $skip = 1;
>         }
>         if (/fan controlled temperature:/i) {
>             $skip = 1;
>         }
>         if (/THERMAL PLANE/) {
>             $skip = 1;
>         }
>         if (/temperature:/i) {
>             $skip = 1;
>         }
>         s/(Fan \d+ \S+), speed .*/$1/;
>         if (/speed/i) {
>             $skip = 1;
>         }
>         next if $skip;
> 
>         ProcessHistory("CHASSIS","","","! $_");
>     }
>     ProcessHistory("CHASSIS","","","!\n");
>     return(0);
> }
> 
> 
> 
> .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .
> Jethro R Binks
> Computing Officer, IT Services, University Of Strathclyde, Glasgow, UK
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

From heas at shrubbery.net  Thu Dec  3 00:13:22 2009
From: heas at shrubbery.net (john heasley)
Date: Wed, 2 Dec 2009 16:13:22 -0800
Subject: [rancid] Re: Rancid Emailing Blank Diffs and Foundry
In-Reply-To: <20091202035127.GA15298@pegasus.billn.net>
References: <B552F1CEF7EAA349B399923F668DBAFA844DBF83C0@exch01.hdesd.org>
	<20091202035127.GA15298@pegasus.billn.net>
Message-ID: <20091203001322.GJ18370@shrubbery.net>

Tue, Dec 01, 2009 at 08:51:27PM -0700, Jeremy Singletary:
> Read this thread for information on how to adjust or ignore foundry
> output:
> http://www.shrubbery.net/pipermail/rancid-discuss/2008-January/002652.html

rancid 2.3.2 also has this fix.

From heas at shrubbery.net  Thu Dec  3 00:19:28 2009
From: heas at shrubbery.net (john heasley)
Date: Wed, 2 Dec 2009 16:19:28 -0800
Subject: [rancid] Re: Rancid Emailing Blank Diffs and Foundry
In-Reply-To: <B552F1CEF7EAA349B399923F668DBAFA844DBF83C0@exch01.hdesd.org>
References: <B552F1CEF7EAA349B399923F668DBAFA844DBF83C0@exch01.hdesd.org>
Message-ID: <20091203001928.GM18370@shrubbery.net>

Tue, Dec 01, 2009 at 05:21:24PM -0800, Steve O'Brien:
> 1.)I am getting notified with blank emails when nothing changes in my
> configs, any way to stop that?

it shouldnt occur.  for what device types?  are control characters getting
into the config?  is the cvs out-of-date?

> 2.) I have some foundry gear that gives me some bogus diffs in regards
> to fan speed changes, flash space, etc... How to have rancid ignore?

this is a weird diff.  it looks like rancid pre-2.3.2 vs 2.3.2.

>         @@ -64,15 +64,14 @@
>           ! Power supply 3 (32005000 - AC - Regular) present, status ok
>           ! Power supply 4 (30351100 - AC - Regular) present, status ok
>           !=20
>         - ! Fan 1 ok, speed (auto): [[1]]<->2<->3<->4
>         - ! Fan 2 ok, speed (auto): [[1]]<->2<->3<->4
>         - ! Fan 3 ok, speed (auto): [[1]]<->2<->3<->4
>         - ! Fan 4 ok, speed (auto): [[1]]<->2<->3<->4
>         - ! Fan 5 ok, speed (auto): [[1]]<->2<->3<->4
>         - ! Fan 6 ok, speed (auto): [[1]]<->2<->3<->4
>         + ! Fan 1 ok
>         + ! Fan 2 ok
>         + ! Fan 3 ok
>         + ! Fan 4 ok
>         + ! Fan 5 ok
>         + ! Fan 6 ok
>           !=20
>           !=20
>         - ! Fan speed switching temperature thresholds:
>           !=20
>           !
>           !Module:     Module                                   Status
>         Ports Starting MAC =20
>         Index: configs/router
>         =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
>         - -- configs/router      (revision 2404)
>         @@ -20,9 +20,6 @@
>           ! Boot Prom MAC: 000c.dbd1.da8c
>           ! Management MAC: 000c.dbd1.da8c
>           !
>         - !Module: Invalid input -> module
>         - !Module: Type ? for a list
>         - !
>           !Flash: Compressed Pri Code size =3D 2460784, Version 04.1.01Tc1
>         (FES04101.bin)
>           !Flash: Compressed Sec Code size =3D 3887438, Version
>         04.1.01aTc3 (FER04101a.bin)
>           !Flash: Compressed Boot-Monitor Image size =3D 50505, Version
>         04.1.01Tc4
>         Index: configs/s-core-rhs.redmond.k12.or.us
>         =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
>         - -- configs/router       (revision 2381)
>         @@ -51,7 +51,6 @@
>           !Flash: Used Configuration Flash Size=3D24572, Max Configuration
>         Flash Size=3D262144.
>           !
>           !Building configuration...
>         - !Current configuration : 24569 bytes
>           !
>           !
>           !
>        =20
> 
> TIA,
> Steve


> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

From randy at psg.com  Thu Dec  3 06:58:33 2009
From: randy at psg.com (Randy Bush)
Date: Wed, 02 Dec 2009 22:58:33 -0800
Subject: [rancid] Re: freebsd, tcl and expect
In-Reply-To: <3FE481DA-8185-40C1-9EEF-DA43B6CD9279@berkeley.edu>
References: <m2vdgx3ix0.wl%randy@psg.com>
	<20091127064115.GL22013@shrubbery.net>
	<m2k4xcxfme.wl%randy@psg.com>
	<3FE481DA-8185-40C1-9EEF-DA43B6CD9279@berkeley.edu>
Message-ID: <m2pr6wlf1i.wl%randy@psg.com>

> dpz at pourri$ uname -s -r
> FreeBSD 7.2-RELEASE-p3
> 
> dpz at pourri$ pkg_info | egrep "rancid-|tcl|expect"
> expect-nox11-5.44.1.11_1 A sophisticated scripter based on tcl/tk
> rancid-2.3.2        Really Awesome New Cisco confIg Differ
> tcl-8.4.19_3,1      Tool Command Language

thanks

maybe i will try to break things if my meeting gets boring tomorrow

randy

From ronnij at gmail.com  Thu Dec  3 09:21:49 2009
From: ronnij at gmail.com (Ronni Jensen)
Date: Thu, 3 Dec 2009 10:21:49 +0100
Subject: [rancid]  Problems with rancid CVS
Message-ID: <7a76d30f0912030121v54a940far2514d8b5d35e6f8d@mail.gmail.com>

Hello,

I have rancid running (nearly). but have some issues with CVS.. I hope you
can help! I have the following in rancid.conf:

*BASEDIR=/var/rancid; export BASEDIR*
*LIST_OF_GROUPS="firewalls ipt accesspoints switches"*

And after "rancis-cvs" I have the following dirs in /var/rancid/ as the
above suggests:

*drwxr-x--- 4 rancid rancid 4096 2009-12-03 10:08 accesspoints
drwxrwxr-x 4 rancid rancid 4096 2009-12-02 14:49 CVS
drwxr-x--- 3 rancid rancid 4096 2009-12-03 10:01 firewalls
drwxr-x--- 3 rancid rancid 4096 2009-12-03 10:01 ipt
drwxr-x--- 2 rancid rancid 4096 2009-12-02 14:29 logs
drwxr-xr-x 3 rancid rancid 4096 2009-12-03 10:10 switches*

It retrieves configs from all groups, but only for "accesspoints" it does
the CVS stuff corretly:

*starting: Thu Dec 3 10:12:32 CET 2009*
*Trying to get all of the configs.*
*cvs diff: Diffing .
cvs diff: Diffing configs
cvs commit: Examining .
cvs commit: Examining configs*
*ending: Thu Dec 3 10:20:11 CET 2009*


For the other groups e.g. "switches" it looks like:

*cvs [add aborted]: there is no version here; do 'cvs checkout' first
cvs added missing router umus-sw05
cvs status: cannot open CVS/Entries for reading: No such file or directory
cvs status: use `cvs add' to create an entry for umus-sw06
cvs add: in directory .:
cvs [add aborted]: there is no version here; do 'cvs checkout' first
cvs added missing router umus-sw06*

*Trying to get all of the configs.
All routers sucessfully completed.*
*cvs diff: in directory .:
cvs [diff aborted]: there is no version here; run 'cvs checkout' first
cvs commit: in directory .:
cvs [commit aborted]: there is no version here; run 'cvs checkout' first*
*ending: Thu Dec 3 10:02:23 CET 2009*



I don't know if this is the error.. but as you can see only accesspoints dir
has the subdir "CVS" to it:


[rancid at LinuxSrv ~]$ ls -la /var/rancid/*
/var/rancid/accesspoints:
total 36
drwxr-x---  4 rancid rancid 4096 2009-12-03 10:17 .
drwxr-xr-x 10 rancid rancid 4096 2009-12-02 15:01 ..
drwxr-x---  3 rancid rancid 4096 2009-12-03 10:17 configs
drwxr-x---  2 rancid rancid 4096 2009-12-02 15:54 CVS
-rw-r-----  1 rancid rancid   47 2009-12-02 15:37 .cvsignore
-rw-r-----  1 rancid rancid  774 2009-12-02 15:36 router.db
-rw-r-----  1 rancid rancid  650 2009-12-03 10:12 routers.all
-rw-r-----  1 rancid rancid    0 2009-12-03 10:12 routers.down
-rw-r-----  1 rancid rancid  650 2009-12-03 10:12 routers.up
-rw-r-----  1 rancid rancid   19 2009-12-03 10:17 routers.up.missed
/var/rancid/CVS:
total 20
drwxrwxr-x  4 rancid rancid 4096 2009-12-02 14:49 .
drwxr-xr-x 10 rancid rancid 4096 2009-12-02 15:01 ..
drwxrwxr-x  3 rancid rancid 4096 2009-12-03 10:12 accesspoints
drwxrwxr-x  3 rancid rancid 4096 2009-12-02 15:54 CVSROOT
-rw-r-----  1 rancid rancid   21 2009-12-02 14:49 Entries.Log
/var/rancid/firewalls:
total 16
drwxr-x---  3 rancid rancid 4096 2009-12-03 10:01 .
drwxr-xr-x 10 rancid rancid 4096 2009-12-02 15:01 ..
drwxr-x---  2 rancid rancid 4096 2009-12-02 14:29 configs
-rw-r-----  1 rancid rancid   47 2009-12-02 15:01 .cvsignore
-rw-r-----  1 rancid rancid    0 2009-12-02 14:29 router.db
-rw-r-----  1 rancid rancid    0 2009-12-03 10:01 routers.all
-rw-r-----  1 rancid rancid    0 2009-12-03 10:01 routers.down
-rw-r-----  1 rancid rancid    0 2009-12-03 10:01 routers.up
/var/rancid/ipt:
total 16
drwxr-x---  3 rancid rancid 4096 2009-12-03 10:01 .
drwxr-xr-x 10 rancid rancid 4096 2009-12-02 15:01 ..
drwxr-x---  2 rancid rancid 4096 2009-12-02 14:29 configs
-rw-r-----  1 rancid rancid   47 2009-12-02 15:01 .cvsignore
-rw-r-----  1 rancid rancid    0 2009-12-02 14:29 router.db
-rw-r-----  1 rancid rancid    0 2009-12-03 10:01 routers.all
-rw-r-----  1 rancid rancid    0 2009-12-03 10:01 routers.down
-rw-r-----  1 rancid rancid    0 2009-12-03 10:01 routers.up
/var/rancid/logs:
total 8
drwxr-x---  2 rancid rancid 4096 2009-12-02 14:29 .
drwxr-xr-x 10 rancid rancid 4096 2009-12-02 15:01 ..
/var/rancid/mpls:
total 12
drwxr-x---  3 rancid rancid 4096 2009-12-02 14:29 .
drwxr-xr-x 10 rancid rancid 4096 2009-12-02 15:01 ..
drwxr-x---  2 rancid rancid 4096 2009-12-02 14:29 configs
-rw-r-----  1 rancid rancid    0 2009-12-02 14:29 router.db
-rw-r-----  1 rancid rancid    0 2009-12-02 14:29 routers.all
-rw-r-----  1 rancid rancid    0 2009-12-02 14:29 routers.down
-rw-r-----  1 rancid rancid    0 2009-12-02 14:29 routers.up
/var/rancid/switches:
total 28
drwxr-xr-x  3 rancid rancid 4096 2009-12-03 10:10 .
drwxr-xr-x 10 rancid rancid 4096 2009-12-02 15:01 ..
drwxr-x---  2 rancid rancid 4096 2009-12-03 10:10 configs
-rw-r-----  1 rancid rancid   47 2009-12-02 14:53 .cvsignore
-rw-r--r--  1 rancid rancid  618 2009-11-28 13:29 router.db
-rw-r-----  1 rancid rancid    0 2009-12-02 14:29 router.db.dist
-rw-r-----  1 rancid rancid  525 2009-12-03 10:08 routers.all
-rw-r-----  1 rancid rancid    0 2009-12-03 10:08 routers.down
-rw-r-----  1 rancid rancid  525 2009-12-03 10:08 routers.up

I tried re-run rancid-cvs to see if it would do the trick, but no.. I hope
someone here can help to a solution?

Best regards,
ronnij
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091203/1a2ad91f/attachment.html 

From steve.obrien at hdesd.org  Thu Dec  3 17:07:07 2009
From: steve.obrien at hdesd.org (Steve O'Brien)
Date: Thu, 3 Dec 2009 09:07:07 -0800
Subject: [rancid] Re: Rancid Emailing Blank Diffs and Foundry
In-Reply-To: <20091203001322.GJ18370@shrubbery.net>
References: <B552F1CEF7EAA349B399923F668DBAFA844DBF83C0@exch01.hdesd.org>
	<20091202035127.GA15298@pegasus.billn.net>
	<20091203001322.GJ18370@shrubbery.net>
Message-ID: <B552F1CEF7EAA349B399923F668DBAFA844DBF83C3@exch01.hdesd.org>

On Wed, 2009-12-02 at 16:13 -0800, john heasley wrote:
> rancid 2.3.2 also has this fix.

I am running 2.3.2.  I am looking at trying to get those lines ignored.

Thanks,
Steve
-------------- next part --------------
A non-text attachment was scrubbed...
Name: winmail.dat
Type: application/ms-tnef
Size: 3017 bytes
Desc: not available
Url : http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091203/fe619b3a/attachment.bin 

From Dan_Mitton at YMP.GOV  Thu Dec  3 19:50:07 2009
From: Dan_Mitton at YMP.GOV (Dan_Mitton at YMP.GOV)
Date: Thu, 3 Dec 2009 11:50:07 -0800
Subject: [rancid] Re: freebsd, tcl and expect
In-Reply-To: <m2pr6wlf1i.wl%randy@psg.com>
Message-ID: <OFEA77F1F9.38293765-ON88257681.006CE46B-88257681.006CF583@YMP.GOV>

Where can I get the expect-nox11-5.44.1.11_1 package??

Thanks,

Dan



Sent by:        rancid-discuss-bounces at shrubbery.net
To:     David Paul Zimmerman <dpz at berkeley.edu>
cc:     rancid <rancid-discuss at shrubbery.net> (bcc: Dan Mitton/YD/RWDOE)
Subject:        [rancid] Re: freebsd, tcl and expect
LSN: Not Relevant - Not Privileged
User Filed as: Excl/AdminMgmt-14-4/QA:N/A

> dpz at pourri$ uname -s -r
> FreeBSD 7.2-RELEASE-p3
> 
> dpz at pourri$ pkg_info | egrep "rancid-|tcl|expect"
> expect-nox11-5.44.1.11_1 A sophisticated scripter based on tcl/tk
> rancid-2.3.2        Really Awesome New Cisco confIg Differ
> tcl-8.4.19_3,1      Tool Command Language

thanks

maybe i will try to break things if my meeting gets boring tomorrow

randy
_______________________________________________
Rancid-discuss mailing list
Rancid-discuss at shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091203/6e4f82d3/attachment.html 

From adudek16 at gmail.com  Thu Dec  3 20:18:41 2009
From: adudek16 at gmail.com (Aaron Dudek)
Date: Thu, 3 Dec 2009 15:18:41 -0500
Subject: [rancid] Re: freebsd, tcl and expect
In-Reply-To: <OFEA77F1F9.38293765-ON88257681.006CE46B-88257681.006CF583@YMP.GOV>
References: <m2pr6wlf1i.wl%randy@psg.com>
	<OFEA77F1F9.38293765-ON88257681.006CE46B-88257681.006CF583@YMP.GOV>
Message-ID: <96ba9bee0912031218o2cffe85es5494fb014bb1c7f6@mail.gmail.com>

ftp://ftp.swin.edu.au/freebsd/ports/i386/packages-8-current/tcl/expect-nox11-5.44.1.11_1.tbz

more sites listed here.
http://www.filewatcher.com/m/expect-nox11-5.44.1.11_1.tbz.35.0.0.html

2009/12/3  <Dan_Mitton at ymp.gov>:
>
> Where can I get the expect-nox11-5.44.1.11_1 package??
>
> Thanks,
>
> Dan
>
>
> Sent by: ? ? ? ?rancid-discuss-bounces at shrubbery.net
>
> To: ? ? ? ?David Paul Zimmerman <dpz at berkeley.edu>
> cc: ? ? ? ?rancid <rancid-discuss at shrubbery.net> (bcc: Dan Mitton/YD/RWDOE)
> Subject: ? ? ? ?[rancid] Re: freebsd, tcl and expect
>
> LSN: Not Relevant - Not Privileged
> User Filed as: Excl/AdminMgmt-14-4/QA:N/A
>
>> dpz at pourri$ uname -s -r
>> FreeBSD 7.2-RELEASE-p3
>>
>> dpz at pourri$ pkg_info | egrep "rancid-|tcl|expect"
>> expect-nox11-5.44.1.11_1 A sophisticated scripter based on tcl/tk
>> rancid-2.3.2 ? ? ? ?Really Awesome New Cisco confIg Differ
>> tcl-8.4.19_3,1 ? ? ?Tool Command Language
>
> thanks
>
> maybe i will try to break things if my meeting gets boring tomorrow
>
> randy
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>
>
>
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>

From heas at shrubbery.net  Thu Dec  3 20:51:52 2009
From: heas at shrubbery.net (john heasley)
Date: Thu, 3 Dec 2009 12:51:52 -0800
Subject: [rancid] Re: Rancid Emailing Blank Diffs and Foundry
In-Reply-To: <B552F1CEF7EAA349B399923F668DBAFA844DBF83C3@exch01.hdesd.org>
References: <B552F1CEF7EAA349B399923F668DBAFA844DBF83C0@exch01.hdesd.org>
	<20091202035127.GA15298@pegasus.billn.net>
	<20091203001322.GJ18370@shrubbery.net>
	<B552F1CEF7EAA349B399923F668DBAFA844DBF83C3@exch01.hdesd.org>
Message-ID: <20091203205150.GQ16944@shrubbery.net>

Thu, Dec 03, 2009 at 09:07:07AM -0800, Steve O'Brien:
> On Wed, 2009-12-02 at 16:13 -0800, john heasley wrote:
> > rancid 2.3.2 also has this fix.
> 
> I am running 2.3.2.  I am looking at trying to get those lines ignored.

Well, this filtering:
>         @@ -64,15 +64,14 @@  
>           ! Power supply 3 (32005000 - AC - Regular) present, status ok
>           ! Power supply 4 (30351100 - AC - Regular) present, status ok
>           !=20
>         - ! Fan 1 ok, speed (auto): [[1]]<->2<->3<->4
>         - ! Fan 2 ok, speed (auto): [[1]]<->2<->3<->4
>         - ! Fan 3 ok, speed (auto): [[1]]<->2<->3<->4
>         - ! Fan 4 ok, speed (auto): [[1]]<->2<->3<->4
>         - ! Fan 5 ok, speed (auto): [[1]]<->2<->3<->4
>         - ! Fan 6 ok, speed (auto): [[1]]<->2<->3<->4
>         + ! Fan 1 ok
>         + ! Fan 2 ok
>         + ! Fan 3 ok
>         + ! Fan 4 ok
>         + ! Fan 5 ok
>         + ! Fan 6 ok

is already in 2.3.2.  so, please make sure that you dont have two
versions installed or have some alpha/rc version.

From adudek16 at gmail.com  Thu Dec  3 21:25:33 2009
From: adudek16 at gmail.com (Aaron Dudek)
Date: Thu, 3 Dec 2009 16:25:33 -0500
Subject: [rancid] Re: freebsd, tcl and expect
In-Reply-To: <OFD1B7E4E6.4A0CEAC9-ON88257681.0073A771-88257681.0073AE82@YMP.GOV>
References: <96ba9bee0912031218o2cffe85es5494fb014bb1c7f6@mail.gmail.com> 
	<OFD1B7E4E6.4A0CEAC9-ON88257681.0073A771-88257681.0073AE82@YMP.GOV>
Message-ID: <96ba9bee0912031325v721eed4ex1f79011cab5be790@mail.gmail.com>

Hmm. weird


On Thu, Dec 3, 2009 at 16:03,  <Dan_Mitton at ymp.gov> wrote:
>
> Nope, not out there.
>
>
>
> To: ? ? ? ?Dan_Mitton at ymp.gov
> cc: ? ? ? ?Randy Bush <randy at psg.com>, rancid <rancid-discuss at shrubbery.net>
> Subject: ? ? ? ?Re: [rancid] Re: freebsd, tcl and expect
>
> LSN: Not Relevant - Not Privileged
> User Filed as: Excl/AdminMgmt-14-4/QA:N/A
>
> ftp://ftp.swin.edu.au/freebsd/ports/i386/packages-8-current/tcl/expect-nox11-5.44.1.11_1.tbz
>
> more sites listed here.
> http://www.filewatcher.com/m/expect-nox11-5.44.1.11_1.tbz.35.0.0.html
>
> 2009/12/3 ?<Dan_Mitton at ymp.gov>:
>>
>> Where can I get the expect-nox11-5.44.1.11_1 package??
>>
>> Thanks,
>>
>> Dan
>>
>>
>> Sent by: ? ? ? ?rancid-discuss-bounces at shrubbery.net
>>
>> To: ? ? ? ?David Paul Zimmerman <dpz at berkeley.edu>
>> cc: ? ? ? ?rancid <rancid-discuss at shrubbery.net> (bcc: Dan
>> Mitton/YD/RWDOE)
>> Subject: ? ? ? ?[rancid] Re: freebsd, tcl and expect
>>
>> LSN: Not Relevant - Not Privileged
>> User Filed as: Excl/AdminMgmt-14-4/QA:N/A
>>
>>> dpz at pourri$ uname -s -r
>>> FreeBSD 7.2-RELEASE-p3
>>>
>>> dpz at pourri$ pkg_info | egrep "rancid-|tcl|expect"
>>> expect-nox11-5.44.1.11_1 A sophisticated scripter based on tcl/tk
>>> rancid-2.3.2 ? ? ? ?Really Awesome New Cisco confIg Differ
>>> tcl-8.4.19_3,1 ? ? ?Tool Command Language
>>
>> thanks
>>
>> maybe i will try to break things if my meeting gets boring tomorrow
>>
>> randy
>> _______________________________________________
>> Rancid-discuss mailing list
>> Rancid-discuss at shrubbery.net
>> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>>
>>
>>
>> _______________________________________________
>> Rancid-discuss mailing list
>> Rancid-discuss at shrubbery.net
>> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>>
>
>
>

From vishal.ud at directi.com  Fri Dec  4 09:21:35 2009
From: vishal.ud at directi.com (vishal.ud)
Date: Fri, 04 Dec 2009 14:51:35 +0530
Subject: [rancid]  CVS Errors
Message-ID: <4B18D49F.80400@directi.com>

Hey ,

i get the below errors in my log files wen rancid runs

cvs status: cannot open CVS/Entries for reading: Permission denied
cvs [status aborted]: cannot open file 172.16.134.13 for comparing: 
Permission denied

any idea as to what cud have caused this ??

From vishal.ud at directi.com  Fri Dec  4 11:08:07 2009
From: vishal.ud at directi.com (vishal.ud)
Date: Fri, 04 Dec 2009 16:38:07 +0530
Subject: [rancid] Re: CVS Errors
In-Reply-To: <4B18D49F.80400@directi.com>
References: <4B18D49F.80400@directi.com>
Message-ID: <4B18ED97.8010702@directi.com>

my /CVS/Switches directory and all files inside have read permission for 
the rancid user . I don understand what cud have caused the below error

rancid at m1-vs-rancid:~/var/CVS/Switches/configs$ ls -al
total 152
drwxrwxr-x 2 rancid rancid 4096 2009-12-04 15:55 .
drwxrwxr-x 3 rancid rancid 4096 2009-12-04 15:55 ..
-r--r--r-- 1 root   root   3607 2009-11-30 22:42 172.16.130.10,v
-r--r--r-- 1 rancid rancid 3471 2009-11-24 16:40 172.16.130.11,v
-r--r--r-- 1 rancid rancid 3473 2009-11-24 16:40 172.16.130.12,v
-r--r--r-- 1 rancid rancid 2497 2009-11-30 22:20 172.16.130.13,v
-r--r--r-- 1 rancid rancid 4042 2009-11-27 17:54 172.16.130.1,v
-r--r--r-- 1 rancid rancid 3165 2009-11-24 16:40 172.16.131.5,v
-r--r--r-- 1 rancid rancid 3214 2009-11-24 16:40 172.16.131.6,v
-r--r--r-- 1 rancid rancid 3251 2009-11-24 16:40 172.16.131.7,v
-r--r--r-- 1 rancid rancid 3318 2009-11-24 16:40 172.16.131.8,v
-r--r--r-- 1 rancid rancid 3168 2009-11-24 16:40 172.16.132.10,v
-r--r--r-- 1 rancid rancid 3168 2009-11-24 16:40 172.16.132.11,v
-r--r--r-- 1 rancid rancid 3168 2009-11-24 16:40 172.16.132.12,v
-r--r--r-- 1 rancid rancid 3168 2009-11-24 16:40 172.16.132.13,v
-r--r--r-- 1 rancid rancid 1726 2009-11-24 16:40 172.16.132.14,v
-r--r--r-- 1 rancid rancid 3169 2009-11-24 16:40 172.16.132.5,v
-r--r--r-- 1 rancid rancid 3169 2009-11-24 16:40 172.16.132.6,v
-r--r--r-- 1 rancid rancid 3169 2009-11-24 16:40 172.16.132.7,v
-r--r--r-- 1 rancid rancid 3169 2009-11-24 16:40 172.16.132.8,v
-r--r--r-- 1 rancid rancid 3169 2009-11-24 16:40 172.16.132.9,v
-r--r--r-- 1 rancid rancid 3246 2009-11-24 16:40 172.16.134.10,v
-r--r--r-- 1 rancid rancid 3255 2009-11-24 16:40 172.16.134.11,v
-r--r--r-- 1 rancid rancid 3168 2009-11-24 16:40 172.16.134.12,v
-r--r--r-- 1 rancid rancid 3332 2009-11-24 16:40 172.16.134.13,v
-r--r--r-- 1 rancid rancid 3169 2009-11-24 16:40 172.16.134.5,v
-r--r--r-- 1 rancid rancid 3241 2009-11-24 16:40 172.16.134.6,v
-r--r--r-- 1 rancid rancid 3241 2009-11-24 16:40 172.16.134.7,v
-r--r--r-- 1 rancid rancid 3169 2009-11-24 16:40 172.16.134.8,v
-r--r--r-- 1 rancid rancid 3413 2009-11-27 17:54 172.16.134.9,v
-r--r--r-- 1 rancid rancid 1546 2009-11-24 16:40 172.16.136.10,v
-r--r--r-- 1 rancid rancid 1517 2009-11-24 16:40 172.16.136.11,v
-r--r--r-- 1 rancid rancid 1667 2009-11-24 16:40 172.16.136.12,v
-r--r--r-- 1 rancid rancid 1678 2009-11-24 16:40 172.16.136.5,v
-r--r--r-- 1 rancid rancid 1593 2009-11-24 16:40 172.16.136.6,v
-r--r--r-- 1 rancid rancid 1593 2009-11-24 16:40 172.16.136.7,v
-r--r--r-- 1 rancid rancid 1593 2009-11-24 16:40 172.16.136.8,v
-r--r--r-- 1 rancid rancid 1547 2009-11-24 16:40 172.16.136.9,v


vishal.ud wrote:
> Hey ,
>
> i get the below errors in my log files wen rancid runs
>
> cvs status: cannot open CVS/Entries for reading: Permission denied
> cvs [status aborted]: cannot open file 172.16.134.13 for comparing: 
> Permission denied
>
> any idea as to what cud have caused this ??
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>   


From shane.kavanagh at gmail.com  Fri Dec  4 11:39:07 2009
From: shane.kavanagh at gmail.com (Shane Kavanagh)
Date: Fri, 4 Dec 2009 11:39:07 +0000
Subject: [rancid] Rancid Ignores autoenable for host name but not IP address
Message-ID: <8cf6dff10912040339j2bb7e94cpfcaa214568578e2@mail.gmail.com>

All
(are there parameters on the hostname)

I have a problem with Rancid, its ignoring autoenable (and method) for new
hostnames..

Here is running clogin manually for the IP first which works and then
Hostname which does not, also see snip from my .cloginrc

*rancid at gbedub-rancid01:~$ clogin 10.132.50.103*
10.132.50.103
spawn telnet 10.132.50.103
Trying 10.132.50.103...
Connected to 10.132.50.103.
Escape character is '^]'.


User Access Verification

Username: shanek
Password:
GBEHP-SWH-Prd-WAD101#
GBEHP-SWH-Prd-WAD101#exit
Connection closed by foreign host.


*rancid at gbedub-rancid01:~$ clogin GBEHP-SWH-Prd-WAD101*
gbehp-swh-prd-wad101
spawn telnet gbehp-swh-prd-wad101
Trying 10.132.50.103...
Connected to gbehp-swh-prd-wad101.GBE.local.
Escape character is '^]'.


User Access Verification

Username: shanek
Password:
GBEHP-SWH-Prd-WAD101#*
Error: TIMEOUT reached*
rancid at gbedub-rancid01:~$


Snip from

rancid at gbedub-rancid01:~$ ls -l .cloginrc
-rw-r----- 1 rancid rancid 6333 2009-12-04 11:25 .cloginrc

 add method GBEHP-SWH-Prd-WAD101 telnet
# add method GBEHP-SWH-Prd-WAD101 ssh
 add autoenable GBEHP-SWH-Prd-WAD101 1
 add autoenable 10.132.50.103 1
 add method * telnet
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091204/3ded3f63/attachment.html 

From Dan_Mitton at YMP.GOV  Thu Dec  3 21:03:33 2009
From: Dan_Mitton at YMP.GOV (Dan_Mitton at YMP.GOV)
Date: Thu, 3 Dec 2009 13:03:33 -0800
Subject: [rancid] Re: freebsd, tcl and expect
In-Reply-To: <96ba9bee0912031218o2cffe85es5494fb014bb1c7f6@mail.gmail.com>
Message-ID: <OFD1B7E4E6.4A0CEAC9-ON88257681.0073A771-88257681.0073AE82@YMP.GOV>

Nope, not out there.




To:     Dan_Mitton at ymp.gov
cc:     Randy Bush <randy at psg.com>, rancid <rancid-discuss at shrubbery.net> 
Subject:        Re: [rancid] Re: freebsd, tcl and expect
LSN: Not Relevant - Not Privileged
User Filed as: Excl/AdminMgmt-14-4/QA:N/A

ftp://ftp.swin.edu.au/freebsd/ports/i386/packages-8-current/tcl/expect-nox11-5.44.1.11_1.tbz


more sites listed here.
http://www.filewatcher.com/m/expect-nox11-5.44.1.11_1.tbz.35.0.0.html

2009/12/3  <Dan_Mitton at ymp.gov>:
>
> Where can I get the expect-nox11-5.44.1.11_1 package??
>
> Thanks,
>
> Dan
>
>
> Sent by:        rancid-discuss-bounces at shrubbery.net
>
> To:        David Paul Zimmerman <dpz at berkeley.edu>
> cc:        rancid <rancid-discuss at shrubbery.net> (bcc: Dan 
Mitton/YD/RWDOE)
> Subject:        [rancid] Re: freebsd, tcl and expect
>
> LSN: Not Relevant - Not Privileged
> User Filed as: Excl/AdminMgmt-14-4/QA:N/A
>
>> dpz at pourri$ uname -s -r
>> FreeBSD 7.2-RELEASE-p3
>>
>> dpz at pourri$ pkg_info | egrep "rancid-|tcl|expect"
>> expect-nox11-5.44.1.11_1 A sophisticated scripter based on tcl/tk
>> rancid-2.3.2        Really Awesome New Cisco confIg Differ
>> tcl-8.4.19_3,1      Tool Command Language
>
> thanks
>
> maybe i will try to break things if my meeting gets boring tomorrow
>
> randy
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>
>
>
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091203/2816f8af/attachment.html 

From jamess at newedgenetworks.com  Fri Dec  4 16:35:04 2009
From: jamess at newedgenetworks.com (Sutherland, James)
Date: Fri, 4 Dec 2009 08:35:04 -0800
Subject: [rancid]  missed cmd(s): write term
In-Reply-To: <8cf6dff10912040339j2bb7e94cpfcaa214568578e2@mail.gmail.com>
References: <8cf6dff10912040339j2bb7e94cpfcaa214568578e2@mail.gmail.com>
Message-ID: <D26D9D1F067FA64897EBDE17791BA84602E8BD81@rancor.ad.newedgenetworks.com>

Suddenly rancid cannot talk to one of my routers.  Router is a 7206,
just like many others.  clogin against this router works fine.  A packet
trace shows that all the data gets sent to rancid, even on write term
the routers sends it whole config and rancid sends "exit" after that.

 

Here is what the logs show.  Anyone have any ideas?

 

The router that doesn't work is called "van-priv1" look for that string
in the logs below.

 

--log output-

starting: Fri Dec 4 08:17:39 PST 2009

 

 

 

Trying to get all of the configs.

write(spawn_id=4): invalid argument

    while executing

"send -h "exit\r""

    invoked from within

"expect -nobrace -re {^[^

^M *]*van-priv1([^#>\r\n]+)?[#>](\([^)\r\n]+\))?} {

                                                  # the Cisco CE and Jnx
ERX

                                                  # return to
non-enabled mode

                ..."

    invoked from within

"expect {

        -re "^\[^\n\r *]*$reprompt"             {

                                                  # the Cisco CE and Jnx
ERX

                                                  # return to
non-enabled mode

                                                  # on exit in enabled
mode.

                ..."

    (procedure "run_commands" line 110)

    invoked from within

"run_commands $prompt $command"

    ("foreach" body line 152)

    invoked from within

"foreach router [lrange $argv $i end] {

    set router [string tolower $router]

    # attempt at platform switching.

    set platform ""

    send_user ..."

    (file "/opt/rancid/bin/clogin" line 734)

van-priv1.net.newedgenetworks.com: missed cmd(s): write term

=====================================

Getting missed routers: round 1.

write(spawn_id=4): invalid argument

    while executing

"send -h "exit\r""

    invoked from within

"expect -nobrace -re {^[^

^M *]*van-priv1([^#>\r\n]+)?[#>](\([^)\r\n]+\))?} {

                                                  # the Cisco CE and Jnx
ERX

                                                  # return to
non-enabled mode

                ..."

    invoked from within

"expect {

        -re "^\[^\n\r *]*$reprompt"             {

                                                  # the Cisco CE and Jnx
ERX

                                                  # return to
non-enabled mode

                                                  # on exit in enabled
mode.

                ..."

    (procedure "run_commands" line 110)

    invoked from within

"run_commands $prompt $command"

    ("foreach" body line 152)

    invoked from within

"foreach router [lrange $argv $i end] {

    set router [string tolower $router]

    # attempt at platform switching.

    set platform ""

    send_user ..."

    (file "/opt/rancid/bin/clogin" line 734)

van-priv1.net.newedgenetworks.com: missed cmd(s): write term

 

cvs diff: Diffing .

cvs diff: Diffing configs

cvs commit: Examining .

cvs commit: Examining configs

 

ending: Fri Dec 4 08:18:15 PST 2009

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091204/9fc7f82a/attachment.html 

From jamess at newedgenetworks.com  Fri Dec  4 16:47:13 2009
From: jamess at newedgenetworks.com (Sutherland, James)
Date: Fri, 4 Dec 2009 08:47:13 -0800
Subject: [rancid]  missed cmd(s): write term
Message-ID: <D26D9D1F067FA64897EBDE17791BA84602E8BD89@rancor.ad.newedgenetworks.com>

Suddenly rancid cannot talk to one of my routers.  Router is a 7206,
just like many others.  clogin against this router works fine.  A packet
trace shows that all the data gets sent to rancid, even on write term
the routers sends it whole config and rancid sends "exit" after that.

 

Here is what the logs show.  Anyone have any ideas?

 

The router that doesn't work is called "van-priv1" look for that string
in the logs below.

 

--log output-

starting: Fri Dec 4 08:17:39 PST 2009

 

 

 

Trying to get all of the configs.

write(spawn_id=4): invalid argument

    while executing

"send -h "exit\r""

    invoked from within

"expect -nobrace -re {^[^

^M *]*van-priv1([^#>\r\n]+)?[#>](\([^)\r\n]+\))?} {

                                                  # the Cisco CE and Jnx
ERX

                                                  # return to
non-enabled mode

                ..."

    invoked from within

"expect {

        -re "^\[^\n\r *]*$reprompt"             {

                                                  # the Cisco CE and Jnx
ERX

                                                  # return to
non-enabled mode

                                                  # on exit in enabled
mode.

                ..."

    (procedure "run_commands" line 110)

    invoked from within

"run_commands $prompt $command"

    ("foreach" body line 152)

    invoked from within

"foreach router [lrange $argv $i end] {

    set router [string tolower $router]

    # attempt at platform switching.

    set platform ""

    send_user ..."

    (file "/opt/rancid/bin/clogin" line 734)

van-priv1.net.newedgenetworks.com: missed cmd(s): write term

=====================================

Getting missed routers: round 1.

write(spawn_id=4): invalid argument

    while executing

"send -h "exit\r""

    invoked from within

"expect -nobrace -re {^[^

^M *]*van-priv1([^#>\r\n]+)?[#>](\([^)\r\n]+\))?} {

                                                  # the Cisco CE and Jnx
ERX

                                                  # return to
non-enabled mode

                ..."

    invoked from within

"expect {

        -re "^\[^\n\r *]*$reprompt"             {

                                                  # the Cisco CE and Jnx
ERX

                                                  # return to
non-enabled mode

                                                  # on exit in enabled
mode.

                ..."

    (procedure "run_commands" line 110)

    invoked from within

"run_commands $prompt $command"

    ("foreach" body line 152)

    invoked from within

"foreach router [lrange $argv $i end] {

    set router [string tolower $router]

    # attempt at platform switching.

    set platform ""

    send_user ..."

    (file "/opt/rancid/bin/clogin" line 734)

van-priv1.net.newedgenetworks.com: missed cmd(s): write term

 

cvs diff: Diffing .

cvs diff: Diffing configs

cvs commit: Examining .

cvs commit: Examining configs

 

ending: Fri Dec 4 08:18:15 PST 2009

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091204/8df47056/attachment.html 

From heas at shrubbery.net  Fri Dec  4 20:14:30 2009
From: heas at shrubbery.net (john heasley)
Date: Fri, 4 Dec 2009 12:14:30 -0800
Subject: [rancid] Re: missed cmd(s): write term
In-Reply-To: <D26D9D1F067FA64897EBDE17791BA84602E8BD81@rancor.ad.newedgenetworks.com>
References: <8cf6dff10912040339j2bb7e94cpfcaa214568578e2@mail.gmail.com>
	<D26D9D1F067FA64897EBDE17791BA84602E8BD81@rancor.ad.newedgenetworks.com>
Message-ID: <20091204201430.GA22387@shrubbery.net>

Fri, Dec 04, 2009 at 08:35:04AM -0800, Sutherland, James:
> Suddenly rancid cannot talk to one of my routers.  Router is a 7206,
> just like many others.  clogin against this router works fine.  A packet
> trace shows that all the data gets sent to rancid, even on write term
> the routers sends it whole config and rancid sends "exit" after that.
> 
>  
> 
> Here is what the logs show.  Anyone have any ideas?
> 
it seems the device disconnected prematurely, before the exit command
was sent.  you should be able to see that in your packet trace.  you
can also use clogin -d -c 'list_the_rancid_commands' to help trace it.
also look on the device for errors, such as memory exhaustion or AAA
authorization failures.

From dpz at berkeley.edu  Sat Dec  5 01:04:26 2009
From: dpz at berkeley.edu (David Paul Zimmerman)
Date: Fri, 4 Dec 2009 17:04:26 -0800
Subject: [rancid] Re: freebsd, tcl and expect
In-Reply-To: <OFEA77F1F9.38293765-ON88257681.006CE46B-88257681.006CF583@YMP.GOV>
References: <OFEA77F1F9.38293765-ON88257681.006CE46B-88257681.006CF583@YMP.GOV>
Message-ID: <50D98E4E-44F1-48F0-854D-2D9918D8EF8E@berkeley.edu>

That package is just a version of expect without X11.  I use the  
portupgrade port to manage my ports, so to get expect to build that  
way, I modified /usr/local/etc/pkgtools.conf to have the following  
stanza:

     MAKE_ARGS = {
       'lang/expect*' => 'WITHOUT_X11=yes',
     }

and then told portinstall to install lang/expect-devel.  expect-devel  
is currently expect-5.44.1.11_1 in the ports, so with the  
'WITHOUT_X11' directive, portinstall will install expect- 
nox11-5.44.1.11_1.

	dp

On Dec 3, 2009, at 11:50 AM, Dan_Mitton at YMP.GOV wrote:

>
> Where can I get the expect-nox11-5.44.1.11_1 package??
>
> Thanks,
>
> Dan
>
>
> Sent by:        rancid-discuss-bounces at shrubbery.net
>
> To:        David Paul Zimmerman <dpz at berkeley.edu>
> cc:        rancid <rancid-discuss at shrubbery.net> (bcc: Dan Mitton/YD/ 
> RWDOE)
> Subject:        [rancid] Re: freebsd, tcl and expect
>
>
> LSN: Not Relevant - Not Privileged
> User Filed as: Excl/AdminMgmt-14-4/QA:N/A
>
> > dpz at pourri$ uname -s -r
> > FreeBSD 7.2-RELEASE-p3
> >
> > dpz at pourri$ pkg_info | egrep "rancid-|tcl|expect"
> > expect-nox11-5.44.1.11_1 A sophisticated scripter based on tcl/tk
> > rancid-2.3.2        Really Awesome New Cisco confIg Differ
> > tcl-8.4.19_3,1      Tool Command Language
>
> thanks
>
> maybe i will try to break things if my meeting gets boring tomorrow
>
> randy
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>
>


From radwep at gmail.com  Tue Dec  8 08:40:20 2009
From: radwep at gmail.com (Rad Wep)
Date: Tue, 8 Dec 2009 09:40:20 +0100
Subject: [rancid]  "rancid-cvs" file not found
Message-ID: <7efdf8de0912080040q5e38577cge1da5c311962281e@mail.gmail.com>

Hello everybody,

Yesterday, I tried to install Rancid but I have an issues : i dont found the
rancid-cvs file, I only got rancid-cvs.in file.
Do anyone have a solution?

Cheers,

Bastien
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091208/21a51039/attachment.html 

From dan.schmidt at uplinkdata.com  Wed Dec  9 16:49:31 2009
From: dan.schmidt at uplinkdata.com (Schmidt, Daniel)
Date: Wed, 9 Dec 2009 09:49:31 -0700
Subject: [rancid]  Terminal Width
Message-ID: <05CC562AFB5A9446A1BC3F66AD04A3BCC74B37@che-exch-003.uplinkdata.com>

I would like to modify my terminal width, but I notice some devices do
not seem to like it as I get missed cmds.  Perhaps I require an expect
or something between the two commands?

605         } else {
606             send "terminal length 0\r"
607             send "terminal width 80\r"
608         }

From dan.schmidt at uplinkdata.com  Wed Dec  9 17:07:33 2009
From: dan.schmidt at uplinkdata.com (Schmidt, Daniel)
Date: Wed, 9 Dec 2009 10:07:33 -0700
Subject: [rancid] Re: Terminal Width
In-Reply-To: <05CC562AFB5A9446A1BC3F66AD04A3BCC74B37@che-exch-003.uplinkdata.com>
References: <05CC562AFB5A9446A1BC3F66AD04A3BCC74B37@che-exch-003.uplinkdata.com>
Message-ID: <05CC562AFB5A9446A1BC3F66AD04A3BCC74B38@che-exch-003.uplinkdata.com>

Never mind.  This was, indeed, a stupid question.  

-----Original Message-----
From: rancid-discuss-bounces at shrubbery.net
[mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Schmidt,
Daniel
Sent: Wednesday, December 09, 2009 9:50 AM
To: rancid-discuss at shrubbery.net
Subject: [rancid] Terminal Width

I would like to modify my terminal width, but I notice some devices do
not seem to like it as I get missed cmds.  Perhaps I require an expect
or something between the two commands?

605         } else {
606             send "terminal length 0\r"
607             send "terminal width 80\r"
608         }
_______________________________________________
Rancid-discuss mailing list
Rancid-discuss at shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

From isabelle at ctbc.com.br  Wed Dec  9 17:45:06 2009
From: isabelle at ctbc.com.br (isabelle at ctbc.com.br)
Date: Wed, 9 Dec 2009 14:45:06 -0300
Subject: [rancid]  CVS history
Message-ID: <OF2744892D.1C169F21-ON03257687.0061836A-03257687.0061836C@ctbc.com.br>

An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091209/e85d5f03/attachment.html 

From smunzani at comcast.net  Wed Dec  9 17:31:39 2009
From: smunzani at comcast.net (Sam Munzani)
Date: Wed, 09 Dec 2009 11:31:39 -0600
Subject: [rancid]  SVN list all old versions and check out all versions
Message-ID: <4B1FDEFB.5090401@comcast.net>

Team,

Does anyone know how to list all the version in SVN for a specific 
device and check out all the version configs in full or get the full 
config on 1st revision and get diff or all versions after that?

Thanks,
sam

From heas at shrubbery.net  Wed Dec  9 18:55:15 2009
From: heas at shrubbery.net (john heasley)
Date: Wed, 9 Dec 2009 10:55:15 -0800
Subject: [rancid] Re: SVN list all old versions and check out all versions
In-Reply-To: <4B1FDEFB.5090401@comcast.net>
References: <4B1FDEFB.5090401@comcast.net>
Message-ID: <20091209185515.GF7142@shrubbery.net>

Wed, Dec 09, 2009 at 11:31:39AM -0600, Sam Munzani:
> Team,
> 
> Does anyone know how to list all the version in SVN for a specific 
> device and check out all the version configs in full or get the full 
> config on 1st revision and get diff or all versions after that?

svn log configs/name
gives you all revisions for that file
svn diff -r x:y configs/name
gives you diffs between versions x and y
svn update -r x configs/name 
gives you that file

svn help
svn log --help
svn diff --help
svn update --help

and see the "red book"
http://svnbook.red-bean.com/en/1.5/svn-book.html
> Thanks,
> sam
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

From heas at shrubbery.net  Wed Dec  9 18:57:02 2009
From: heas at shrubbery.net (john heasley)
Date: Wed, 9 Dec 2009 10:57:02 -0800
Subject: [rancid] Re: CVS history
In-Reply-To: <OF2744892D.1C169F21-ON03257687.0061836A-03257687.0061836C@ctbc.com.br>
References: <OF2744892D.1C169F21-ON03257687.0061836A-03257687.0061836C@ctbc.com.br>
Message-ID: <20091209185702.GG7142@shrubbery.net>

Wed, Dec 09, 2009 at 02:45:06PM -0300, isabelle at ctbc.com.br:
> I'm new to Rancid and I would just like to know for how long&nbsp;is the history saved in CVS? Is it possible to set a maximum history file size or maximum number of revisions (or something similar)?<BR><FONT size=2 face="Default Sans Serif,Verdana,Arial,Helvetica,sans-serif"></FONT></DIV><DIV><FONT size=2 face="Default Sans Serif,Verdana,Arial,Helvetica,sans-serif">Any help would be appreciated.</FONT></DIV><DIV>&nbsp;</DIV><DIV>Thank you very much for your time.</DIV><DIV><FONT size=2 face="Default Sans Serif,Verdana,Arial,Helvetica,sans-serif">&nbsp;</DIV><DIV><P style="MARGIN: 0px">Isabelle.</P></FONT><BR></DIV></FONT>

its retained forever, unless you delete it with cvs admin -o.  see the
manual.  you're probably wasting your time, if your concern is disk.

From isabelle at ctbc.com.br  Fri Dec 11 11:49:28 2009
From: isabelle at ctbc.com.br (isabelle at ctbc.com.br)
Date: Fri, 11 Dec 2009 08:49:28 -0300
Subject: [rancid]  Aliases and wildcards
Message-ID: <OF1D540886.29860BF1-ON03257689.0040F429-03257689.0040F42C@ctbc.com.br>

An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091211/83a76974/attachment.html 

From bohara at ripe.net  Fri Dec 11 11:36:19 2009
From: bohara at ripe.net (Ben O'Hara)
Date: Fri, 11 Dec 2009 12:36:19 +0100
Subject: [rancid]  [patch] f5rancid - ignore fans/configsync times
Message-ID: <AEF5783D-DD8D-45D6-B869-5B7BFD1EF5AA@ripe.net>

Hi,

We have a pair of f5 BigIPs which we backup configs with rancid.

Noticed the latest f5 firmware changed the output for fan modules and when used in a failover pair was including config sync times (we sync our configs automatically so rancid saw a diff of only the time)

Heres is a patch to fix this behaviour, can this get commited?

 diff -u f5rancid.old f5rancid.new 
--- f5rancid.old        2009-12-07 13:13:39.000000000 +0100
+++ f5rancid.new        2009-12-11 11:52:18.000000000 +0100
@@ -206,7 +206,7 @@
            ProcessHistory("SHOWDB","","","#\n#database:\n");
        }
        /UCS.LoadTime/ && next;
-       /Configsync.LocalConfigTime/ && next;
+       /Configsync.*Time/ && next;
        /LTM.ConfigTime/ && next;
 
        if (/^(snmp\..*\.community\..* =) (.+)/i) {
@@ -291,6 +291,7 @@
        return(-1) if (/command authorization failed/i);
 
        /fan speed/i && next;
+       /rpm/i && next;
        /chassis temperature/i && next;
        /degC/ && next;
        s/^\|//;

Cheers

Ben


-- 
Ben O'Hara                        RIPE Network Coordination Center
Systems Engineer                         Singel 258, Amsterdam, NL
http://www.ripe.net                                +31 20 535 4444
PGP Fingerprint: 080A 52FF BF0A A7FB F176 E7DB 513D 9A3D E968 7DBC








From kyudayev at verizon.com  Fri Dec 11 16:24:32 2009
From: kyudayev at verizon.com (Konstantin Yudayev)
Date: Fri, 11 Dec 2009 11:24:32 -0500
Subject: [rancid]  how to ignore timestamps in config
Message-ID: <1260548672.4662.28.camel@Boolean-L.restoncampus.com>

Hello,

We have upgraded code on Cisco CRS router and looks like Cisco is now
putting time stamp in front of every output (show ru, dir /all etc).
RANCID believes that line belongs to config and has changed as a result
I have a lot of "noise" in diff at every run. I have no problems adding
regexp to exclude timestamps from the final output. Could Shrubbery guys
advise on how to fix that problem (ignore timestamps in front of every
output)? Here are some examples:




RP/0/RP1/CPU0:*********#show ru
Fri Dec 11 16:17:01.115 UTC 
Building configuration...
!! IOS XR Configuration 
!! Last configuration change at Thu Dec 10 18:16:46 2009 by 
!
service timestamps log datetime localtime msec show-timezone
service timestamps debug datetime localtime msec show-timezone
.........
.....




RP/0/RP1/CPU0:*********#dir /all disk0:
Fri Dec 11 16:21:04.666 UTC 

Directory of disk0:

2           drwx  32768       Thu Oct  8 09:37:25 2009  LOST.DIR
19493       dr-x  32768       Wed Dec  9 06:41:17 2009  bcm-cur
.....
....




As a result diff report is full of this stuff:

-!BootFlash: Thu Dec 10 10:01:37.984 UTC 

+!BootFlash: Fri Dec 11 10:01:32.729 UTC 


Thank you

 - Konstantin Yudayev  @Verizon 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091211/bf95341a/attachment.html 

From kyudayev at verizon.com  Fri Dec 11 16:34:40 2009
From: kyudayev at verizon.com (Konstantin Yudayev)
Date: Fri, 11 Dec 2009 11:34:40 -0500
Subject: [rancid] Re: Aliases and wildcards
In-Reply-To: <OF1D540886.29860BF1-ON03257689.0040F429-03257689.0040F42C@ctbc.com.br>
References: <OF1D540886.29860BF1-ON03257689.0040F429-03257689.0040F42C@ctbc.com.br>
Message-ID: <1260549280.4662.34.camel@Boolean-L.restoncampus.com>

Isabelle,

I don't think it is possible to use wildcards in /etc/aliases since the
username is being looked up by getpwname system function. But it can be
done through patching bin/control_rancid.

On Fri, 2009-12-11 at 08:49 -0300, isabelle at ctbc.com.br wrote:
> Hello!
>  
> I would just like to know if its possible to use wildcards in
> the "aliases" file or if I can set an e-mail that will receive mail
> from all groups. What I intended to do was something like this:
>  
> # rancid/etc/aliases
>  
> rancid-admin-*        mail at mail.com
> rancid-*                 mail at mail.com
> 
> Any help would be appreciated.
>  
> Thank you very much for your time.
>  
> Best regards,
>  
> Isabelle.
> 
> 
> 
> 
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091211/5e5d995b/attachment.html 

From Voitek_Kozak at Cable.Comcast.com  Fri Dec 11 16:58:26 2009
From: Voitek_Kozak at Cable.Comcast.com (Kozak, Voitek)
Date: Fri, 11 Dec 2009 11:58:26 -0500
Subject: [rancid] Re: how to ignore timestamps in config
In-Reply-To: <1260548672.4662.28.camel@Boolean-L.restoncampus.com>
References: <1260548672.4662.28.camel@Boolean-L.restoncampus.com>
Message-ID: <76EA980B393A584084B397FCA1D2551910132137@NJCHLEXCMB01.cable.comcast.com>

look in archive for the thread 

?Disabling timestamp on Cisco IO devices? was time stamp on my email 

Tue 11/17/2009 4:08 AM, worked for me on crs. -:)

 

thanks,

-voitek.,

 

From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Konstantin Yudayev
Sent: Friday, December 11, 2009 11:25 AM
To: rancid-discuss at shrubbery.net
Subject: [rancid] how to ignore timestamps in config

 

Hello,

We have upgraded code on Cisco CRS router and looks like Cisco is now putting time stamp in front of every output (show ru, dir /all etc). RANCID believes that line belongs to config and has changed as a result I have a lot of "noise" in diff at every run. I have no problems adding regexp to exclude timestamps from the final output. Could Shrubbery guys advise on how to fix that problem (ignore timestamps in front of every output)? Here are some examples:




RP/0/RP1/CPU0:*********#show ru
Fri Dec 11 16:17:01.115 UTC 
Building configuration...
!! IOS XR Configuration 
!! Last configuration change at Thu Dec 10 18:16:46 2009 by 
!
service timestamps log datetime localtime msec show-timezone
service timestamps debug datetime localtime msec show-timezone
.........
.....




RP/0/RP1/CPU0:*********#dir /all disk0:
Fri Dec 11 16:21:04.666 UTC 

Directory of disk0:

2           drwx  32768       Thu Oct  8 09:37:25 2009  LOST.DIR
19493       dr-x  32768       Wed Dec  9 06:41:17 2009  bcm-cur
.....
....




As a result diff report is full of this stuff:

-!BootFlash: Thu Dec 10 10:01:37.984 UTC 

 
+!BootFlash: Fri Dec 11 10:01:32.729 UTC 
 
 
Thank you
 
 - Konstantin Yudayev  @Verizon 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091211/8967da31/attachment.html 

From cgauthier at mapscu.com  Fri Dec 11 17:32:01 2009
From: cgauthier at mapscu.com (Chris Gauthier)
Date: Fri, 11 Dec 2009 09:32:01 -0800
Subject: [rancid] Re: Aliases and wildcards
In-Reply-To: <1260549280.4662.34.camel@Boolean-L.restoncampus.com>
References: <OF1D540886.29860BF1-ON03257689.0040F429-03257689.0040F42C@ctbc.com.br>
	<1260549280.4662.34.camel@Boolean-L.restoncampus.com>
Message-ID: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F277@mshin01.mapscu.com>

To the best of my knowledge, you?re mixing apples and oranges there.  Rancid does not actually control /etc/aliases at all.  The ?aliases? file is used by your MTA (sendmail, postfix, et al) to provide specific direction for various email addresses on the system.  All rancid does is append the rancid group name to either the ?rancid-? or ?rancid-admin-? string and use standard mailing calls to whatever MTA is running.  The MTA is what governs the format of the /etc/aliases file.

 

Chris Gauthier

Network Administrator

MaPS Credit Union

v: 503.375.2445

f: 503.779.1083

http://www.mapscu.com

 

 

?For once you have tasted flight you will walk the earth with your eyes turned skywards, for there you have been and there you will long to return.?

?Leonardo da Vinci

 

From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Konstantin Yudayev
Sent: Friday, December 11, 2009 8:35 AM
To: rancid-discuss at shrubbery.net
Subject: [rancid] Re: Aliases and wildcards

 

Isabelle,

I don't think it is possible to use wildcards in /etc/aliases since the username is being looked up by getpwname system function. But it can be done through patching bin/control_rancid.

On Fri, 2009-12-11 at 08:49 -0300, isabelle at ctbc.com.br wrote: 

Hello! 

	  

	I would just like to know if its possible to use wildcards in the "aliases" file or if I can set an e-mail that will receive mail from all groups. What I intended to do was something like this: 

	  

	# rancid/etc/aliases 

	  

	rancid-admin-*        mail at mail.com 

	rancid-*                 mail at mail.com

	Any help would be appreciated. 

	  

	Thank you very much for your time. 

	  

	Best regards, 

	  

	Isabelle.
	
	
	

	 
	_______________________________________________
	Rancid-discuss mailing list
	Rancid-discuss at shrubbery.net
	http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091211/a9a5dfea/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/gif
Size: 497 bytes
Desc: image001.gif
Url : http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091211/a9a5dfea/attachment.gif 

From mksmith at adhost.com  Fri Dec 11 17:42:22 2009
From: mksmith at adhost.com (Michael K. Smith - Adhost)
Date: Fri, 11 Dec 2009 09:42:22 -0800
Subject: [rancid]  Lock files not being removed
Message-ID: <17838240D9A5544AAA5FF95F8D520316071DF1A8@ad-exh01.adhost.lan>

Hello:

This is a FreeBSD installation.  The /tmp/.*.lock files are not being
removed at the end of the run.  Then, I get about 50 expect/perl
processes that stick around.  Finally, when I got and manually delete
the tmp files I get 7000 messages about stuck lock files.

Has anyone run into this and, if so, is there a fix?

Regards,

Mike

--
Michael K. Smith - CISSP, GSEC, GISP
Chief Technical Officer - Adhost Internet LLC mksmith at adhost.com
w: +1 (206) 404-9500 f: +1 (206) 404-9050
PGP: B49A DDF5 8611 27F3  08B9 84BB E61E 38C0 (Key ID: 0x9A96777D)



From heas at shrubbery.net  Fri Dec 11 18:22:35 2009
From: heas at shrubbery.net (john heasley)
Date: Fri, 11 Dec 2009 10:22:35 -0800
Subject: [rancid] Re: how to ignore timestamps in config
In-Reply-To: <1260548672.4662.28.camel@Boolean-L.restoncampus.com>
References: <1260548672.4662.28.camel@Boolean-L.restoncampus.com>
Message-ID: <20091211182235.GB25931@shrubbery.net>

Fri, Dec 11, 2009 at 11:24:32AM -0500, Konstantin Yudayev:
> Hello,
> 
> We have upgraded code on Cisco CRS router and looks like Cisco is now
> putting time stamp in front of every output (show ru, dir /all etc).
> RANCID believes that line belongs to config and has changed as a result
> I have a lot of "noise" in diff at every run. I have no problems adding
> regexp to exclude timestamps from the final output. Could Shrubbery guys
> advise on how to fix that problem (ignore timestamps in front of every
> output)? Here are some examples:

turn them off.  this must be the single most dysfunctional "feature" to
ever come out of cisco.

> 
> 
> 
> RP/0/RP1/CPU0:*********#show ru
> Fri Dec 11 16:17:01.115 UTC 
> Building configuration...
> !! IOS XR Configuration 
> !! Last configuration change at Thu Dec 10 18:16:46 2009 by 
> !
> service timestamps log datetime localtime msec show-timezone
> service timestamps debug datetime localtime msec show-timezone
> .........
> .....
> 
> 
> 
> 
> RP/0/RP1/CPU0:*********#dir /all disk0:
> Fri Dec 11 16:21:04.666 UTC 
> 
> Directory of disk0:
> 
> 2           drwx  32768       Thu Oct  8 09:37:25 2009  LOST.DIR
> 19493       dr-x  32768       Wed Dec  9 06:41:17 2009  bcm-cur
> .....
> ....
> 
> 
> 
> 
> As a result diff report is full of this stuff:
> 
> -!BootFlash: Thu Dec 10 10:01:37.984 UTC 
> 
> +!BootFlash: Fri Dec 11 10:01:32.729 UTC 
> 
> 
> Thank you
> 
>  - Konstantin Yudayev  @Verizon 

> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

From pierg75 at yahoo.it  Wed Dec 16 15:32:18 2009
From: pierg75 at yahoo.it (Pier)
Date: Wed, 16 Dec 2009 15:32:18 +0000 (GMT)
Subject: [rancid]  Rancid and Fortinet
Message-ID: <67402.14488.qm@web28602.mail.ukl.yahoo.com>

Hi all.
I started to use rancid to make backups of some routers and switches configurations and it works well. 
But we have problem with a fortigate firewall, the same described here:

http://www.shrubbery.net/pipermail/rancid-discuss/2009-April/003840.html

Are there any news for this problem?
Thanks 

Pier


      

From ports at raveland.org  Wed Dec 16 16:50:13 2009
From: ports at raveland.org (Pierre-Emmanuel Andre)
Date: Wed, 16 Dec 2009 17:50:13 +0100
Subject: [rancid] Re: Rancid and Fortinet
In-Reply-To: <67402.14488.qm@web28602.mail.ukl.yahoo.com>
References: <67402.14488.qm@web28602.mail.ukl.yahoo.com>
Message-ID: <20091216165012.GE651@coredump.raveland.priv>

On Wed, Dec 16, 2009 at 03:32:18PM +0000, Pier wrote:
> Hi all.
> I started to use rancid to make backups of some routers and switches configurations and it works well. 
> But we have problem with a fortigate firewall, the same described here:
> 
> http://www.shrubbery.net/pipermail/rancid-discuss/2009-April/003840.html
> 
> Are there any news for this problem?
> Thanks 
> 
> Pier

Hi Pier,

It depends on your firmware level.
On the new firmware (> 3 iirc), the good commands are:
+ get system status (for GetSystem)
+ show (for GetConf)

I use rancid to backup a lot of Fortinet (~ 200) without pbs.

Regards,

-- 
Pierre-Emmanuel Andr? <pea at raveland.org>
GPG key: 0x7AE329DC

From pierg75 at yahoo.it  Wed Dec 16 17:12:09 2009
From: pierg75 at yahoo.it (Pier)
Date: Wed, 16 Dec 2009 17:12:09 +0000 (GMT)
Subject: [rancid] Re: Rancid and Fortinet
In-Reply-To: <20091216165012.GE651@coredump.raveland.priv>
Message-ID: <616125.15144.qm@web28603.mail.ukl.yahoo.com>


> Hi Pier,
> 
> It depends on your firmware level.
> On the new firmware (> 3 iirc), the good commands are:
> + get system status (for GetSystem)
> + show (for GetConf)
> 
> I use rancid to backup a lot of Fortinet (~ 200) without
> pbs.
> 
> Regards,

The fortinet is using a version 3 firmware.
I get a timeout error...do i have to modify something to make it work?
Thanks

Pier



      

From ronnij at gmail.com  Thu Dec 17 07:30:49 2009
From: ronnij at gmail.com (Ronni Jensen)
Date: Thu, 17 Dec 2009 08:30:49 +0100
Subject: [rancid]  Problem getting config from Cisco ASA firewalls
Message-ID: <7a76d30f0912162330t304da2camec373f1ab323bbde@mail.gmail.com>

Hi,

My rancid installation works perfectly for Cisco Catalyst switches and other
stuff too.. but for the Cisco ASA firewalls it fails.. In the logs, I get
the "clogin error: Error: TIMEOUT reached" error.

.cloginrc for a particular FW looks like:

add password 10.10.1.2        {exec_pass} {enable_pass}
add method 10.10.1.2          telnet
add autoenable 10.10.1.2      {1}

I've also tried replacing IP-address with DNS hostname or just using a
wildcard star... no difference. When I telnet directly from the server to
the firewall, the sequence looks like:


*[me at LinuxSrv ~]$ telnet 192.168.1.2
Trying 10.10.1.2...
Connected to 10.10.1.2.
Escape character is '^]'.*

*User Access Verification*
*Password: <TYPING PASSWD>*

*Type help or '?' for a list of available commands.
UMUSASA01> <TYPING "ENABLE">*
*Password: *******
UMUSASA01# *

Any ideas?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091217/d68ca4a1/attachment.html 

From diego.ercolani at ssis.sm  Thu Dec 17 08:08:30 2009
From: diego.ercolani at ssis.sm (Diego Ercolani)
Date: Thu, 17 Dec 2009 09:08:30 +0100
Subject: [rancid] Re: Rancid and Fortinet
In-Reply-To: <616125.15144.qm@web28603.mail.ukl.yahoo.com>
References: <616125.15144.qm@web28603.mail.ukl.yahoo.com>
Message-ID: <200912170908.30592.diego.ercolani@ssis.sm>

I submitted a patch to correct problems on my fortinet during June....

http://www.shrubbery.net/pipermail/rancid-discuss/2009-June/004005.html

Please feel free to modify and adapt to your installation but please return it 
to the community

Hope This Help
Diego

In data mercoled? 16 dicembre 2009 18:12:09, Pier ha scritto:
: > > Hi Pier,
> >
> > It depends on your firmware level.
> > On the new firmware (> 3 iirc), the good commands are:
> > + get system status (for GetSystem)
> > + show (for GetConf)
> >
> > I use rancid to backup a lot of Fortinet (~ 200) without
> > pbs.
> >
> > Regards,
> 
> The fortinet is using a version 3 firmware.
> I get a timeout error...do i have to modify something to make it work?
> Thanks
> 
> Pier

From willay at gmail.com  Thu Dec 17 08:10:49 2009
From: willay at gmail.com (William)
Date: Thu, 17 Dec 2009 08:10:49 +0000
Subject: [rancid] Re: Problem getting config from Cisco ASA firewalls
In-Reply-To: <7a76d30f0912162330t304da2camec373f1ab323bbde@mail.gmail.com>
References: <7a76d30f0912162330t304da2camec373f1ab323bbde@mail.gmail.com>
Message-ID: <a24358fb0912170010h2609bcdbu7f4e63dda2b8c1ee@mail.gmail.com>

Ronni,

According to your email when accessing the firewall manually there is
no autoenable, so I would try the following config for your device:

add userprompt 10.10.1.2      pix
add method 10.10.1.2          telnet
add password 10.10.1.2        {exec_pass} {enable_pass}


hope this helps.

Cheers,

Will

2009/12/17 Ronni Jensen <ronnij at gmail.com>:
> Hi,
>
> My rancid installation works perfectly for Cisco Catalyst switches and other
> stuff too.. but for the Cisco ASA firewalls it fails.. In the logs, I get
> the "clogin error: Error: TIMEOUT reached" error.
>
> .cloginrc for a particular FW looks like:
>
> add password 10.10.1.2??????? {exec_pass} {enable_pass}
> add method 10.10.1.2????????? telnet
> add autoenable 10.10.1.2????? {1}
>
> I've also tried replacing IP-address with DNS hostname or just using a
> wildcard star... no difference. When I telnet directly from the server to
> the firewall, the sequence looks like:
>
>
> [me at LinuxSrv ~]$ telnet 192.168.1.2
> Trying 10.10.1.2...
> Connected to 10.10.1.2.
> Escape character is '^]'.
> User Access Verification
> Password: <TYPING PASSWD>
> Type help or '?' for a list of available commands.
> UMUSASA01> <TYPING "ENABLE">
> Password: *******
> UMUSASA01#
>
> Any ideas?
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>

From ronnij at gmail.com  Thu Dec 17 10:00:55 2009
From: ronnij at gmail.com (Ronni Jensen)
Date: Thu, 17 Dec 2009 11:00:55 +0100
Subject: [rancid] Re: Problem getting config from Cisco ASA firewalls
In-Reply-To: <a24358fb0912170010h2609bcdbu7f4e63dda2b8c1ee@mail.gmail.com>
References: <7a76d30f0912162330t304da2camec373f1ab323bbde@mail.gmail.com>
	<a24358fb0912170010h2609bcdbu7f4e63dda2b8c1ee@mail.gmail.com>
Message-ID: <7a76d30f0912170200p13188d60i48fba98928436745@mail.gmail.com>

Hi,

I tried with the example you wrote, but it didn't change anything.. I still
get the "clogin error: Error: TIMEOUT reached" errors in the logfile.

Any other suggestions how I can fix the error?

Best regards,
Ronni

On Thu, Dec 17, 2009 at 9:10 AM, William <willay at gmail.com> wrote:

> Ronni,
>
> According to your email when accessing the firewall manually there is
> no autoenable, so I would try the following config for your device:
>
> add userprompt 10.10.1.2      pix
> add method 10.10.1.2          telnet
> add password 10.10.1.2        {exec_pass} {enable_pass}
>
>
> hope this helps.
>
> Cheers,
>
> Will
>
> 2009/12/17 Ronni Jensen <ronnij at gmail.com>:
>  > Hi,
> >
> > My rancid installation works perfectly for Cisco Catalyst switches and
> other
> > stuff too.. but for the Cisco ASA firewalls it fails.. In the logs, I get
> > the "clogin error: Error: TIMEOUT reached" error.
> >
> > .cloginrc for a particular FW looks like:
> >
> > add password 10.10.1.2        {exec_pass} {enable_pass}
> > add method 10.10.1.2          telnet
> > add autoenable 10.10.1.2      {1}
> >
> > I've also tried replacing IP-address with DNS hostname or just using a
> > wildcard star... no difference. When I telnet directly from the server to
> > the firewall, the sequence looks like:
> >
> >
> > [me at LinuxSrv ~]$ telnet 192.168.1.2
> > Trying 10.10.1.2...
> > Connected to 10.10.1.2.
> > Escape character is '^]'.
> > User Access Verification
> > Password: <TYPING PASSWD>
> > Type help or '?' for a list of available commands.
> > UMUSASA01> <TYPING "ENABLE">
> > Password: *******
> > UMUSASA01#
> >
> > Any ideas?
> > _______________________________________________
> > Rancid-discuss mailing list
> > Rancid-discuss at shrubbery.net
> > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
> >
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091217/7b438fa0/attachment.html 

From ronnij at gmail.com  Thu Dec 17 11:20:20 2009
From: ronnij at gmail.com (Ronni Jensen)
Date: Thu, 17 Dec 2009 12:20:20 +0100
Subject: [rancid] Re: Problem getting config from Cisco ASA firewalls
In-Reply-To: <a24358fb0912170236m2e789037yd8546e7125e0260f@mail.gmail.com>
References: <7a76d30f0912162330t304da2camec373f1ab323bbde@mail.gmail.com>
	<a24358fb0912170010h2609bcdbu7f4e63dda2b8c1ee@mail.gmail.com>
	<7a76d30f0912170200p13188d60i48fba98928436745@mail.gmail.com>
	<a24358fb0912170203j5976d042q4ea0fdba2b08e13b@mail.gmail.com>
	<7a76d30f0912170230j3e3ec944s1d38022739b8881a@mail.gmail.com>
	<a24358fb0912170236m2e789037yd8546e7125e0260f@mail.gmail.com>
Message-ID: <7a76d30f0912170320o4ad996c2p567a79fe806cf0ae@mail.gmail.com>

Oh, it also got onto the box before, it's just the enable part that seems to
be the problem.. This is without debug stuff:


[rancid at LinuxSrv ~]$ /usr/libexec/rancid/clogin -t 10 192.168.1.2
192.168.1.2
spawn telnet 192.168.1.2
Trying 192.168.1.2...
Connected to 192.168.1.2.
Escape character is '^]'.

User Access Verification
Password:
Type help or '?' for a list of available commands.
ASAFW01>
Error: TIMEOUT reached
[rancid at LinuxSrv ~]$




On Thu, Dec 17, 2009 at 11:36 AM, William <willay at gmail.com> wrote:

> so its getting onto the box now... but doesnt enable... whats the
> output without all the debug junk?
>
> 2009/12/17 Ronni Jensen <ronnij at gmail.com>:
> > It's like it never gets to the enable-part.. Here is the debug output of
> a
> > manual clogin run:
> >
> >
> > [rancid at LinuxSrv ~]$ /usr/libexec/rancid/clogin -d -t 10 10.10.1.2
> > 10.10.1.2
> > spawn telnet 10.10.1.2
> > parent: waiting for sync byte
> > parent: telling child to go ahead
> > parent: now unsynchronized from child
> > spawn: returns {13658}
> > expect: does "" (spawn_id exp4) match regular expression "(Connection
> > refused|Secure connection [^\n\r]+ refused)"? no
> > "(Connection closed by|Connection to [^\n\r]+ closed)"? no
> > expect: does "" (spawn_id exp4) match glob pattern "unknown host\r"? no
> > expect: does "" (spawn_id exp4) match glob pattern "Host is unreachable"?
> no
> > "No address associated with name"? no
> > "(Host key not found |The authenticity of host .* be
> > established).*(yes/no)?"? no
> > "HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no
> > "Offending key for .* (yes/no)?"? no
> > "(denied|Sorry)"? no
> > "Login failed"? no
> > "% (Bad passwords|Authentication failed)"? no
> > "Press any key to continue"? no
> > "Enter Selection: "? no
> > "Last login:"? no
> > "@[^\r\n]+ ([Pp]assword|passwd):"? no
> > "pix"? no
> > "([Pp]assword|passwd):"? no
> > "(#| \(enable\))"? no
> > "Login invalid"? no
> > Trying 10.10.1.2...
> > Connected to 10.10.1.2.
> > Escape character is '^]'.
> > expect: does "Trying 10.10.1.2...\r\r\nConnected to
> 10.10.1.2.\r\r\nEscape
> > character is '^]'.\r\r\n" (spawn_id exp4) match regular expression
> > "(Connection refused|Secure connection [^\n\r]+ refused)"? no
> > "(Connection closed by|Connection to [^\n\r]+ closed)"? no
> > expect: does "Trying 10.10.1.2...\r\r\nConnected to
> 10.10.1.2.\r\r\nEscape
> > character is '^]'.\r\r\n" (spawn_id exp4) match glob pattern "unknown
> > host\r"? no
> > expect: does "Trying 10.10.1.2...\r\r\nConnected to
> 10.10.1.2.\r\r\nEscape
> > character is '^]'.\r\r\n" (spawn_id exp4) match glob pattern "Host is
> > unreachable"? no
> > "No address associated with name"? no
> > "(Host key not found |The authenticity of host .* be
> > established).*(yes/no)?"? no
> > "HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no
> > "Offending key for .* (yes/no)?"? no
> > "(denied|Sorry)"? no
> > "Login failed"? no
> > "% (Bad passwords|Authentication failed)"? no
> > "Press any key to continue"? no
> > "Enter Selection: "? no
> > "Last login:"? no
> > "@[^\r\n]+ ([Pp]assword|passwd):"? no
> > "pix"? no
> > "([Pp]assword|passwd):"? no
> > "(#| \(enable\))"? no
> > "Login invalid"? no
> > User Access Verification
> > Password:
> > expect: does "Trying 10.10.1.2...\r\r\nConnected to
> 10.10.1.2.\r\r\nEscape
> > character is '^]'.\r\r\n\r\n\r\nUser Access Verification\r\n\r\nPassword:
> "
> > (spawn_id exp4) match regular expression "(Connection refused|Secure
> > connection [^\n\r]+ refused)"? no
> > "(Connection closed by|Connection to [^\n\r]+ closed)"? no
> > expect: does "Trying 10.10.1.2...\r\r\nConnected to
> 10.10.1.2.\r\r\nEscape
> > character is '^]'.\r\r\n\r\n\r\nUser Access Verification\r\n\r\nPassword:
> "
> > (spawn_id exp4) match glob pattern "unknown host\r"? no
> > expect: does "Trying 10.10.1.2...\r\r\nConnected to
> 10.10.1.2.\r\r\nEscape
> > character is '^]'.\r\r\n\r\n\r\nUser Access Verification\r\n\r\nPassword:
> "
> > (spawn_id exp4) match glob pattern "Host is unreachable"? no
> > "No address associated with name"? no
> > "(Host key not found |The authenticity of host .* be
> > established).*(yes/no)?"? no
> > "HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no
> > "Offending key for .* (yes/no)?"? no
> > "(denied|Sorry)"? no
> > "Login failed"? no
> > "% (Bad passwords|Authentication failed)"? no
> > "Press any key to continue"? no
> > "Enter Selection: "? no
> > "Last login:"? no
> > "@[^\r\n]+ ([Pp]assword|passwd):"? no
> > "pix"? no
> > "([Pp]assword|passwd):"? yes
> > expect: set expect_out(0,string) "Password:"
> > expect: set expect_out(1,string) "Password"
> > expect: set expect_out(spawn_id) "exp4"
> > expect: set expect_out(buffer) "Trying 10.10.1.2...\r\r\nConnected to
> > 10.10.1.2.\r\r\nEscape character is '^]'.\r\r\n\r\n\r\nUser Access
> > Verification\r\n\r\nPassword:"
> > send: sending "exec_pass\r" to { exp4 }
> > expect: continuing expect
> > expect: does " " (spawn_id exp4) match regular expression "(Connection
> > refused|Secure connection [^\n\r]+ refused)"? no
> > "(Connection closed by|Connection to [^\n\r]+ closed)"? no
> > expect: does " " (spawn_id exp4) match glob pattern "unknown host\r"? no
> > expect: does " " (spawn_id exp4) match glob pattern "Host is
> unreachable"?
> > no
> > "No address associated with name"? no
> > "(Host key not found |The authenticity of host .* be
> > established).*(yes/no)?"? no
> > "HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no
> > "Offending key for .* (yes/no)?"? no
> > "(denied|Sorry)"? no
> > "Login failed"? no
> > "% (Bad passwords|Authentication failed)"? no
> > "Press any key to continue"? no
> > "Enter Selection: "? no
> > "Last login:"? no
> > "@[^\r\n]+ ([Pp]assword|passwd):"? no
> > "pix"? no
> > "([Pp]assword|passwd):"? no
> > "(#| \(enable\))"? no
> > "Login invalid"? no
> > expect: does " \r\n" (spawn_id exp4) match regular expression
> "(Connection
> > refused|Secure connection [^\n\r]+ refused)"? no
> > "(Connection closed by|Connection to [^\n\r]+ closed)"? no
> > expect: does " \r\n" (spawn_id exp4) match glob pattern "unknown host\r"?
> no
> > expect: does " \r\n" (spawn_id exp4) match glob pattern "Host is
> > unreachable"? no
> > "No address associated with name"? no
> > "(Host key not found |The authenticity of host .* be
> > established).*(yes/no)?"? no
> > "HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no
> > "Offending key for .* (yes/no)?"? no
> > "(denied|Sorry)"? no
> > "Login failed"? no
> > "% (Bad passwords|Authentication failed)"? no
> > "Press any key to continue"? no
> > "Enter Selection: "? no
> > "Last login:"? no
> > "@[^\r\n]+ ([Pp]assword|passwd):"? no
> > "pix"? no
> > "([Pp]assword|passwd):"? no
> > "(#| \(enable\))"? no
> > "Login invalid"? no
> > Type help or '?' for a list of available commands.
> > ASAFW01>
> > expect: does " \r\nType help or '?' for a list of available
> > commands.\r\n\rASAFW01> " (spawn_id exp4) match regular expression
> > "(Connection refused|Secure connection [^\n\r]+ refused)"? no
> > "(Connection closed by|Connection to [^\n\r]+ closed)"? no
> > expect: does " \r\nType help or '?' for a list of available
> > commands.\r\n\rASAFW01> " (spawn_id exp4) match glob pattern "unknown
> > host\r"? no
> > expect: does " \r\nType help or '?' for a list of available
> > commands.\r\n\rASAFW01> " (spawn_id exp4) match glob pattern "Host is
> > unreachable"? no
> > "No address associated with name"? no
> > "(Host key not found |The authenticity of host .* be
> > established).*(yes/no)?"? no
> > "HOST IDENTIFICATION HAS CHANGED.* (yes/no)?"? no
> > "Offending key for .* (yes/no)?"? no
> > "(denied|Sorry)"? no
> > "Login failed"? no
> > "% (Bad passwords|Authentication failed)"? no
> > "Press any key to continue"? no
> > "Enter Selection: "? no
> > "Last login:"? no
> > "@[^\r\n]+ ([Pp]assword|passwd):"? no
> > "pix"? no
> > "([Pp]assword|passwd):"? no
> > "(#| \(enable\))"? no
> > "Login invalid"? no
> > expect: timed out
> > Error: TIMEOUT reached
> > [rancid at LinuxSrv ~]$
> >
> >
> >
> > On Thu, Dec 17, 2009 at 11:03 AM, William <willay at gmail.com> wrote:
> >>
> >> Ronni,
> >>
> >> Try running the clogin program manually, for example type from the
> >> command prompt (as the rancid user):
> >>
> >> clogin 10.10.1.2
> >>
> >> and paste the output?
> >>
> >> Cheers,
> >>
> >>
> >>
> >> 2009/12/17 Ronni Jensen <ronnij at gmail.com>:
> >> > Hi,
> >> >
> >> > I tried with the example you wrote, but it didn't change anything.. I
> >> > still
> >> > get the "clogin error: Error: TIMEOUT reached" errors in the logfile.
> >> >
> >> > Any other suggestions how I can fix the error?
> >> >
> >> > Best regards,
> >> > Ronni
> >> >
> >> > On Thu, Dec 17, 2009 at 9:10 AM, William <willay at gmail.com> wrote:
> >> >>
> >> >> Ronni,
> >> >>
> >> >> According to your email when accessing the firewall manually there is
> >> >> no autoenable, so I would try the following config for your device:
> >> >>
> >> >> add userprompt 10.10.1.2      pix
> >> >> add method 10.10.1.2          telnet
> >> >> add password 10.10.1.2        {exec_pass} {enable_pass}
> >> >>
> >> >>
> >> >> hope this helps.
> >> >>
> >> >> Cheers,
> >> >>
> >> >> Will
> >> >>
> >> >> 2009/12/17 Ronni Jensen <ronnij at gmail.com>:
> >> >> > Hi,
> >> >> >
> >> >> > My rancid installation works perfectly for Cisco Catalyst switches
> >> >> > and
> >> >> > other
> >> >> > stuff too.. but for the Cisco ASA firewalls it fails.. In the logs,
> I
> >> >> > get
> >> >> > the "clogin error: Error: TIMEOUT reached" error.
> >> >> >
> >> >> > .cloginrc for a particular FW looks like:
> >> >> >
> >> >> > add password 10.10.1.2        {exec_pass} {enable_pass}
> >> >> > add method 10.10.1.2          telnet
> >> >> > add autoenable 10.10.1.2      {1}
> >> >> >
> >> >> > I've also tried replacing IP-address with DNS hostname or just
> using
> >> >> > a
> >> >> > wildcard star... no difference. When I telnet directly from the
> >> >> > server
> >> >> > to
> >> >> > the firewall, the sequence looks like:
> >> >> >
> >> >> >
> >> >> > [me at LinuxSrv ~]$ telnet 192.168.1.2
> >> >> > Trying 10.10.1.2...
> >> >> > Connected to 10.10.1.2.
> >> >> > Escape character is '^]'.
> >> >> > User Access Verification
> >> >> > Password: <TYPING PASSWD>
> >> >> > Type help or '?' for a list of available commands.
> >> >> > UMUSASA01> <TYPING "ENABLE">
> >> >> > Password: *******
> >> >> > UMUSASA01#
> >> >> >
> >> >> > Any ideas?
> >> >> > _______________________________________________
> >> >> > Rancid-discuss mailing list
> >> >> > Rancid-discuss at shrubbery.net
> >> >> > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
> >> >> >
> >> >
> >> >
> >
> >
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091217/25bb571f/attachment.html 

From rwest at zyedge.com  Thu Dec 17 14:06:22 2009
From: rwest at zyedge.com (Ryan West)
Date: Thu, 17 Dec 2009 14:06:22 +0000
Subject: [rancid] Re: Problem getting config from Cisco ASA firewalls
In-Reply-To: <7a76d30f0912170320o4ad996c2p567a79fe806cf0ae@mail.gmail.com>
References: <7a76d30f0912162330t304da2camec373f1ab323bbde@mail.gmail.com>
	<a24358fb0912170010h2609bcdbu7f4e63dda2b8c1ee@mail.gmail.com>
	<7a76d30f0912170200p13188d60i48fba98928436745@mail.gmail.com>
	<a24358fb0912170203j5976d042q4ea0fdba2b08e13b@mail.gmail.com>
	<7a76d30f0912170230j3e3ec944s1d38022739b8881a@mail.gmail.com>
	<a24358fb0912170236m2e789037yd8546e7125e0260f@mail.gmail.com>
	<7a76d30f0912170320o4ad996c2p567a79fe806cf0ae@mail.gmail.com>
Message-ID: <5DC4853C6CC3EE4788779E0726E034DD05C22B@zy-ex1.zyedge.local>

Ronnie,

From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Ronni Jensen
Sent: Thursday, December 17, 2009 6:20 AM
To: William


User Access Verification
Password:
Type help or '?' for a list of available commands.
ASAFW01>
Error: TIMEOUT reached
[rancid at LinuxSrv ~]$



Looks like there is no AAA (local or otherwise) being used, you should just need:

add method 10.10.1.2          telnet
add password 10.10.1.2        {exec_pass} {enable_pass}
add autoenable 10.10.1.2             0

-ryan

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091217/ca8f64a3/attachment.html 

From ronnij at gmail.com  Thu Dec 17 15:38:45 2009
From: ronnij at gmail.com (Ronni Jensen)
Date: Thu, 17 Dec 2009 16:38:45 +0100
Subject: [rancid] Re: Problem getting config from Cisco ASA firewalls
In-Reply-To: <5DC4853C6CC3EE4788779E0726E034DD05C22B@zy-ex1.zyedge.local>
References: <7a76d30f0912162330t304da2camec373f1ab323bbde@mail.gmail.com>
	<a24358fb0912170010h2609bcdbu7f4e63dda2b8c1ee@mail.gmail.com>
	<7a76d30f0912170200p13188d60i48fba98928436745@mail.gmail.com>
	<a24358fb0912170203j5976d042q4ea0fdba2b08e13b@mail.gmail.com>
	<7a76d30f0912170230j3e3ec944s1d38022739b8881a@mail.gmail.com>
	<a24358fb0912170236m2e789037yd8546e7125e0260f@mail.gmail.com>
	<7a76d30f0912170320o4ad996c2p567a79fe806cf0ae@mail.gmail.com>
	<5DC4853C6CC3EE4788779E0726E034DD05C22B@zy-ex1.zyedge.local>
Message-ID: <7a76d30f0912170738m5bd76e64h78b7ff4b325d38fa@mail.gmail.com>

Ryan,

Thanks a mill... that worked like a charm :-D



On Thu, Dec 17, 2009 at 3:06 PM, Ryan West <rwest at zyedge.com> wrote:

>  Ronnie,
>
>
>
> *From:* rancid-discuss-bounces at shrubbery.net [mailto:
> rancid-discuss-bounces at shrubbery.net] *On Behalf Of *Ronni Jensen
> *Sent:* Thursday, December 17, 2009 6:20 AM
> *To:* William
>
>
> User Access Verification
>
> Password:
> Type help or '?' for a list of available commands.
> ASAFW01>
>
> Error: TIMEOUT reached
> [rancid at LinuxSrv ~]$
>
>
>
>
>
>
>
> Looks like there is no AAA (local or otherwise) being used, you should just
> need:
>
>
>
> add method 10.10.1.2          telnet
>
> add password 10.10.1.2        {exec_pass} {enable_pass}
>
> add autoenable 10.10.1.2             0
>
>
>
> -ryan
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091217/5c8e70c8/attachment.html 

From pierg75 at yahoo.it  Thu Dec 17 20:01:45 2009
From: pierg75 at yahoo.it (Pierguido)
Date: Thu, 17 Dec 2009 21:01:45 +0100
Subject: [rancid] Re: Rancid and Fortinet
In-Reply-To: <200912170908.30592.diego.ercolani@ssis.sm>
References: <616125.15144.qm@web28603.mail.ukl.yahoo.com>
	<200912170908.30592.diego.ercolani@ssis.sm>
Message-ID: <4B2A8E29.4000306@yahoo.it>

Diego Ercolani wrote:
> I submitted a patch to correct problems on my fortinet during June....
> 
> http://www.shrubbery.net/pipermail/rancid-discuss/2009-June/004005.html
> 
> Please feel free to modify and adapt to your installation but please return it 
> to the community
> 
> Hope This Help
Yes, thank you, With those patches i'm able to backups the configs of 
the fortinet.
I saw you made a patch also for the 3coms, which "type" do i have to put 
in the router.db?

Thanks

Pier

From dan.schmidt at uplinkdata.com  Thu Dec 17 22:22:14 2009
From: dan.schmidt at uplinkdata.com (Schmidt, Daniel)
Date: Thu, 17 Dec 2009 15:22:14 -0700
Subject: [rancid] Re: Rancid and Fortinet
In-Reply-To: <200912170908.30592.diego.ercolani@ssis.sm>
References: <616125.15144.qm@web28603.mail.ukl.yahoo.com>
	<200912170908.30592.diego.ercolani@ssis.sm>
Message-ID: <05CC562AFB5A9446A1BC3F66AD04A3BCC74BC1@che-exch-003.uplinkdata.com>

Perhaps somebody would be interested in compiling all the unofficial/beta patches in one place so people don't have to search through the list archives?

-----Original Message-----
From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Diego Ercolani
Sent: Thursday, December 17, 2009 1:08 AM
To: rancid-discuss at shrubbery.net
Subject: [rancid] Re: Rancid and Fortinet

I submitted a patch to correct problems on my fortinet during June....

http://www.shrubbery.net/pipermail/rancid-discuss/2009-June/004005.html

Please feel free to modify and adapt to your installation but please return it 
to the community

Hope This Help
Diego

In data mercoled? 16 dicembre 2009 18:12:09, Pier ha scritto:
: > > Hi Pier,
> >
> > It depends on your firmware level.
> > On the new firmware (> 3 iirc), the good commands are:
> > + get system status (for GetSystem)
> > + show (for GetConf)
> >
> > I use rancid to backup a lot of Fortinet (~ 200) without
> > pbs.
> >
> > Regards,
> 
> The fortinet is using a version 3 firmware.
> I get a timeout error...do i have to modify something to make it work?
> Thanks
> 
> Pier
_______________________________________________
Rancid-discuss mailing list
Rancid-discuss at shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

From heas at shrubbery.net  Thu Dec 17 22:27:32 2009
From: heas at shrubbery.net (john heasley)
Date: Thu, 17 Dec 2009 14:27:32 -0800
Subject: [rancid] Re: Rancid and Fortinet
In-Reply-To: <05CC562AFB5A9446A1BC3F66AD04A3BCC74BC1@che-exch-003.uplinkdata.com>
References: <616125.15144.qm@web28603.mail.ukl.yahoo.com>
	<200912170908.30592.diego.ercolani@ssis.sm>
	<05CC562AFB5A9446A1BC3F66AD04A3BCC74BC1@che-exch-003.uplinkdata.com>
Message-ID: <20091217222732.GC6944@shrubbery.net>

Thu, Dec 17, 2009 at 03:22:14PM -0700, Schmidt, Daniel:
> Perhaps somebody would be interested in compiling all the unofficial/beta patches in one place so people don't have to search through the list archives?

it'd be great if someone other than the poster would verify that patches
actually work for platforms that I can't verify myself.

> -----Original Message-----
> From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Diego Ercolani
> Sent: Thursday, December 17, 2009 1:08 AM
> To: rancid-discuss at shrubbery.net
> Subject: [rancid] Re: Rancid and Fortinet
> 
> I submitted a patch to correct problems on my fortinet during June....
> 
> http://www.shrubbery.net/pipermail/rancid-discuss/2009-June/004005.html
> 
> Please feel free to modify and adapt to your installation but please return it 
> to the community
> 
> Hope This Help
> Diego
> 
> In data mercoled? 16 dicembre 2009 18:12:09, Pier ha scritto:
> : > > Hi Pier,
> > >
> > > It depends on your firmware level.
> > > On the new firmware (> 3 iirc), the good commands are:
> > > + get system status (for GetSystem)
> > > + show (for GetConf)
> > >
> > > I use rancid to backup a lot of Fortinet (~ 200) without
> > > pbs.
> > >
> > > Regards,
> > 
> > The fortinet is using a version 3 firmware.
> > I get a timeout error...do i have to modify something to make it work?
> > Thanks
> > 
> > Pier
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

From dan.schmidt at uplinkdata.com  Thu Dec 17 22:34:47 2009
From: dan.schmidt at uplinkdata.com (Schmidt, Daniel)
Date: Thu, 17 Dec 2009 15:34:47 -0700
Subject: [rancid] Re: Rancid and Fortinet
In-Reply-To: <20091217222732.GC6944@shrubbery.net>
References: <616125.15144.qm@web28603.mail.ukl.yahoo.com>
	<200912170908.30592.diego.ercolani@ssis.sm>
	<05CC562AFB5A9446A1BC3F66AD04A3BCC74BC1@che-exch-003.uplinkdata.com>
	<20091217222732.GC6944@shrubbery.net>
Message-ID: <05CC562AFB5A9446A1BC3F66AD04A3BCC74BC2@che-exch-003.uplinkdata.com>

Hence said need for the page - can't expect John to do everything.
Well, that and maybe for patches that John and I disagree on.  ;-)

-----Original Message-----
From: john heasley [mailto:heas at shrubbery.net] 
Sent: Thursday, December 17, 2009 3:28 PM
To: Schmidt, Daniel
Cc: Diego Ercolani; rancid-discuss at shrubbery.net
Subject: Re: [rancid] Re: Rancid and Fortinet

Thu, Dec 17, 2009 at 03:22:14PM -0700, Schmidt, Daniel:
> Perhaps somebody would be interested in compiling all the
unofficial/beta patches in one place so people don't have to search
through the list archives?

it'd be great if someone other than the poster would verify that patches
actually work for platforms that I can't verify myself.

> -----Original Message-----
> From: rancid-discuss-bounces at shrubbery.net
[mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Diego
Ercolani
> Sent: Thursday, December 17, 2009 1:08 AM
> To: rancid-discuss at shrubbery.net
> Subject: [rancid] Re: Rancid and Fortinet
> 
> I submitted a patch to correct problems on my fortinet during June....
> 
>
http://www.shrubbery.net/pipermail/rancid-discuss/2009-June/004005.html
> 
> Please feel free to modify and adapt to your installation but please
return it 
> to the community
> 
> Hope This Help
> Diego
> 
> In data mercoled? 16 dicembre 2009 18:12:09, Pier ha scritto:
> : > > Hi Pier,
> > >
> > > It depends on your firmware level.
> > > On the new firmware (> 3 iirc), the good commands are:
> > > + get system status (for GetSystem)
> > > + show (for GetConf)
> > >
> > > I use rancid to backup a lot of Fortinet (~ 200) without
> > > pbs.
> > >
> > > Regards,
> > 
> > The fortinet is using a version 3 firmware.
> > I get a timeout error...do i have to modify something to make it
work?
> > Thanks
> > 
> > Pier
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

From diego.ercolani at ssis.sm  Fri Dec 18 09:04:23 2009
From: diego.ercolani at ssis.sm (Diego Ercolani)
Date: Fri, 18 Dec 2009 10:04:23 +0100
Subject: [rancid] Re: Rancid and Fortinet
In-Reply-To: <4B2A8E29.4000306@yahoo.it>
References: <616125.15144.qm@web28603.mail.ukl.yahoo.com>
	<200912170908.30592.diego.ercolani@ssis.sm>
	<4B2A8E29.4000306@yahoo.it>
Message-ID: <200912181004.23553.diego.ercolani@ssis.sm>

It's an enhancement for Baseline Switches (the model I've developed on is 
3comBLS2948), so obviously the "machine type" to put in router.db is 3combls

I remember that I have also made some enhancements to .clogin parser needed by 
my linux enhancements to build the correct database. I hope these enhancement 
will be included and maintained in next releases of rancid.

Diego

In data gioved? 17 dicembre 2009 21:01:45, Pierguido ha scritto:
: > Diego Ercolani wrote:
> > I submitted a patch to correct problems on my fortinet during June....
> >
> > http://www.shrubbery.net/pipermail/rancid-discuss/2009-June/004005.html
> >
> > Please feel free to modify and adapt to your installation but please
> > return it to the community
> >
> > Hope This Help
> 
> Yes, thank you, With those patches i'm able to backups the configs of
> the fortinet.
> I saw you made a patch also for the 3coms, which "type" do i have to put
> in the router.db?
> 
> Thanks
> 
> Pier

From mstefani at redhat.com  Fri Dec 18 10:14:33 2009
From: mstefani at redhat.com (Michael Stefaniuc)
Date: Fri, 18 Dec 2009 11:14:33 +0100
Subject: [rancid]  Patch List (Was: Re: Rancid and Fortinet)
In-Reply-To: <05CC562AFB5A9446A1BC3F66AD04A3BCC74BC1@che-exch-003.uplinkdata.com>
References: <616125.15144.qm@web28603.mail.ukl.yahoo.com>	<200912170908.30592.diego.ercolani@ssis.sm>
	<05CC562AFB5A9446A1BC3F66AD04A3BCC74BC1@che-exch-003.uplinkdata.com>
Message-ID: <4B2B5609.2070803@redhat.com>

Schmidt, Daniel wrote:
> Perhaps somebody would be interested in compiling all the
> unofficial/beta patches in one place so people don't have to search
> through the list archives?
That's actually a perfect use case for a wiki. Does a wiki exist for
rancid (the software and not the band ;)?

bye
	michael
-- 
Michael Stefaniuc                           Tel.: +49-711-96437-199
Consulting Communications Engineer          Fax.: +49-711-96437-111
--------------------------------------------------------------------
Reg. Adresse: Red Hat GmbH, Otto-Hahn-Strasse 20, 85609 Dornach
Handelsregister: Amtsgericht Muenchen HRB 153243
Gesch?ftsf?hrer: Brendan Lane, Charlie Peters, Michael Cunningham,
                 Charles Cachera

From radwep at gmail.com  Fri Dec 18 14:56:36 2009
From: radwep at gmail.com (Rad Wep)
Date: Fri, 18 Dec 2009 15:56:36 +0100
Subject: [rancid]  Is it possible to modify the diff email?
Message-ID: <7efdf8de0912180656h574510b9me04fc6aa2a6d758b@mail.gmail.com>

Hello everybody,

Rancid works great but I have a little problem about the mail we receive
when there is a configuration modification.
We would like to know if rancid can alert us without sending the
configuration in the mail because it's a security issue!
We just want to have a mail like "routerX has been modified".

Is is possible? Where can we do that?

Many Thanks in advance
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091218/38947088/attachment.html 

From heas at shrubbery.net  Fri Dec 18 18:12:58 2009
From: heas at shrubbery.net (john heasley)
Date: Fri, 18 Dec 2009 10:12:58 -0800
Subject: [rancid] Re: Is it possible to modify the diff email?
In-Reply-To: <7efdf8de0912180656h574510b9me04fc6aa2a6d758b@mail.gmail.com>
References: <7efdf8de0912180656h574510b9me04fc6aa2a6d758b@mail.gmail.com>
Message-ID: <20091218181258.GB13449@shrubbery.net>

Fri, Dec 18, 2009 at 03:56:36PM +0100, Rad Wep:
> Hello everybody,
> 
> Rancid works great but I have a little problem about the mail we receive
> when there is a configuration modification.
> We would like to know if rancid can alert us without sending the
> configuration in the mail because it's a security issue!
> We just want to have a mail like "routerX has been modified".
> 
> Is is possible? Where can we do that?

change the cvs diff code in control_rancid.

From radwep at gmail.com  Fri Dec 18 21:33:12 2009
From: radwep at gmail.com (Rad Wep)
Date: Fri, 18 Dec 2009 22:33:12 +0100
Subject: [rancid] Re: Is it possible to modify the diff email?
In-Reply-To: <20091218181258.GB13449@shrubbery.net>
References: <7efdf8de0912180656h574510b9me04fc6aa2a6d758b@mail.gmail.com>
	<20091218181258.GB13449@shrubbery.net>
Message-ID: <7efdf8de0912181333i312ef1f5vf037e641434fa953@mail.gmail.com>

Hello Thanks! But where is that code?
Second Question : Can we keep the different passwords of the config and
don't have " password <removed> " ?

Thx!

2009/12/18 john heasley <heas at shrubbery.net>

> Fri, Dec 18, 2009 at 03:56:36PM +0100, Rad Wep:
> > Hello everybody,
> >
> > Rancid works great but I have a little problem about the mail we receive
> > when there is a configuration modification.
> > We would like to know if rancid can alert us without sending the
> > configuration in the mail because it's a security issue!
> > We just want to have a mail like "routerX has been modified".
> >
> > Is is possible? Where can we do that?
>
> change the cvs diff code in control_rancid.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091218/753536c4/attachment.html 

From zeusdadog at gmail.com  Fri Dec 18 21:45:36 2009
From: zeusdadog at gmail.com (Jay Nakamura)
Date: Fri, 18 Dec 2009 16:45:36 -0500
Subject: [rancid]  Rancid and Extreme switch
Message-ID: <9418aca70912181345p2f43a493h8da71b7f6eec170e@mail.gmail.com>

I can't for the life of me get RANCID to work with our Extreme switch.

Extreme Summit X350
12.0.4.5

This is the output from xrancid
$ ./xrancid -V
rancid 2.3.2a10
$ ./xrancid -d 192.168.45.13
executing clogin -t 90 -c "show version;show memory;show diag;show
switch;show slot;show configuration detail;show configuration"
192.168.45.13
PROMPT MATCH: core2-indy[:.]\d+ ?#
HIT COMMAND:core2-indy.1 #  show version
    In ShowVersion: core2-indy.1 #  show version

Then it just hangs there.

Any ideas?

Thanks!

From zeusdadog at gmail.com  Mon Dec 21 16:30:47 2009
From: zeusdadog at gmail.com (Jay Nakamura)
Date: Mon, 21 Dec 2009 11:30:47 -0500
Subject: [rancid] Re: Rancid and Extreme switch
In-Reply-To: <9418aca70912181345p2f43a493h8da71b7f6eec170e@mail.gmail.com>
References: <9418aca70912181345p2f43a493h8da71b7f6eec170e@mail.gmail.com>
Message-ID: <9418aca70912210830m627ea68dy68c15c66cf606873@mail.gmail.com>

Someone suggested installing the expect patch.  I rebuilt Expect with
the patch but still seeing the same issue.  Any other suggestions?

On Fri, Dec 18, 2009 at 4:45 PM, Jay Nakamura <zeusdadog at gmail.com> wrote:
> I can't for the life of me get RANCID to work with our Extreme switch.
>
> Extreme Summit X350
> 12.0.4.5
>
> This is the output from xrancid
> $ ./xrancid -V
> rancid 2.3.2a10
> $ ./xrancid -d 192.168.45.13
> executing clogin -t 90 -c "show version;show memory;show diag;show
> switch;show slot;show configuration detail;show configuration"
> 192.168.45.13
> PROMPT MATCH: core2-indy[:.]\d+ ?#
> HIT COMMAND:core2-indy.1 # ?show version
> ? ?In ShowVersion: core2-indy.1 # ?show version
>
> Then it just hangs there.
>
> Any ideas?
>
> Thanks!
>

From cgauthier at mapscu.com  Mon Dec 21 22:38:03 2009
From: cgauthier at mapscu.com (Chris Gauthier)
Date: Mon, 21 Dec 2009 14:38:03 -0800
Subject: [rancid] Re: upgrade from 2.3.2-a7-2?
In-Reply-To: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381460D51C@mshin01.mapscu.com>
References: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381460D51C@mshin01.mapscu.com>
Message-ID: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F658@mshin01.mapscu.com>

Thanks to John for the answer he sent me about this earlier.  I thought I would share my feedback for anyone using Ubuntu 8.04 LTS Server:

I had the 3 packages mentioned previously installed.  What someone did when packaging for Ubuntu was to split the installation into 3 different debian packages (why??? Who knows...)  The rancid-cgi was the looking glass installation.  The rancid-core is just that, the core files, and the rancid-util includes the /share directory (rtronline, downtime, etc).

I uninstalled all three packages and built the 2.3.2 version install with the following parameters:

~ # tar zxf rancid-2.3.2.tar.gz
~/rancid-2.3.2 # ./configure --prefix=/var/lib/rancid --exec-prefix=/usr/lib/rancid --datadir=/usr/share --sysconfdir=/etc/rancid --mandir=/usr/share/man
~/rancid-2.3.2 # make
~/rancid-2.3.2 # make install
~/rancid-2.3.2 # ln -s /usr/lib/rancid/bin ~rancid/bin
~/rancid-2.3.2 # ln -s /var/log/rancid ~rancid/logs

Everything works normally in terms of getting the info.  However, it remains to be seen how the configs do over time (do I get annoying change emails every time or not?).

Chris

From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Chris Gauthier
Sent: Friday, November 06, 2009 10:50 AM
To: rancid-discuss at shrubbery.net
Subject: [rancid] upgrade from 2.3.2-a7-2?

So, now that I have installed my new ASA5520, I have the same "coredump" file issue that had been previously reported by others.? I know the fix is to upgrade to 2.3.2, but I'm not sure of the best way to do that since my installation is an ubuntu package installation.

If I uninstall the package, then I will lose my configs and repository, right?

How would you handle this?? I think I need to uninstall the 3 rancid packages and build from source.? I just don't want to lose everything in the process.

Here are the 3 packages (all 2.3.20-a7-2)
rancid-cgi
rancid-core
rancid-util

Ideas?

Chris Gauthier
Network Administrator
MaPS Credit Union
v: 503.375.2445
f: 503.779.1083
http://www.mapscu.com


"For once you have tasted flight you will walk the earth with your eyes turned skywards, for there you have been and there you will long to return."
-Leonardo da Vinci


From cgauthier at mapscu.com  Mon Dec 21 22:41:13 2009
From: cgauthier at mapscu.com (Chris Gauthier)
Date: Mon, 21 Dec 2009 14:41:13 -0800
Subject: [rancid]  Cisco ASA Coredump bug--fixed yet?
Message-ID: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F659@mshin01.mapscu.com>

Did anyone ever find a solution to the coredump bug on the Cisco ASA?
Did TAC ever come back with anything?

Thanks,

Chris

"For once you have tasted flight you will walk the earth with your eyes
turned skywards, for there you have been and there you will long to
return."
-Leonardo da Vinci

-----Original Message-----
From: rancid at example.com
Sent: Monday, December 21, 2009 2:32 PM
To: rancid-firewalls at example.com
Subject: firewalls router config diffs


Index: configs/firewall.example.com
===================================================================
retrieving revision 1.13
diff -U 4 -r1.13 firewall.example.com
@@ -41,9 +41,9 @@
  !Flash:   329  3756345     Feb 05 2009 02:44:30
anyconnect-linux-2.2.0133-k9.pkg
  !Flash:   330  11348300    Nov 06 2009 00:48:08  asdm-621.bin
  !Flash:   511  987         Nov 17 2009 17:31:13  dap.xml
  !Flash:   346  4096        Nov 06 2009 00:55:40  coredumpinfo
- !Flash:   347  43          Dec 21 2009 00:12:15
coredumpinfo/coredump.cfg
+ !Flash:   347  43          Dec 21 2009 14:16:31
coredumpinfo/coredump.cfg
  !Flash: 255844352 bytes total (171683840 bytes free)
  !
  !Flash: disk0: Directory of disk0:/
  !Flash: disk0: 314    -rwx  14137344    16:06:18 Dec 31 2002
asa804-k8.bin

From ron.whitney at doitbest.com  Mon Dec 21 23:37:14 2009
From: ron.whitney at doitbest.com (Ron Whitney)
Date: Mon, 21 Dec 2009 18:37:14 -0500
Subject: [rancid] Re: Cisco ASA Coredump bug--fixed yet?
In-Reply-To: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F659@mshin01.mapscu.com>
Message-ID: <1FD6BFAE6EA54341821D01FB8E617B6501E4B181@EXCHANGE1.ntserv.doitbestcorp.com>

 
> Did anyone ever find a solution to the coredump bug on the 
> Cisco ASA? Did TAC ever come back with anything?

Here's the last status I received (about a week ago) on that bug:

The following bug(s) you have subscribed to have been updated as
follows:

------------------------------------------------------------------------
----------

BugID: CSCsz85597
What Changed: Fixed in version
Title: coredump.cfg file gets rewritten every time show run is executed
Technology: nav
Version: 8.2(1)
Fixed-in: 8.2(1.2), 8.3(0.0), 100.3(0.3)M
Severity: 2
State: Verified
Bug Details: 
http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method
=fetchBugDetails&bugId=CSCsz85597 

From rwest at zyedge.com  Mon Dec 21 23:45:01 2009
From: rwest at zyedge.com (Ryan West)
Date: Mon, 21 Dec 2009 23:45:01 +0000
Subject: [rancid] Re: Cisco ASA Coredump bug--fixed yet?
In-Reply-To: <1FD6BFAE6EA54341821D01FB8E617B6501E4B181@EXCHANGE1.ntserv.doitbestcorp.com>
References: <1FD6BFAE6EA54341821D01FB8E617B6501E4B181@EXCHANGE1.ntserv.doitbestcorp.com>
Message-ID: <594485F7-7426-4D1B-AD5B-7F9D613B82E6@zyedge.com>

8.2.1(11) interim has the fix.

Sent from handheld.

On Dec 21, 2009, at 6:37 PM, "Ron Whitney" <ron.whitney at doitbest.com>  
wrote:

>
>> Did anyone ever find a solution to the coredump bug on the
>> Cisco ASA? Did TAC ever come back with anything?
>
> Here's the last status I received (about a week ago) on that bug:
>
> The following bug(s) you have subscribed to have been updated as
> follows:
>
> --- 
> ---------------------------------------------------------------------
> ----------
>
> BugID: CSCsz85597
> What Changed: Fixed in version
> Title: coredump.cfg file gets rewritten every time show run is  
> executed
> Technology: nav
> Version: 8.2(1)
> Fixed-in: 8.2(1.2), 8.3(0.0), 100.3(0.3)M
> Severity: 2
> State: Verified
> Bug Details:
> http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method
> =fetchBugDetails&bugId=CSCsz85597
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

From moens at carrier2carrier.com  Mon Dec 21 23:47:38 2009
From: moens at carrier2carrier.com (M. Moens)
Date: Tue, 22 Dec 2009 00:47:38 +0100
Subject: [rancid] Re: Cisco ASA Coredump bug--fixed yet?
In-Reply-To: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F659@mshin01.mapscu.com>
References: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F659@mshin01.mapscu.com>
Message-ID: <1261439258.8959.6.camel@acer>

Chris,
Upgrading to the latest ASA software solves the problem.
No need to change anything on rancid.

Martin


On ma, 2009-12-21 at 14:41 -0800, Chris Gauthier wrote:
> Did anyone ever find a solution to the coredump bug on the Cisco ASA?
> Did TAC ever come back with anything?
> 
> Thanks,
> 
> Chris
> 
> "For once you have tasted flight you will walk the earth with your eyes
> turned skywards, for there you have been and there you will long to
> return."
> -Leonardo da Vinci
> 
> -----Original Message-----
> From: rancid at example.com
> Sent: Monday, December 21, 2009 2:32 PM
> To: rancid-firewalls at example.com
> Subject: firewalls router config diffs
> 
> 
> Index: configs/firewall.example.com
> ===================================================================
> retrieving revision 1.13
> diff -U 4 -r1.13 firewall.example.com
> @@ -41,9 +41,9 @@
>   !Flash:   329  3756345     Feb 05 2009 02:44:30
> anyconnect-linux-2.2.0133-k9.pkg
>   !Flash:   330  11348300    Nov 06 2009 00:48:08  asdm-621.bin
>   !Flash:   511  987         Nov 17 2009 17:31:13  dap.xml
>   !Flash:   346  4096        Nov 06 2009 00:55:40  coredumpinfo
> - !Flash:   347  43          Dec 21 2009 00:12:15
> coredumpinfo/coredump.cfg
> + !Flash:   347  43          Dec 21 2009 14:16:31
> coredumpinfo/coredump.cfg
>   !Flash: 255844352 bytes total (171683840 bytes free)
>   !
>   !Flash: disk0: Directory of disk0:/
>   !Flash: disk0: 314    -rwx  14137344    16:06:18 Dec 31 2002
> asa804-k8.bin
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss


From perc69 at gmail.com  Tue Dec 22 09:50:07 2009
From: perc69 at gmail.com (Per Carlson)
Date: Tue, 22 Dec 2009 10:50:07 +0100
Subject: [rancid] Re: upgrade from 2.3.2-a7-2?
In-Reply-To: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F658@mshin01.mapscu.com>
References: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381460D51C@mshin01.mapscu.com>
	<0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F658@mshin01.mapscu.com>
Message-ID: <746ca6da0912220150l3d5592d5q842dd7cb68aad7da@mail.gmail.com>

Hi.

This is more related to managing a Debian-based (like Ubuntu) server
than a RANCID topic, but I'll answer it here anyway.

> I had the 3 packages mentioned previously installed. ?What someone did when packaging for Ubuntu was to split the installation into 3 different debian packages (why??? Who knows...)

This is a very normal approach in the Debian world.

If, for example, a software is a bundle of several components that
functions seperatly, some users are only interested in componentA,
while others in componentB. Why forcing users to install components
(which potentionally could be large) they don't use? Instead Debian
splits the (binary) package in componentA and B, and gives the users
the freedom to choose.

That's exactly the argument here: some wants to run the looking glass
portion of RANCID, and others want to run the configuration
maintenance task, and some of *those* also want the web-ui.

(There are other arguments behind splitting a package, but they don't
apply to RANCID.)

> If I uninstall the package, then I will lose my configs and repository, right?

No you won't (but a backup never hurts). Debian differs between
"uninstall" and "purge". Uninstall don't remove any config files or
data files, just binaries (this is not 100% correct, but I'll drop the
details here). Purge on the other hand also removes the config files,
and potentionally the data files.

> How would you handle this?? I think I need to uninstall the 3 rancid packages and build from source.? I just don't want to lose everything in the process.

The best way to do this is using multiple package sources. You can use
the normal repository for Hardy as normal, and add a "lastest and
greatest" repository separatly. You then use APT-Pinning to set the
priorities between the repositories (Hardy as default, "lastest and
greatest" when specifically asked for). A simple web-search returns a
lot of guides and howto's on the topic.

As a side note: tracking "lastest and greatest" is much easier in
Debian (always testing and/or unstable) then in Ubuntu (right now:
lucid).

-- 
Pelle

From tsai at eng.fsu.edu  Tue Dec 22 14:28:27 2009
From: tsai at eng.fsu.edu (Jack Tsai)
Date: Tue, 22 Dec 2009 09:28:27 -0500
Subject: [rancid]  /root/.clogin.rc
Message-ID: <4B30D78B.5030409@eng.fsu.edu>

Recently we changed our login method to the Cisco switches as follows:
    Username: hello
    (no password needed, user hello automatically login to privilege 
level 7, a restricted user)
    Hostname# enable
    Password: LetMeIn
    Hostname#
    (now we are in the enable mode with privilege level 15)

Please teach me how to set up the /root/.cloginrc in order to allow 
rancid to obtain the full privilege.

Thanks,
Jack
network administrator

From tsai at eng.fsu.edu  Tue Dec 22 14:32:49 2009
From: tsai at eng.fsu.edu (Jack Tsai)
Date: Tue, 22 Dec 2009 09:32:49 -0500
Subject: [rancid]  /root/.cloginrc
Message-ID: <4B30D891.8030808@eng.fsu.edu>

We are using the rancid version available in March, 2009.
Sometimes {LetMeIn!} does not work as a password and LetMeIn! does.
Sometimes {h at llo} does not work as a username and h at llo does.
When should we use ssh instead of {ssh}?

Thanks,
Jack

From heas at shrubbery.net  Tue Dec 22 16:23:51 2009
From: heas at shrubbery.net (john heasley)
Date: Tue, 22 Dec 2009 08:23:51 -0800
Subject: [rancid] Re: /root/.clogin.rc
In-Reply-To: <4B30D78B.5030409@eng.fsu.edu>
References: <4B30D78B.5030409@eng.fsu.edu>
Message-ID: <20091222162351.GH3767@shrubbery.net>

Tue, Dec 22, 2009 at 09:28:27AM -0500, Jack Tsai:
> Recently we changed our login method to the Cisco switches as follows:
>     Username: hello
>     (no password needed, user hello automatically login to privilege 
> level 7, a restricted user)
>     Hostname# enable
>     Password: LetMeIn
>     Hostname#
>     (now we are in the enable mode with privilege level 15)
> 
> Please teach me how to set up the /root/.cloginrc in order to allow 
> rancid to obtain the full privilege.

clogin doesnt support this.  it presumes that a # prompt indicates
enabled mode, which it does (not level 1).  so, in your case it
think it is already enabled.

From heas at shrubbery.net  Tue Dec 22 16:29:32 2009
From: heas at shrubbery.net (john heasley)
Date: Tue, 22 Dec 2009 08:29:32 -0800
Subject: [rancid] Re: /root/.cloginrc
In-Reply-To: <4B30D891.8030808@eng.fsu.edu>
References: <4B30D891.8030808@eng.fsu.edu>
Message-ID: <20091222162932.GI3767@shrubbery.net>

Tue, Dec 22, 2009 at 09:32:49AM -0500, Jack Tsai:
> We are using the rancid version available in March, 2009.
> Sometimes {LetMeIn!} does not work as a password and LetMeIn! does.
> Sometimes {h at llo} does not work as a username and h at llo does.

> When should we use ssh instead of {ssh}?

this one doesn't matter.  the {}s are like quotes; its good ritual
to just use them for all of the arguments.

{LetMeIn!} or {h at llo} not working sometimes but working others is
unexpected behavior.  it should at least be consistent.  if it were
consistent, try escaping the special characters, though I don't
think that escaping those is necessary.  see cloginrc(5).

From cgauthier at mapscu.com  Tue Dec 22 18:34:26 2009
From: cgauthier at mapscu.com (Chris Gauthier)
Date: Tue, 22 Dec 2009 10:34:26 -0800
Subject: [rancid] Re: Cisco ASA Coredump bug--fixed yet?
In-Reply-To: <1FD6BFAE6EA54341821D01FB8E617B6501E4B181@EXCHANGE1.ntserv.doitbestcorp.com>
References: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F659@mshin01.mapscu.com>
	<1FD6BFAE6EA54341821D01FB8E617B6501E4B181@EXCHANGE1.ntserv.doitbestcorp.com>
Message-ID: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F66F@mshin01.mapscu.com>

I went to Cisco.com and looked for the fixed versions and they were not
there.  So, even after my attempts to just "fix it", I still had to
contact the TAC for the files.  They set me up with version 8.2.1.4
(Interim).

Thanks for pointing out the Bug ID, that made the case SUPER easy for me
to describe to TAC and for TAC to just give me what I needed.

Chris

-----Original Message-----
From: Ron Whitney [mailto:ron.whitney at doitbest.com] 
Sent: Monday, December 21, 2009 3:37 PM
To: Chris Gauthier; rancid-discuss at shrubbery.net
Subject: RE: [rancid] Cisco ASA Coredump bug--fixed yet?

 
> Did anyone ever find a solution to the coredump bug on the 
> Cisco ASA? Did TAC ever come back with anything?

Here's the last status I received (about a week ago) on that bug:

The following bug(s) you have subscribed to have been updated as
follows:

------------------------------------------------------------------------
----------

BugID: CSCsz85597
What Changed: Fixed in version
Title: coredump.cfg file gets rewritten every time show run is executed
Technology: nav
Version: 8.2(1)
Fixed-in: 8.2(1.2), 8.3(0.0), 100.3(0.3)M
Severity: 2
State: Verified
Bug Details: 
http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method
=fetchBugDetails&bugId=CSCsz85597 

From pc50000 at gmail.com  Wed Dec 23 16:50:08 2009
From: pc50000 at gmail.com (P C)
Date: Wed, 23 Dec 2009 11:50:08 -0500
Subject: [rancid] Re: Cisco ASA Coredump bug--fixed yet?
In-Reply-To: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F66F@mshin01.mapscu.com>
References: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F659@mshin01.mapscu.com>
	<1FD6BFAE6EA54341821D01FB8E617B6501E4B181@EXCHANGE1.ntserv.doitbestcorp.com>
	<0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F66F@mshin01.mapscu.com>
Message-ID: <47b527130912230850y1a8218aeg35979eba2cdd85b9@mail.gmail.com>

You should also be able to go to suppport  > download software > security >
firweall > firewall appliances > cisco asa 55x0 > cisco asa software > drill
down to 8.2, and 8.2.1.11 is posted and downloadable as a more TAC-posted
and more thoroughly tested interim build.  It's been fixed since 8.2.1.2



On Tue, Dec 22, 2009 at 1:34 PM, Chris Gauthier <cgauthier at mapscu.com>wrote:

> I went to Cisco.com and looked for the fixed versions and they were not
> there.  So, even after my attempts to just "fix it", I still had to
> contact the TAC for the files.  They set me up with version 8.2.1.4
> (Interim).
>
> Thanks for pointing out the Bug ID, that made the case SUPER easy for me
> to describe to TAC and for TAC to just give me what I needed.
>
> Chris
>
> -----Original Message-----
> From: Ron Whitney [mailto:ron.whitney at doitbest.com]
> Sent: Monday, December 21, 2009 3:37 PM
> To: Chris Gauthier; rancid-discuss at shrubbery.net
> Subject: RE: [rancid] Cisco ASA Coredump bug--fixed yet?
>
>
> > Did anyone ever find a solution to the coredump bug on the
> > Cisco ASA? Did TAC ever come back with anything?
>
> Here's the last status I received (about a week ago) on that bug:
>
> The following bug(s) you have subscribed to have been updated as
> follows:
>
> ------------------------------------------------------------------------
> ----------
>
> BugID: CSCsz85597
> What Changed: Fixed in version
> Title: coredump.cfg file gets rewritten every time show run is executed
> Technology: nav
> Version: 8.2(1)
> Fixed-in: 8.2(1.2), 8.3(0.0), 100.3(0.3)M
> Severity: 2
> State: Verified
> Bug Details:
> http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method
> =fetchBugDetails&bugId=CSCsz85597<http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method%0A=fetchBugDetails&bugId=CSCsz85597>
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20091223/d420b2e1/attachment.html 

From cgauthier at mapscu.com  Wed Dec 23 17:04:47 2009
From: cgauthier at mapscu.com (Chris Gauthier)
Date: Wed, 23 Dec 2009 09:04:47 -0800
Subject: [rancid] Re: Cisco ASA Coredump bug--fixed yet?
In-Reply-To: <47b527130912230850y1a8218aeg35979eba2cdd85b9@mail.gmail.com>
References: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F659@mshin01.mapscu.com>
	<1FD6BFAE6EA54341821D01FB8E617B6501E4B181@EXCHANGE1.ntserv.doitbestcorp.com>
	<0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F66F@mshin01.mapscu.com>
	<47b527130912230850y1a8218aeg35979eba2cdd85b9@mail.gmail.com>
Message-ID: <0A9A5A2BC1C0A94C981AF5FCF2D2F3381473F6AF@mshin01.mapscu.com>

While I should be able to follow that path, the only result available is "8.2(1)" and it does not get more specific than that.  Here is an excerpt from the site:

asa821-k8.bin
Release Date: 06/May/2009
Cisco Adaptive Security Appliance Software version 8.2(1) for the ASA 5505, 5510, 5520, 5540, and ASA5550. Please read the Release Note prior to downloading this release.
Size: 15894.00 KB  (16275456 bytes)


However, Cisco also has, in a different spot (now that I notice it differently), an 8.2.1.ED and then 8.2.1.11.  ugh....  Sometimes Cisco really frustrates me.

I'll be changing to 8.2.1.11 vs the 8.2.1.4 given me by the TAC.

Chris



From: P C [mailto:pc50000 at gmail.com] 
Sent: Wednesday, December 23, 2009 8:50 AM
To: Chris Gauthier
Cc: rancid-discuss at shrubbery.net
Subject: Re: [rancid] Re: Cisco ASA Coredump bug--fixed yet?

You should also be able to go to suppport? > download software > security > firweall > firewall appliances > cisco asa 55x0 > cisco asa software > drill down to 8.2, and 8.2.1.11 is posted and downloadable as a more TAC-posted and more thoroughly tested interim build.? It's been fixed since 8.2.1.2


On Tue, Dec 22, 2009 at 1:34 PM, Chris Gauthier <cgauthier at mapscu.com> wrote:
I went to Cisco.com and looked for the fixed versions and they were not
there. ?So, even after my attempts to just "fix it", I still had to
contact the TAC for the files. ?They set me up with version 8.2.1.4
(Interim).

Thanks for pointing out the Bug ID, that made the case SUPER easy for me
to describe to TAC and for TAC to just give me what I needed.

Chris

-----Original Message-----
From: Ron Whitney [mailto:ron.whitney at doitbest.com]
Sent: Monday, December 21, 2009 3:37 PM
To: Chris Gauthier; rancid-discuss at shrubbery.net
Subject: RE: [rancid] Cisco ASA Coredump bug--fixed yet?


> Did anyone ever find a solution to the coredump bug on the
> Cisco ASA? Did TAC ever come back with anything?

Here's the last status I received (about a week ago) on that bug:

The following bug(s) you have subscribed to have been updated as
follows:

------------------------------------------------------------------------
----------

BugID: CSCsz85597
What Changed: Fixed in version
Title: coredump.cfg file gets rewritten every time show run is executed
Technology: nav
Version: 8.2(1)
Fixed-in: 8.2(1.2), 8.3(0.0), 100.3(0.3)M
Severity: 2
State: Verified
Bug Details:
http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method
=fetchBugDetails&bugId=CSCsz85597
_______________________________________________
Rancid-discuss mailing list
Rancid-discuss at shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss


From david.mantock at gmx.ch  Tue Dec 29 09:03:39 2009
From: david.mantock at gmx.ch (David Mantock)
Date: Tue, 29 Dec 2009 10:03:39 +0100
Subject: [rancid]  cannot open file router.db for comparing
Message-ID: <20091229090339.107190@gmx.net>

I am running rancid 2.3.2 on OpenSolaris, I have a problem that it seems that the router.db is not found when it has not been updated.

cvs diff: Diffing .
cvs [diff aborted]: cannot open file router.db for comparing: No such file or directory
cvs commit: Examining .
cvs commit: Examining configs

Previously it ran OK and router.db was found when router.db was updated.

cvs diff: Diffing .
cvs diff: Diffing configs
cvs commit: Examining .
cvs commit: Examining configs
/tank/rancid/xxxxx/CVS/XXXXX_RouterSwitch/router.db,v  <--  router.db

I have a remote CVS repository that is updated via SSH. Configs are being backed up OK and I can see diffs on the routers.

Any suggestions?
-- 
Jetzt kostenlos herunterladen: Internet Explorer 8 und Mozilla Firefox 3.5 -
sicherer, schneller und einfacher! http://portal.gmx.net/de/go/chbrowser