From roger113447 at hotmail.fr Mon Apr 4 17:45:56 2011 From: roger113447 at hotmail.fr (LMR_J-P) Date: Mon, 4 Apr 2011 19:45:56 +0200 Subject: [rancid] avaya P330 - don't match eof References: 2ec55ac61001290548l5ecc29fdrf8dd020939cfe55a@mail.gmail.com Message-ID: hi I have to retrieve a configuration AVAYA P330 I'm stuck at the end of my script. manually, I have to press enter to retrieve the prompt and I can not find the piece of code that I miss. can someone help me, thank you very much CLOGIN SCRIPT # Run commands given on the command line. proc run_commands { prompt command } { global in_proc set in_proc 1 log_user 1 send "\r" expect -re $prompt {} set commands [split $command \;] set num_commands [llength $commands] for {set i 0} {$i < $num_commands} { incr i} { send -- "[subst [lindex $commands $i]]\r" expect { -re "\[\n\r\]" {exp_continue } -gl "--type q to quit or space key to continue--" { send "\r\n" ; exp_continue } } } send "quit\r" expect { "\n" { exp_continue } timeout { catch {close}; catch {wait}; return 0 } eof { return 0 } } set in_proc 0 } ____________________ rancid at machine:~/bin$ ./clogin_P330 -c "show l2-module-config" X.X.X.X set port vlan-binding-mode 3/101 bind-to-all set port vlan-binding-mode 3/105 bind-to-all Error: TIMEOUT reached rancid at machine:~/bin$ _______________________ debug expect expect: does "\n" (spawn_id exp6) match regular expression "[\n\r]"? (No Gate, RE only) gate=yes re=yes expect: set expect_out(0,string) "\n" expect: set expect_out(spawn_id) "exp6" expect: set expect_out(buffer) "\n" expect: continuing expect expect: does "" (spawn_id exp6) match regular expression "[\n\r]"? (No Gate, RE only) gate=yes re=no "--type q to quit or space key to continue--"? no expect: timed out Error: TIMEOUT reached rancidd at machine: ~/binrancid at machine:~/bin$ -------------- next part -------------- An HTML attachment was scrubbed... URL: From heas at shrubbery.net Mon Apr 4 19:31:30 2011 From: heas at shrubbery.net (john heasley) Date: Mon, 4 Apr 2011 19:31:30 +0000 Subject: [rancid] avaya P330 - don't match eof In-Reply-To: References: Message-ID: <20110404193130.GF2975@shrubbery.net> Mon, Apr 04, 2011 at 07:45:56PM +0200, LMR_J-P: > expect: does "\n" (spawn_id exp6) match regular expression "[\n\r]"? (No > Gate, RE only) gate=yes re=yes > expect: set expect_out(0,string) "\n" > expect: set expect_out(spawn_id) "exp6" > expect: set expect_out(buffer) "\n" > expect: continuing expect > > expect: does "" (spawn_id exp6) match regular expression "[\n\r]"? (No > Gate, RE only) gate=yes re=no > "--type q to quit or space key to continue--"? no you need to match & respond to the pager From danielc at mozy.com Wed Apr 6 08:46:54 2011 From: danielc at mozy.com (Daniel Chen) Date: Wed, 6 Apr 2011 02:46:54 -0600 (MDT) Subject: [rancid] Pointing existing rancid from local svn repo to remote svn In-Reply-To: Message-ID: <1452883195.1847530.1302079614377.JavaMail.root@slcitmail01> I just looked at the 'rancid-cvs'; it looks like the shell script is hard-coded for local file (non-URL) location of the CVS/SVN repository. I am going to hack my installation 'rancid-cvs' to see if I can get the remote URL for SVN import and SVN checkout to work. Daniel Chen ----- Original Message ----- From: "Ian Narcisi" To: rancid-discuss at shrubbery.net Sent: Thursday, January 6, 2011 11:47:55 AM Subject: Re: [rancid] Pointing existing rancid from local svn repo to remote svn When attempting to install rancid svn to a remote server, I get the following message: [root at rancid-dev bin]# ./rancid-cvs svnadmin: ' https://secure2.test.com/svn/repo/server/network-configs/CVS ' is an URL when it should be a path # BASEDIR=/usr/local/rancid/var/rancid; export BASEDIR PATH=/usr/local/rancid/bin:/usr/bin:/usr/sbin:/bin:/usr/kerberos/bin:/usr/local/bin:/usr/bin; export PATH # Location of the CVS/SVN repository. Be careful changing this. # CVSROOT=$BASEDIR/CVS; export CVSROOT CVSROOT= https://secure2.test.com/svn/repo/server/network-configs/CVS ; export CVSROOT # Location of log files produced by rancid-run(1). # LOGDIR=$BASEDIR/logs; export LOGDIR LOGDIR= https://secure2.test.com/svn/repo/server/network-configs/logs ; export LOGDIR # Select which RCS system to use, "cvs" (default) or "svn". Do not change # this after CVSROOT has been created with rancid-cvs. Changing between these # requires manual conversions. RCSSYS=svn; export RCSSYS Any ideas/solutions would be most welcome! On Wed, Jan 5, 2011 at 10:35 AM, Ian Narcisi < iannai29 at gmail.com > wrote: Hello, Is this simply altering the BASEDIR=/"local repo" to BASEDIR="/ https://x.x.x.x/repo , or Is there more to this? Thank you -- Ian Narcisi Progressive Rock indie musician Singer/songwriter, drummer, keyboardist www.ianmusic.com http://iannarcisi.blogspot.com/ www.myspace.com/ianmuzic http://www.facebook.com/ian.narcisi?v=info&viewas=703476662 http://twitter.com/IanNarcisi www.last.fm/music/Ian+Narcisi/Weight+Of+The+Words www.last.fm/music/Ian+Narcisi/Feel+No+Evil http://iannarcisi.posterous.com http://www.sonicbids.com/IanNarcisi http://www.networkingmusician.com/profile/IanNarcisi http://www.coloredpeople.net/profile/IanNarcisi http://www.artition.com/profil.php?user=iannai29 http://cyberprmastermind.ning.com/profile/IanNarcisi Reviews: http://www.reviewyou.com/cdreviewblog/ian-narcisi-weight-of-the-words/ http://www.progarchives.com/artist.asp?id=4918#discography http://www.reviewyou.com/cdreviewblog/ian-narcisi-feel-no-evil/ _______________________________________________ Rancid-discuss mailing list Rancid-discuss at shrubbery.net http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss -------------- next part -------------- An HTML attachment was scrubbed... URL: From paul at gear.dyndns.org Thu Apr 7 03:56:19 2011 From: paul at gear.dyndns.org (Paul Gear) Date: Thu, 07 Apr 2011 13:56:19 +1000 Subject: [rancid] New device types Message-ID: Hi folks, Apologies for second post in quick succession. As well as HP ProCurve switches, i'm supporting Xirrus wireless arrays. They use "ArrayOS" (rather unoriginal name), which is designed to have a Cisco-style feel. What is the appropriate process to go about adding support for these devices? Thanks, Paul From paul at gear.dyndns.org Fri Apr 8 07:11:17 2011 From: paul at gear.dyndns.org (Paul Gear) Date: Fri, 08 Apr 2011 17:11:17 +1000 Subject: [rancid] Policy rollout [repost] Message-ID: <4D9EB515.5090704@gear.dyndns.org> (It appears this didn't go through when i first posted it - apologies if you get two copies.) Hi folks, I've recently discovered and installed RANCID to run my mostly HP ProCurve network. I'm hoping to replace HP's slow, unreliable, and overpriced ProCurve Manager Plus with the combination of Observium, RANCID, and possibly sFlowTrend (or other tools better suited to the task - suggestions gratefully accepted). One of the things that is hinted at in some of the howtos is the suggestion that configurations can be rolled out from the RANCID server. However, all the documentation i could find about this was the suggestion to stick the commands in a file and run hlogin -x filename switchname Has anyone considered anything a little more sophisticated? I'm thinking a small extension to the .cloginrc file format would make sense, where we could have add policy switchregex groupname path/relativeto/groupdir Then have rancid-run (or the underlying infrastructure commands - i haven't traced through them yet) automatically run those command files before it collects the configuration. Any pointers on where to start hacking (or where to look to save reinventing the wheel) would be appreciated. Thanks, Paul From b225ccc at gmail.com Fri Apr 8 20:25:07 2011 From: b225ccc at gmail.com (Brian Talley) Date: Fri, 8 Apr 2011 14:25:07 -0600 Subject: [rancid] Problem with custom device script Message-ID: I'm creating a custom login script for a Crescendo load balancer device. I can log in to the device and get to interactive mode ok using the script, but when I try to run commands with something like: crescendologin -d -t 30 -c"show running" host it appears that expect is trying to match on every character with output like: ... send: sending "show running\r" to { exp6 } expect: does "" (spawn_id exp6) match regular expression "^[^\n\r]*root> "? no "^[^\n\r ]*>>.*root> "? no "[\n\r]+"? no expect: does "s" (spawn_id exp6) match regular expression "^[^\n\r]*root> "? no "^[^\n\r ]*>>.*root> "? no "[\n\r]+"? no expect: timed out Error: TIMEOUT reached I feel like I'm missing something obvious. The pertinent section of run_commands looks like: for {set i 0} {$i < $num_commands} { incr i} { send -- "[subst -nocommands [lindex $commands $i]]\r" expect { -re "^\[^\n\r]*$reprompt" { exp_continue } -re "^\[^\n\r *]*$reprompt" {} -re "\[\n\r]" { exp_continue } } } And the actual prompt is "root> " Thanks for any help. BT -------------- next part -------------- An HTML attachment was scrubbed... URL: From heas at shrubbery.net Sat Apr 9 17:59:50 2011 From: heas at shrubbery.net (john heasley) Date: Sat, 9 Apr 2011 17:59:50 +0000 Subject: [rancid] Problem with custom device script In-Reply-To: References: Message-ID: <20110409175950.GN9225@shrubbery.net> Fri, Apr 08, 2011 at 02:25:07PM -0600, Brian Talley: > I'm creating a custom login script for a Crescendo load balancer device. I > can log in to the device and get to interactive mode ok using the script, > but when I try to run commands with something like: > > crescendologin -d -t 30 -c"show running" host > > it appears that expect is trying to match on every character with output > like: > > ... > send: sending "show running\r" to { exp6 } > > expect: does "" (spawn_id exp6) match regular expression "^[^\n\r]*root> "? > no > "^[^\n\r ]*>>.*root> "? no > "[\n\r]+"? no > > expect: does "s" (spawn_id exp6) match regular expression "^[^\n\r]*root> "? > no > "^[^\n\r ]*>>.*root> "? no > "[\n\r]+"? no > expect: timed out > > Error: TIMEOUT reached > > I feel like I'm missing something obvious. The pertinent section of > run_commands looks like: > > for {set i 0} {$i < $num_commands} { incr i} { > send -- "[subst -nocommands [lindex $commands $i]]\r" > expect { > -re "^\[^\n\r]*$reprompt" { exp_continue } > -re "^\[^\n\r *]*$reprompt" {} > -re "\[\n\r]" { exp_continue } > } > } > > And the actual prompt is "root> " try ktrace (or truss or strace) on the process. it could be that the device is slow, the expect (tcl) is reading one char at a time, the tty is in a weird mode; as just a few guesses. it is not uncommon for single chars to be read sometimes. the key is create matches that dont consume the single chars; cause it to read more and concatenate the input into complete lines. From b225ccc at gmail.com Sun Apr 10 20:46:20 2011 From: b225ccc at gmail.com (Brian Talley) Date: Sun, 10 Apr 2011 14:46:20 -0600 Subject: [rancid] Problem with custom device script In-Reply-To: <20110409175950.GN9225@shrubbery.net> References: <20110409175950.GN9225@shrubbery.net> Message-ID: On Sat, Apr 9, 2011 at 11:59 AM, john heasley wrote: > Fri, Apr 08, 2011 at 02:25:07PM -0600, Brian Talley: > > I'm creating a custom login script for a Crescendo load balancer device. > I > > can log in to the device and get to interactive mode ok using the script, > > but when I try to run commands with something like: > > > > crescendologin -d -t 30 -c"show running" host > > > > it appears that expect is trying to match on every character with output > > like: > > > > ... > > send: sending "show running\r" to { exp6 } > > > > expect: does "" (spawn_id exp6) match regular expression "^[^\n\r]*root> > "? > > no > > "^[^\n\r ]*>>.*root> "? no > > "[\n\r]+"? no > > > > expect: does "s" (spawn_id exp6) match regular expression "^[^\n\r]*root> > "? > > no > > "^[^\n\r ]*>>.*root> "? no > > "[\n\r]+"? no > > expect: timed out > > > > Error: TIMEOUT reached > > > > I feel like I'm missing something obvious. The pertinent section of > > run_commands looks like: > > > > for {set i 0} {$i < $num_commands} { incr i} { > > send -- "[subst -nocommands [lindex $commands $i]]\r" > > expect { > > -re "^\[^\n\r]*$reprompt" { exp_continue } > > -re "^\[^\n\r *]*$reprompt" {} > > -re "\[\n\r]" { exp_continue } > > } > > } > > > > And the actual prompt is "root> " > > try ktrace (or truss or strace) on the process. it could be that the > device is slow, the expect (tcl) is reading one char at a time, the > tty is in a weird mode; as just a few guesses. > > it is not uncommon for single chars to be read sometimes. the key is > create matches that dont consume the single chars; cause it to read > more and concatenate the input into complete lines. > > After some trial and error I was able to get this to work by using set send_human {.1 .3 1 .05 2} Thanks, Brian -------------- next part -------------- An HTML attachment was scrubbed... URL: From wpleasants at gmail.com Wed Apr 13 13:49:54 2011 From: wpleasants at gmail.com (William Pleasants) Date: Wed, 13 Apr 2011 09:49:54 -0400 Subject: [rancid] cloginrc assistance Message-ID: <000001cbf9e1$ac286f40$04794dc0$@com> Hi all. I'm trying to use cloginrc to login Cisco routers hanging off a Cisco console server. The address for each router remains the same. I'm just changing the telnet port for every router and attempting to add an extra carriage return, however the session times out. I am able to see a typical Cisco login prompt when telneting to the port when doing it manually. I've done some searching and couldn't turn up anything. My Tcl skills are week, therefore I'm hoping someone might be able to provide some suggestions. Below is my cloginrc configuration. Any assistance is appreciated. Thanks, Chip add user r1 routers add userprompt r1 {"\n"} add password r1 password1234 password1234 add method r1 telnet:2001 -------------- next part -------------- An HTML attachment was scrubbed... URL: From krzysztof.zygmunt at gmail.com Thu Apr 14 14:21:42 2011 From: krzysztof.zygmunt at gmail.com (Krzysztof Zygmunt) Date: Thu, 14 Apr 2011 16:21:42 +0200 Subject: [rancid] Alteon switch "esecret" problem again - rancid 2.3.6 In-Reply-To: References: Message-ID: Hi, I've upgraded to rancid-2.3.6 and I keep receiving emails about esecret diff. like this: - ? ? ? esecret "8e4a202204422022b737e3e3c7f283d05c550d6485fae919c45f3d06aaadbb9e07f7eadf1bc47289183122d1ba97f409179e69e97582d1fafcf5a1cd46ac955d" - ? ? ? esecret2 "b1b81fd001800a80b2f5f6b3c230a972d12f64f229662f4e547d78cc0ccfe6b05cab18962298598742a2302fb68292680f5560bf5bcee495a1d81e9d185677e6" + ? ? ? esecret "f4e7475010040200beaea6b3d3b4a1f232aca42b8d26badc89fb80ab8260eee88650d83ada1ac55d02089d6af4b61ee04205c57496882c97c6ac871f3f88d9fc" + ? ? ? esecret2 "f7db446c10180028beb2a7a7d3a8a3daadc08120b67c930c9e0046e241b132092d457b120721606b8292176a34ad5dc76414bfd6b23966b865bca343686f59cb" I've found two solutions on the internet but they don't work for me. neither this: http://www.gossamer-threads.com/lists/rancid/users/4690 nor that: http://www.shrubbery.net/rancid/search.cgi?config=htdig&restrict=&exclude=&method=and&format=builtin-long&sort=score&words=esecret+alteon I can see a few changes between ver. 2.3.2a6 (work well) and 2.3.6 (keep sending esecret diff msgs), but I'm not skilled enough to repair this. diff /usr/bin/arancid(2.3.6) /home/rancid/bin/arancid(2.3.2a6) 3c3 < ## $Id: arancid.in 2246 2010-09-08 01:36:07Z heas $ --- > ## $Id: arancid.in,v 1.22 2006/10/05 04:27:42 heas Exp $ 5,6c5,10 < ## rancid 2.3.6 < ## Copyright (c) 1997-2008 by Terrapin Communications, Inc. --- > ## rancid 2.3.2a6 > ## Hacked version of rancid for Alteon WebOS switches > ## tested with: ad3 v8.1.18 > ## afort at choqolat.org (andrew fort) > ## > ## Copyright (C) 1997-2006 by Terrapin Communications, Inc. 9,11c13,21 < ## This code is derived from software contributed to and maintained by < ## Terrapin Communications, Inc. by Henry Kilmer, John Heasley, Andrew Partan, < ## Pete Whiting, Austin Schutz, and Andrew Fort. --- > ## This software may be freely copied, modified and redistributed > ## without fee for non-commerical purposes provided that this license > ## remains intact and unmodified with any RANCID distribution. > ## > ## There is no warranty or other guarantee of fitness of this software. > ## It is provided solely "as is". ?The author(s) disclaim(s) all > ## responsibility and liability with respect to this software's usage > ## or its effect upon hardware, computer systems, other software, or > ## anything else. 13,29c23,24 < ## Redistribution and use in source and binary forms, with or without < ## modification, are permitted provided that the following conditions < ## are met: < ## 1. Redistributions of source code must retain the above copyright < ## ? ?notice, this list of conditions and the following disclaimer. < ## 2. Redistributions in binary form must reproduce the above copyright < ## ? ?notice, this list of conditions and the following disclaimer in the < ## ? ?documentation and/or other materials provided with the distribution. < ## 3. All advertising materials mentioning features or use of this software < ## ? ?must display the following acknowledgement: < ## ? ? ? ?This product includes software developed by Terrapin Communications, < ## ? ? ? ?Inc. and its contributors for RANCID. < ## 4. Neither the name of Terrapin Communications, Inc. nor the names of its < ## ? ?contributors may be used to endorse or promote products derived from < ## ? ?this software without specific prior written permission. < ## 5. It is requested that non-binding fixes and modifications be contributed < ## ? ?back to Terrapin Communications, Inc. --- > ## Except where noted otherwise, rancid was written by and is maintained by > ## Henry Kilmer, John Heasley, Andrew Partan, Pete Whiting, and Austin Schutz. 31,41d25 < ## THIS SOFTWARE IS PROVIDED BY Terrapin Communications, INC. AND CONTRIBUTORS < ## ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED < ## TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR < ## PURPOSE ARE DISCLAIMED. ?IN NO EVENT SHALL THE COMPANY OR CONTRIBUTORS < ## BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR < ## CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF < ## SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS < ## INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN < ## CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) < ## ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE < ## POSSIBILITY OF SUCH DAMAGE. 52c36 < ? ? print "rancid 2.3.6\n"; --- > ? ? print "rancid 2.3.2a6\n"; 65,67c49 < my($aclsort) = ("ipsort"); ? ? ? ? ? ?# ACL sorting mode < my($filter_commstr); ? ? ? ? ? ? ? ? ?# SNMP community string filtering < my($filter_pwds); ? ? ? ? ? ? ? ? ? ? # password filtering mode --- > my(%filter_pwds); ? ? ? ? ? ? ? ? ? ? # password filtering mode 73c55 < ? ? ? && scalar(%history)) { --- > ? ? ? && defined %history) { 181,182c163 < ? ? ? ? ProcessHistory("COMMENTS","keysort","B1", < ? ? ? ? ? ? ? ? ? ? ? ?"\/\*Image: Software: $1 ($2)\n") && next; --- > ? ? ? ? ProcessHistory("COMMENTS","keysort","B1", "\/\*Image: Software: $1 ($2)\n") && next; 184,185c165 < ? ? ? ? ProcessHistory("COMMENTS","keysort","A2", < ? ? ? ? ? ? ? ? ? ? ? ?"\/\*Hardware part no: $1\n") && next; --- > ? ? ? ? ProcessHistory("COMMENTS","keysort","A2", "\/\*Hardware part no: $1\n") && next; 187,188c167 < ? ? ? ? ProcessHistory("COMMENTS","keysort","C1", < ? ? ? ? ? ? ? ? ? ? ? ?"\/\*Base MAC address: $1\n") && next; --- > ? ? ? ? ProcessHistory("COMMENTS","keysort","C1", "\/\*Base MAC address: $1\n") && next; 205c184,185 < ? ? ? if (/(rcomm|wcomm|t1com|t2com)(\s+)(.*)/ && $filter_commstr) { --- > ? ? ? if (/(rcomm|wcomm|t1com|t2com)(\s+)(.*)/ && > ? ? ? ? ? ? ? defined($ENV{'NOCOMMSTR'})) { 208c188 < ? ? ? /^(\s+(.{1,3}pw|pswd) )\S+/ && --- > ? ? ? /^(\s+.{2,3}pw )\S+/ && 209a190,191 > > ? ? ? next if (/esecret/); 213,217c195,199 < ? ? ? if (/^\/?script end/) { < ? ? ? ? ? $found_end = 1; < ? ? ? ? ? ProcessHistory("","","","$_\n"); < ? ? ? ? ? return(1); < ? ? ? } --- > ? ? ? ? ? ? ? if (/^\/?script end/) { > ? ? ? ? ? ? ? $found_end = 1; > ? ? ? ? ? ? ? ProcessHistory("","","","$_\n"); > ? ? ? ? ? ? ? return(1); > ? ? ? ? ? ? ? } 237,238c219,220 < $cisco_cmds = join(";", at commands); < $cmds_regexp = join("|", map quotemeta($_), @commands); --- > $cisco_cmds=join(";", at commands); > $cmds_regexp=join("|", at commands); 269,287d250 < # determine ACL sorting mode < if ($ENV{"ACLSORT"} =~ /no/i) { < ? ? $aclsort = ""; < } < # determine community string filtering mode < if (defined($ENV{"NOCOMMSTR"}) && < ? ? ($ENV{"NOCOMMSTR"} =~ /yes/i || $ENV{"NOCOMMSTR"} =~ /^$/)) { < ? ? $filter_commstr = 1; < } else { < ? ? $filter_commstr = 0; < } < # determine password filtering mode < if ($ENV{"FILTER_PWDS"} =~ /no/i) { < ? ? $filter_pwds = 0; < } elsif ($ENV{"FILTER_PWDS"} =~ /all/i) { < ? ? $filter_pwds = 2; < } else { < ? ? $filter_pwds = 1; < } 294c257 < ? ? ? $clean_run = 1; --- > ? ? ? $clean_run=1; I appreciate any help. Kind Regards, Krzysztof Zygmunt From ler762 at gmail.com Thu Apr 14 17:11:21 2011 From: ler762 at gmail.com (Lee) Date: Thu, 14 Apr 2011 13:11:21 -0400 Subject: [rancid] Alteon switch "esecret" problem again - rancid 2.3.6 In-Reply-To: References: Message-ID: probably this: 209a190,191 > > next if (/esecret/); is ignoring any lines that have the string "esecret". I'd try adding that line to the 2.3.6 source code. Regards, Lee On 4/14/11, Krzysztof Zygmunt wrote: > Hi, > > I've upgraded to rancid-2.3.6 and I keep receiving emails about esecret > diff. > > like this: > - esecret > "8e4a202204422022b737e3e3c7f283d05c550d6485fae919c45f3d06aaadbb9e07f7eadf1bc47289183122d1ba97f409179e69e97582d1fafcf5a1cd46ac955d" > - esecret2 > "b1b81fd001800a80b2f5f6b3c230a972d12f64f229662f4e547d78cc0ccfe6b05cab18962298598742a2302fb68292680f5560bf5bcee495a1d81e9d185677e6" > + esecret > "f4e7475010040200beaea6b3d3b4a1f232aca42b8d26badc89fb80ab8260eee88650d83ada1ac55d02089d6af4b61ee04205c57496882c97c6ac871f3f88d9fc" > + esecret2 > "f7db446c10180028beb2a7a7d3a8a3daadc08120b67c930c9e0046e241b132092d457b120721606b8292176a34ad5dc76414bfd6b23966b865bca343686f59cb" > > > I've found two solutions on the internet but they don't work for me. > > neither this: > http://www.gossamer-threads.com/lists/rancid/users/4690 > nor that: > http://www.shrubbery.net/rancid/search.cgi?config=htdig&restrict=&exclude=&method=and&format=builtin-long&sort=score&words=esecret+alteon > > > I can see a few changes between ver. 2.3.2a6 (work well) and 2.3.6 > (keep sending esecret diff msgs), but I'm not skilled enough to repair > this. > > > diff /usr/bin/arancid(2.3.6) /home/rancid/bin/arancid(2.3.2a6) > 3c3 > < ## $Id: arancid.in 2246 2010-09-08 01:36:07Z heas $ > --- >> ## $Id: arancid.in,v 1.22 2006/10/05 04:27:42 heas Exp $ > 5,6c5,10 > < ## rancid 2.3.6 > < ## Copyright (c) 1997-2008 by Terrapin Communications, Inc. > --- >> ## rancid 2.3.2a6 >> ## Hacked version of rancid for Alteon WebOS switches >> ## tested with: ad3 v8.1.18 >> ## afort at choqolat.org (andrew fort) >> ## >> ## Copyright (C) 1997-2006 by Terrapin Communications, Inc. > 9,11c13,21 > < ## This code is derived from software contributed to and maintained by > < ## Terrapin Communications, Inc. by Henry Kilmer, John Heasley, Andrew > Partan, > < ## Pete Whiting, Austin Schutz, and Andrew Fort. > --- >> ## This software may be freely copied, modified and redistributed >> ## without fee for non-commerical purposes provided that this license >> ## remains intact and unmodified with any RANCID distribution. >> ## >> ## There is no warranty or other guarantee of fitness of this software. >> ## It is provided solely "as is". The author(s) disclaim(s) all >> ## responsibility and liability with respect to this software's usage >> ## or its effect upon hardware, computer systems, other software, or >> ## anything else. > 13,29c23,24 > < ## Redistribution and use in source and binary forms, with or without > < ## modification, are permitted provided that the following conditions > < ## are met: > < ## 1. Redistributions of source code must retain the above copyright > < ## notice, this list of conditions and the following disclaimer. > < ## 2. Redistributions in binary form must reproduce the above copyright > < ## notice, this list of conditions and the following disclaimer in the > < ## documentation and/or other materials provided with the distribution. > < ## 3. All advertising materials mentioning features or use of this > software > < ## must display the following acknowledgement: > < ## This product includes software developed by Terrapin > Communications, > < ## Inc. and its contributors for RANCID. > < ## 4. Neither the name of Terrapin Communications, Inc. nor the names of > its > < ## contributors may be used to endorse or promote products derived from > < ## this software without specific prior written permission. > < ## 5. It is requested that non-binding fixes and modifications be > contributed > < ## back to Terrapin Communications, Inc. > --- >> ## Except where noted otherwise, rancid was written by and is maintained >> by >> ## Henry Kilmer, John Heasley, Andrew Partan, Pete Whiting, and Austin >> Schutz. > 31,41d25 > < ## THIS SOFTWARE IS PROVIDED BY Terrapin Communications, INC. AND > CONTRIBUTORS > < ## ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT > LIMITED > < ## TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A > PARTICULAR > < ## PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COMPANY OR CONTRIBUTORS > < ## BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR > < ## CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF > < ## SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR > BUSINESS > < ## INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN > < ## CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) > < ## ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF > THE > < ## POSSIBILITY OF SUCH DAMAGE. > 52c36 > < print "rancid 2.3.6\n"; > --- >> print "rancid 2.3.2a6\n"; > 65,67c49 > < my($aclsort) = ("ipsort"); # ACL sorting mode > < my($filter_commstr); # SNMP community string filtering > < my($filter_pwds); # password filtering mode > --- >> my(%filter_pwds); # password filtering mode > 73c55 > < && scalar(%history)) { > --- >> && defined %history) { > 181,182c163 > < ProcessHistory("COMMENTS","keysort","B1", > < "\/\*Image: Software: $1 ($2)\n") && next; > --- >> ProcessHistory("COMMENTS","keysort","B1", "\/\*Image: Software: $1 >> ($2)\n") && next; > 184,185c165 > < ProcessHistory("COMMENTS","keysort","A2", > < "\/\*Hardware part no: $1\n") && next; > --- >> ProcessHistory("COMMENTS","keysort","A2", "\/\*Hardware part no: >> $1\n") && next; > 187,188c167 > < ProcessHistory("COMMENTS","keysort","C1", > < "\/\*Base MAC address: $1\n") && next; > --- >> ProcessHistory("COMMENTS","keysort","C1", "\/\*Base MAC address: >> $1\n") && next; > 205c184,185 > < if (/(rcomm|wcomm|t1com|t2com)(\s+)(.*)/ && $filter_commstr) { > --- >> if (/(rcomm|wcomm|t1com|t2com)(\s+)(.*)/ && >> defined($ENV{'NOCOMMSTR'})) { > 208c188 > < /^(\s+(.{1,3}pw|pswd) )\S+/ && > --- >> /^(\s+.{2,3}pw )\S+/ && > 209a190,191 >> >> next if (/esecret/); > 213,217c195,199 > < if (/^\/?script end/) { > < $found_end = 1; > < ProcessHistory("","","","$_\n"); > < return(1); > < } > --- >> if (/^\/?script end/) { >> $found_end = 1; >> ProcessHistory("","","","$_\n"); >> return(1); >> } > 237,238c219,220 > < $cisco_cmds = join(";", at commands); > < $cmds_regexp = join("|", map quotemeta($_), @commands); > --- >> $cisco_cmds=join(";", at commands); >> $cmds_regexp=join("|", at commands); > 269,287d250 > < # determine ACL sorting mode > < if ($ENV{"ACLSORT"} =~ /no/i) { > < $aclsort = ""; > < } > < # determine community string filtering mode > < if (defined($ENV{"NOCOMMSTR"}) && > < ($ENV{"NOCOMMSTR"} =~ /yes/i || $ENV{"NOCOMMSTR"} =~ /^$/)) { > < $filter_commstr = 1; > < } else { > < $filter_commstr = 0; > < } > < # determine password filtering mode > < if ($ENV{"FILTER_PWDS"} =~ /no/i) { > < $filter_pwds = 0; > < } elsif ($ENV{"FILTER_PWDS"} =~ /all/i) { > < $filter_pwds = 2; > < } else { > < $filter_pwds = 1; > < } > 294c257 > < $clean_run = 1; > --- >> $clean_run=1; > > > > I appreciate any help. > > Kind Regards, > Krzysztof Zygmunt > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss From chris.kilian at seccomglobal.com Sun Apr 17 23:14:14 2011 From: chris.kilian at seccomglobal.com (Chris Kilian) Date: Sun, 17 Apr 2011 23:14:14 +0000 Subject: [rancid] Rancid Emails on Downed Hosts Message-ID: <7E954E0B2F4C5B409194643A738074081B4D5F1D@SG-Exchange.seccom.local> Guys Where is that you set Rancid to email a list of routers etc that it cant get the config for? I know it can be done and just cant find for the life of me where this is, had a look in the rancid.conf file and cant see anything obvious in there -------------- next part -------------- An HTML attachment was scrubbed... URL: From krzysztof.zygmunt at gmail.com Mon Apr 18 14:06:42 2011 From: krzysztof.zygmunt at gmail.com (Krzysztof Zygmunt) Date: Mon, 18 Apr 2011 16:06:42 +0200 Subject: [rancid] Alteon switch "esecret" problem again - rancid 2.3.6 In-Reply-To: <20110415055217.GL2749@shrubbery.net> References: <20110415055050.3B8E224B5E9@guelah.shrubbery.net> <20110415055217.GL2749@shrubbery.net> Message-ID: [ Sorry for delay in response ] Hello, I've done this modificatin: bash-3.2$ diff /usr/bin/arancid /usr/bin/arancid.original 212c212 < next if (/^ *esecret /); --- > No success. We're still getting esecret diff msgs. On Fri, Apr 15, 2011 at 7:52 AM, john heasley wrote: > Thu, Apr 14, 2011 at 04:21:42PM +0200, Krzysztof Zygmunt: >> Hi, >> >> I've upgraded to rancid-2.3.6 and I keep receiving emails about esecret diff. >> >> like this: >> - ? ? ? esecret >> "8e4a202204422022b737e3e3c7f283d05c550d6485fae919c45f3d06aaadbb9e07f7eadf1bc47289183122d1ba97f409179e69e97582d1fafcf5a1cd46ac955d" >> - ? ? ? esecret2 >> "b1b81fd001800a80b2f5f6b3c230a972d12f64f229662f4e547d78cc0ccfe6b05cab18962298598742a2302fb68292680f5560bf5bcee495a1d81e9d185677e6" >> + ? ? ? esecret >> "f4e7475010040200beaea6b3d3b4a1f232aca42b8d26badc89fb80ab8260eee88650d83ada1ac55d02089d6af4b61ee04205c57496882c97c6ac871f3f88d9fc" >> + ? ? ? esecret2 >> "f7db446c10180028beb2a7a7d3a8a3daadc08120b67c930c9e0046e241b132092d457b120721606b8292176a34ad5dc76414bfd6b23966b865bca343686f59cb" >> >> >> I've found two solutions on the internet but they don't work for me. >> >> neither this: >> http://www.gossamer-threads.com/lists/rancid/users/4690 >> nor that: >> http://www.shrubbery.net/rancid/search.cgi?config=htdig&restrict=&exclude=&method=and&format=builtin-long&sort=score&words=esecret+alteon > > this should do it > > Index: bin/arancid.in > =================================================================== > --- bin/arancid.in ? ? ?(revision 2291) > +++ bin/arancid.in ? ? ?(working copy) > @@ -210,6 +210,7 @@ > > ? ? ? ?next if (/^\/\* Configuration dump taken/i); > ? ? ? ?next if (/^\/\* Version.*Base MAC.*/i); > + ? ? ? next if (/^ *esecret /); > > ? ? ? ?if (/^\/?script end/) { > ? ? ? ? ? ?$found_end = 1; > > From ron.whitney at doitbest.com Mon Apr 18 17:42:08 2011 From: ron.whitney at doitbest.com (Ron Whitney) Date: Mon, 18 Apr 2011 13:42:08 -0400 Subject: [rancid] Rancid Emails on Downed Hosts In-Reply-To: <7E954E0B2F4C5B409194643A738074081B4D5F1D@SG-Exchange.seccom.local> Message-ID: <1FD6BFAE6EA54341821D01FB8E617B65060DB392@EXCHANGE1.ntserv.doitbestcorp.com> Assuming that I understand the question correctly, RANCID will e-mail that info to 'rancid-' on the local machine. You then define the 'rancid-' alias in /etc/aliases and define who should receive the e-mails. Example: You've added devices to a group called CompanyA. RANCID will send the e-mail to thel address of 'rancid-CompanyA' on the local machine. Within /etc/aliases, you might have a line such as: rancid-CompanyA ron at example.com Note: This is a very simple example as I applied it to an older version of RANCID. Caveat emptor. Ron Whitney Network Administrator Do it Best Corp. | 6502 Nelson Road | Fort Wayne, IN 46803 260.748.5657 (direct) | 260.748.5623 (fax) -----Original Message----- From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Chris Kilian Sent: Sunday, April 17, 2011 19:14 To: rancid-discuss at shrubbery.net Subject: [rancid] Rancid Emails on Downed Hosts Guys Where is that you set Rancid to email a list of routers etc that it cant get the config for? I know it can be done and just cant find for the life of me where this is, had a look in the rancid.conf file and cant see anything obvious in there -------------- next part -------------- An HTML attachment was scrubbed... URL: From egirard at focustsi.com Mon Apr 18 18:03:38 2011 From: egirard at focustsi.com (Eric Girard) Date: Mon, 18 Apr 2011 14:03:38 -0400 Subject: [rancid] Rancid Emails on Downed Hosts In-Reply-To: <1FD6BFAE6EA54341821D01FB8E617B65060DB392@EXCHANGE1.ntserv.doitbestcorp.com> References: <7E954E0B2F4C5B409194643A738074081B4D5F1D@SG-Exchange.seccom.local> <1FD6BFAE6EA54341821D01FB8E617B65060DB392@EXCHANGE1.ntserv.doitbestcorp.com> Message-ID: Chris, If it is not what Ron suggested, there is also the downreport script, which sends summary emails of the state of your router.db files. Eric From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Ron Whitney Sent: Monday, April 18, 2011 1:42 PM To: rancid-discuss at shrubbery.net Subject: Re: [rancid] Rancid Emails on Downed Hosts Assuming that I understand the question correctly, RANCID will e-mail that info to 'rancid-' on the local machine. You then define the 'rancid-' alias in /etc/aliases and define who should receive the e-mails. Example: You've added devices to a group called CompanyA. RANCID will send the e-mail to thel address of 'rancid-CompanyA' on the local machine. Within /etc/aliases, you might have a line such as: rancid-CompanyA ron at example.com Note: This is a very simple example as I applied it to an older version of RANCID. Caveat emptor. Ron Whitney Network Administrator Do it Best Corp. | 6502 Nelson Road | Fort Wayne, IN 46803 260.748.5657 (direct) | 260.748.5623 (fax) -----Original Message----- From: rancid-discuss-bounces at shrubbery.net [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of Chris Kilian Sent: Sunday, April 17, 2011 19:14 To: rancid-discuss at shrubbery.net Subject: [rancid] Rancid Emails on Downed Hosts Guys Where is that you set Rancid to email a list of routers etc that it cant get the config for? I know it can be done and just cant find for the life of me where this is, had a look in the rancid.conf file and cant see anything obvious in there -------------- next part -------------- An HTML attachment was scrubbed... URL: From krzysztof.zygmunt at gmail.com Tue Apr 19 09:36:42 2011 From: krzysztof.zygmunt at gmail.com (Krzysztof Zygmunt) Date: Tue, 19 Apr 2011 11:36:42 +0200 Subject: [rancid] Alteon switch "esecret" problem again - rancid 2.3.6 In-Reply-To: References: Message-ID: [ info from another guy having the same problem ] This one seems to work: bash-3.2$ diff /usr/bin/arancid /usr/bin/arancid.original 212c212 < next if (/^.*?esecret.*/); --- > Can we do sth. to make this change applied in source code of 2.3.6 version to make sure it still works fine after we upgrade to another version ? On Thu, Apr 14, 2011 at 7:11 PM, Lee wrote: > probably this: > > 209a190,191 >> >> ? ? ? next if (/esecret/); > > is ignoring any lines that have the string "esecret". ?I'd try adding > that line to the 2.3.6 source code. > > Regards, > Lee > > > On 4/14/11, Krzysztof Zygmunt wrote: >> Hi, >> >> I've upgraded to rancid-2.3.6 and I keep receiving emails about esecret >> diff. >> >> like this: >> - ? ? ? esecret >> "8e4a202204422022b737e3e3c7f283d05c550d6485fae919c45f3d06aaadbb9e07f7eadf1bc47289183122d1ba97f409179e69e97582d1fafcf5a1cd46ac955d" >> - ? ? ? esecret2 >> "b1b81fd001800a80b2f5f6b3c230a972d12f64f229662f4e547d78cc0ccfe6b05cab18962298598742a2302fb68292680f5560bf5bcee495a1d81e9d185677e6" >> + ? ? ? esecret >> "f4e7475010040200beaea6b3d3b4a1f232aca42b8d26badc89fb80ab8260eee88650d83ada1ac55d02089d6af4b61ee04205c57496882c97c6ac871f3f88d9fc" >> + ? ? ? esecret2 >> "f7db446c10180028beb2a7a7d3a8a3daadc08120b67c930c9e0046e241b132092d457b120721606b8292176a34ad5dc76414bfd6b23966b865bca343686f59cb" >> >> >> I've found two solutions on the internet but they don't work for me. >> >> neither this: >> http://www.gossamer-threads.com/lists/rancid/users/4690 >> nor that: >> http://www.shrubbery.net/rancid/search.cgi?config=htdig&restrict=&exclude=&method=and&format=builtin-long&sort=score&words=esecret+alteon >> >> >> I can see a few changes between ver. 2.3.2a6 (work well) and 2.3.6 >> (keep sending esecret diff msgs), ?but ?I'm not skilled enough to repair >> this. >> >> >> diff /usr/bin/arancid(2.3.6) /home/rancid/bin/arancid(2.3.2a6) >> 3c3 >> < ## $Id: arancid.in 2246 2010-09-08 01:36:07Z heas $ >> --- >>> ## $Id: arancid.in,v 1.22 2006/10/05 04:27:42 heas Exp $ >> 5,6c5,10 >> < ## rancid 2.3.6 >> < ## Copyright (c) 1997-2008 by Terrapin Communications, Inc. >> --- >>> ## rancid 2.3.2a6 >>> ## Hacked version of rancid for Alteon WebOS switches >>> ## tested with: ad3 v8.1.18 >>> ## afort at choqolat.org (andrew fort) >>> ## >>> ## Copyright (C) 1997-2006 by Terrapin Communications, Inc. >> 9,11c13,21 >> < ## This code is derived from software contributed to and maintained by >> < ## Terrapin Communications, Inc. by Henry Kilmer, John Heasley, Andrew >> Partan, >> < ## Pete Whiting, Austin Schutz, and Andrew Fort. >> --- >>> ## This software may be freely copied, modified and redistributed >>> ## without fee for non-commerical purposes provided that this license >>> ## remains intact and unmodified with any RANCID distribution. >>> ## >>> ## There is no warranty or other guarantee of fitness of this software. >>> ## It is provided solely "as is". ?The author(s) disclaim(s) all >>> ## responsibility and liability with respect to this software's usage >>> ## or its effect upon hardware, computer systems, other software, or >>> ## anything else. >> 13,29c23,24 >> < ## Redistribution and use in source and binary forms, with or without >> < ## modification, are permitted provided that the following conditions >> < ## are met: >> < ## 1. Redistributions of source code must retain the above copyright >> < ## ? ?notice, this list of conditions and the following disclaimer. >> < ## 2. Redistributions in binary form must reproduce the above copyright >> < ## ? ?notice, this list of conditions and the following disclaimer in the >> < ## ? ?documentation and/or other materials provided with the distribution. >> < ## 3. All advertising materials mentioning features or use of this >> software >> < ## ? ?must display the following acknowledgement: >> < ## ? ? ? ?This product includes software developed by Terrapin >> Communications, >> < ## ? ? ? ?Inc. and its contributors for RANCID. >> < ## 4. Neither the name of Terrapin Communications, Inc. nor the names of >> its >> < ## ? ?contributors may be used to endorse or promote products derived from >> < ## ? ?this software without specific prior written permission. >> < ## 5. It is requested that non-binding fixes and modifications be >> contributed >> < ## ? ?back to Terrapin Communications, Inc. >> --- >>> ## Except where noted otherwise, rancid was written by and is maintained >>> by >>> ## Henry Kilmer, John Heasley, Andrew Partan, Pete Whiting, and Austin >>> Schutz. >> 31,41d25 >> < ## THIS SOFTWARE IS PROVIDED BY Terrapin Communications, INC. AND >> CONTRIBUTORS >> < ## ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT >> LIMITED >> < ## TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A >> PARTICULAR >> < ## PURPOSE ARE DISCLAIMED. ?IN NO EVENT SHALL THE COMPANY OR CONTRIBUTORS >> < ## BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR >> < ## CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF >> < ## SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR >> BUSINESS >> < ## INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN >> < ## CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) >> < ## ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF >> THE >> < ## POSSIBILITY OF SUCH DAMAGE. >> 52c36 >> < ? ? print "rancid 2.3.6\n"; >> --- >>> ? ? print "rancid 2.3.2a6\n"; >> 65,67c49 >> < my($aclsort) = ("ipsort"); ? ? ? ? ? ?# ACL sorting mode >> < my($filter_commstr); ? ? ? ? ? ? ? ? ?# SNMP community string filtering >> < my($filter_pwds); ? ? ? ? ? ? ? ? ? ? # password filtering mode >> --- >>> my(%filter_pwds); ? ? ? ? ? ? ? ? ? ? # password filtering mode >> 73c55 >> < ? ? ? && scalar(%history)) { >> --- >>> ? ? ? && defined %history) { >> 181,182c163 >> < ? ? ? ? ProcessHistory("COMMENTS","keysort","B1", >> < ? ? ? ? ? ? ? ? ? ? ? ?"\/\*Image: Software: $1 ($2)\n") && next; >> --- >>> ? ? ? ? ProcessHistory("COMMENTS","keysort","B1", "\/\*Image: Software: $1 >>> ($2)\n") && next; >> 184,185c165 >> < ? ? ? ? ProcessHistory("COMMENTS","keysort","A2", >> < ? ? ? ? ? ? ? ? ? ? ? ?"\/\*Hardware part no: $1\n") && next; >> --- >>> ? ? ? ? ProcessHistory("COMMENTS","keysort","A2", "\/\*Hardware part no: >>> $1\n") && next; >> 187,188c167 >> < ? ? ? ? ProcessHistory("COMMENTS","keysort","C1", >> < ? ? ? ? ? ? ? ? ? ? ? ?"\/\*Base MAC address: $1\n") && next; >> --- >>> ? ? ? ? ProcessHistory("COMMENTS","keysort","C1", "\/\*Base MAC address: >>> $1\n") && next; >> 205c184,185 >> < ? ? ? if (/(rcomm|wcomm|t1com|t2com)(\s+)(.*)/ && $filter_commstr) { >> --- >>> ? ? ? if (/(rcomm|wcomm|t1com|t2com)(\s+)(.*)/ && >>> ? ? ? ? ? ? ? defined($ENV{'NOCOMMSTR'})) { >> 208c188 >> < ? ? ? /^(\s+(.{1,3}pw|pswd) )\S+/ && >> --- >>> ? ? ? /^(\s+.{2,3}pw )\S+/ && >> 209a190,191 >>> >>> ? ? ? next if (/esecret/); >> 213,217c195,199 >> < ? ? ? if (/^\/?script end/) { >> < ? ? ? ? ? $found_end = 1; >> < ? ? ? ? ? ProcessHistory("","","","$_\n"); >> < ? ? ? ? ? return(1); >> < ? ? ? } >> --- >>> ? ? ? ? ? ? ? if (/^\/?script end/) { >>> ? ? ? ? ? ? ? $found_end = 1; >>> ? ? ? ? ? ? ? ProcessHistory("","","","$_\n"); >>> ? ? ? ? ? ? ? return(1); >>> ? ? ? ? ? ? ? } >> 237,238c219,220 >> < $cisco_cmds = join(";", at commands); >> < $cmds_regexp = join("|", map quotemeta($_), @commands); >> --- >>> $cisco_cmds=join(";", at commands); >>> $cmds_regexp=join("|", at commands); >> 269,287d250 >> < # determine ACL sorting mode >> < if ($ENV{"ACLSORT"} =~ /no/i) { >> < ? ? $aclsort = ""; >> < } >> < # determine community string filtering mode >> < if (defined($ENV{"NOCOMMSTR"}) && >> < ? ? ($ENV{"NOCOMMSTR"} =~ /yes/i || $ENV{"NOCOMMSTR"} =~ /^$/)) { >> < ? ? $filter_commstr = 1; >> < } else { >> < ? ? $filter_commstr = 0; >> < } >> < # determine password filtering mode >> < if ($ENV{"FILTER_PWDS"} =~ /no/i) { >> < ? ? $filter_pwds = 0; >> < } elsif ($ENV{"FILTER_PWDS"} =~ /all/i) { >> < ? ? $filter_pwds = 2; >> < } else { >> < ? ? $filter_pwds = 1; >> < } >> 294c257 >> < ? ? ? $clean_run = 1; >> --- >>> ? ? ? $clean_run=1; >> >> >> >> I appreciate any help. >> >> Kind Regards, >> Krzysztof Zygmunt >> _______________________________________________ >> Rancid-discuss mailing list >> Rancid-discuss at shrubbery.net >> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss > From paul at gear.dyndns.org Tue Apr 19 22:47:00 2011 From: paul at gear.dyndns.org (Paul Gear) Date: Wed, 20 Apr 2011 08:47:00 +1000 Subject: [rancid] Alteon switch "esecret" problem again - rancid 2.3.6 In-Reply-To: References: Message-ID: On 19/04/11 19:36, Krzysztof Zygmunt wrote: > [ info from another guy having the same problem ] > > This one seems to work: > bash-3.2$ diff /usr/bin/arancid /usr/bin/arancid.original > 212c212 > < next if (/^.*?esecret.*/); > --- >> > > Can we do sth. to make this change applied in source code of 2.3.6 > version to make sure > it still works fine after we upgrade to another version ? > > On Thu, Apr 14, 2011 at 7:11 PM, Lee wrote: >> probably this: >> >> 209a190,191 >>> >>> next if (/esecret/); >> >> is ignoring any lines that have the string "esecret". I'd try adding >> that line to the 2.3.6 source code. If i'm not mistaken (it *is* before my first coffee is finished this morning, so it's entirely possible), the line you've suggested is a) not valid regexp, and b) functionally equivalent to the line that Lee suggested. Why not just use the simpler version? Paul From krzysztof.zygmunt at gmail.com Wed Apr 20 10:30:30 2011 From: krzysztof.zygmunt at gmail.com (Krzysztof Zygmunt) Date: Wed, 20 Apr 2011 12:30:30 +0200 Subject: [rancid] Alteon switch "esecret" problem again - rancid 2.3.6 In-Reply-To: References: Message-ID: On Wed, Apr 20, 2011 at 12:47 AM, Paul Gear wrote: > On 19/04/11 19:36, Krzysztof Zygmunt wrote: >> [ info from another guy having the same problem ] >> >> This one seems to work: >> bash-3.2$ diff /usr/bin/arancid /usr/bin/arancid.original >> 212c212 >> < ? ? next if (/^.*?esecret.*/); >> --- >>> >> >> Can we do sth. to make this change applied in source code of 2.3.6 >> version to make sure >> it still works fine after we upgrade to another version ? >> >> On Thu, Apr 14, 2011 at 7:11 PM, Lee wrote: >>> probably this: >>> >>> 209a190,191 >>>> >>>> ? ? ? next if (/esecret/); >>> >>> is ignoring any lines that have the string "esecret". ?I'd try adding >>> that line to the 2.3.6 source code. > > If i'm not mistaken (it *is* before my first coffee is finished this > morning, so it's entirely possible), the line you've suggested is > a) not valid regexp, and > b) functionally equivalent to the line that Lee suggested. > Why not just use the simpler version? > > Paul > > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss > Indeed the simpler one work as well. I've just given it a try again. What can we do to make sure this line will also be there in next rancid release ? Thank you very much for your help. Cheers Krzysztof Zygmunt From heas at shrubbery.net Wed Apr 20 16:31:21 2011 From: heas at shrubbery.net (john heasley) Date: Wed, 20 Apr 2011 16:31:21 +0000 Subject: [rancid] Alteon switch "esecret" problem again - rancid 2.3.6 In-Reply-To: References: Message-ID: <20110420163120.GE29282@shrubbery.net> Wed, Apr 20, 2011 at 12:30:30PM +0200, Krzysztof Zygmunt: > What can we do to make sure this line will also be there in next > rancid release ? yes, its already been committed. From sdavid at ecritel.net Thu Apr 21 07:02:32 2011 From: sdavid at ecritel.net (=?iso-8859-1?Q?DAVID_S=E9bastien?=) Date: Thu, 21 Apr 2011 07:02:32 +0000 Subject: [rancid] Rancid 2.3.6 and F5 BigIP Message-ID: <89C0E94A069D7E429A4E556539E4E90CC24D00@dilithium12.groupe-ecritel.ecritel.net> Dear, I'd like to backup my F5 BIGIP with Rancid 2.3.6 but I have a persistent error with rancind-run script. Trying to get all of the configs. F5bigip1 clogin error: Error: TIMEOUT reached F5bigip1: missed cmd(s): bigpipe route static show,bigpipe base list,cat /config/bigip.license,bigpipe platform,bigpipe db show,bigpipe monitor list all,bigpipe version,bigpipe profile list,bigpipe list F5bigip1: End of run not found Using clogin directly, I can connect to my equipment without trouble rancid at DebCacti:/var/log/rancid$ /var/lib/rancid/bin/clogin F5bigip1 F5bigip1 spawn ssh -c 3des -x -l rancid F5bigip1 Password: Last login: Thu Apr 21 08:06:29 2011 from 213.182.50.20 bp> Thanks for help. Regards, S?bastien -------------- next part -------------- An HTML attachment was scrubbed... URL: From krzysztof.zygmunt at gmail.com Thu Apr 21 14:27:56 2011 From: krzysztof.zygmunt at gmail.com (Krzysztof Zygmunt) Date: Thu, 21 Apr 2011 16:27:56 +0200 Subject: [rancid] Rancid logs "missed cmd(s): ..." Message-ID: Hi, Have anyone experienced such log entries ? ################################# bash-3.2$ cat logs/all.20110421.160001 starting: Thu Apr 21 16:00:01 CEST 2011 Trying to get all of the configs. blade-106-1-sw1.dc: missed cmd(s): /info/sys,/cfg/dump blade-106-1-sw1.dc: End of run not found /* .... (several more lines like the above) .... ===================================== Getting missed routers: round 1. Sending configs/blade-302-3-sw2.dc Sending configs/blade-604-3-sw1.dc Transmitting file data .. Committed revision 459. ending: Thu Apr 21 16:03:35 CEST 2011 ################################# Although there are some entries in log file everything seems to work fine: bash-3.2$ /usr/bin/alogin -c "/info/sys" blade-106-1-sw1.dc blade-106-1-sw1.dc spawn ssh -c 3des -x -l rancid-dc blade-106-1-sw1.dc Enter tacacs password: Nortel Layer2-3 GbE Switch Module(Copper). System Information at 15:15:54 Thu Apr 21, 2011 Time zone: Europe/Poland Nortel Layer2-3 GbE Switch Module(Copper) Switch has been up for 37 days, 22 hours, 59 minutes and 47 seconds. Last boot: 16:02:01 Mon Dec 10, 2007 (reset from Telnet) MAC Address: 00:17:ef:c7:70:00 Management IP Address (if 128): *.*.16.13 Software Version 1.4.2.0 (FLASH image1), active configuration. PCBA Part Number: 317857-C FAB Number: EL4512029 Serial Number: YJ1JXF77C315 Manufacturing Date: 0728 Hardware Revision: 1 Board Revision: 2 PLD Firmware Version: 1.0 Temperature Sensor 2 (Shutdown): 32.5 C (Warn at 90.0 C/Recover at 80.0 C) Switch is in I/O Module Bay 1 ------------------------------------------------------------ [Main Menu] Apr 21 15:15:54 blade-106-1-sw1.dc NOTICE mgmt: rancid-dc(admin) login from host 10.225.0.5 info - Information Menu stats - Statistics Menu cfg - Configuration Menu oper - Operations Command Menu boot - Boot Options Menu maint - Maintenance Menu diff - Show pending config changes [global command] apply - Apply pending config changes [global command] save - Save updated config to FLASH [global command] revert - Revert pending or applied changes [global command] exit - Exit [global command, always available] >> blade-106-1-sw1.dc - Main# lines 0 Lines-per-screen changed from 24 to 0 >> blade-106-1-sw1.dc - Main# /info/sys ------------------------------------------------------------ [System Menu] snmpv3 - SNMPv3 Information Menu chassis - Show BladeCenter Chassis related information general - Show general system information log - Show last 100 syslog messages user - Show current user status e2eshow - Show E2E status dump - Dump all system information >> blade-106-1-sw1.dc - System# exit Session terminated at Received disconnect from *.*.16.13: 11: Logged out. Also running arancid in debug mode looks fine: bash-3.2$ /usr/bin/arancid -d blade-106-1-sw1.dc executing alogin -t 90 -c"/info/sys;/cfg/dump" blade-106-1-sw1.dc HIT COMMAND:>> blade-106-1-sw1.dc - Main# /info/sys In ShowVersion: >> blade-106-1-sw1.dc - Main# /info/sys HIT COMMAND:>> blade-106-1-sw1.dc - System# /cfg/dump In WriteTerm: >> blade-106-1-sw1.dc - System# /cfg/dump It'd be nice to have clean log file, anyone have any idea why those lines in log ? Greetings -- Krzysztof Zygmunt From istong at costar.com Tue Apr 26 13:03:34 2011 From: istong at costar.com (Ian Stong) Date: Tue, 26 Apr 2011 09:03:34 -0400 Subject: [rancid] rancid and Nexus 7010 In-Reply-To: <89C0E94A069D7E429A4E556539E4E90CC24D00@dilithium12.groupe-ecritel.ecritel.net> References: <89C0E94A069D7E429A4E556539E4E90CC24D00@dilithium12.groupe-ecritel.ecritel.net> Message-ID: I've been using rancid for some time to monitor our nexus configs. We recently upgraded the software on the nexus switches to v5. 1.3 and on the 7010 switches I get several emails a day now reflecting diffs for them - even though we aren't changing anything in the config. Wondering if anyone has come across this or has suggestions on how to resolve it based on the output below. These are the emails I receive shortly after each other. retrieving revision 1.244 diff -U 4 -r1.244 12.168.10.6 @@ -40,15 +40,17 @@ !LIC: License hostid: VDH=TBM11436241 ! !Red: % Permission denied ! + !Env: show environment fan !Env: Clock: !Env: ---------------------------------------------------------- !Env: Clock Model Hw Status !Env: ---------------------------------------------------------- !Env: A Clock Module -- NotSupported/None !Env: B Clock Module -- NotSupported/None ! + !Env: show environment temperature !Env: Fan: !Env: ------------------------------------------------------ !Env: Fan Model Hw Status !Env: ------------------------------------------------------ @@ -130,8 +132,9 @@ !Env: xbar-2 Crossbar(s3) 105 95 Ok !Env: xbar-3 Intake (s2) 60 42 Ok !Env: xbar-3 Crossbar(s3) 105 95 Ok ! + !Env: show boot !Env: Power Supply: !Env: Voltage: 50 Volts !Env: Power Total !Env: Supply Model Capacity Status @@ -169,8 +172,9 @@ !Env: Total Power Available for additional modules 1700 W ! !Variable: % Permission denied ! + !Flash: bootflash: dir debug: !Flash: bootflash: 4096 Apr 09 14:00:19 2011 bak/ !Flash: bootflash: 49152 Apr 09 14:01:49 2011 lost+found/ !Flash: bootflash: 100118021 Mar 18 08:41:00 2010 n7000-s1-dk9.4.2.4.bin @@ -192,13 +196,17 @@ !Flash: debug: 0 MB used !Flash: debug: 1 MB free !Flash: debug: 2 MB total ! + !Flash: usb1: dir usb2: + !Flash: usb2: dir volatile: + !Flash: volatile: show module !Flash: volatile: Usage for volatile://sup-local !Flash: volatile: 0 MB used !Flash: volatile: 500 MB free !Flash: volatile: 500 MB total ! + !Mod: show module xbar !Mod: Mod Ports Module-Type Model Status !Mod: --- ----- -------------------------------- ------------------ ------------ !Mod: 1 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok !Mod: 2 32 10 Gbps Ethernet Module N7K-M132XP-12 ok @@ -223,8 +231,9 @@ !Mod: 5 00-26-51-c7-74-98 to 00-26-51-c7-74-a0 JAF1348AHA1 !Mod: 6 00-26-51-c7-7d-60 to 00-26-51-c7-7d-68 JAF1348AHA2 !Mod: ! + !Mod: show inventory !Mod: Xbar Ports Module-Type Model Status !Mod: --- ----- -------------------------------- ------------------ ------------ !Mod: 1 0 Fabric Module 1 N7K-C7010-FAB-1 ok !Mod: 2 0 Fabric Module 1 N7K-C7010-FAB-1 ok @@ -243,8 +252,9 @@ !Mod: 2 NA JAF1346AARA !Mod: 3 NA JAF1346AAPB !Mod: ! + !show vlan !NAME: "Chassis", DESCR: "Nexus7000 C7010 (10 Slot) Chassis " !PID: N7K-C7010 !VID: V01 !SN: TBM13436247 @@ -310,8 +320,9 @@ !DEBUG: `end` ! !CORES: % Permission denied ! + !PROC_LOGS: show running-config !PROC_LOGS: VDC Process PID Normal-exit Stack Core Log-create-time !PROC_LOGS: --- --------------- ------ ----------- ----- ----- --------------- ------------------------------------------------------------------------ ---------------- Email #2 retrieving revision 1.245 diff -U 4 -r1.245 12.168.10.6 @@ -16,8 +16,9 @@ !Software: kickstart compile time: 12/25/2020 12:00:00 [03/11/2011 07:42:56] !Software: system image file is: bootflash:///n7000-s1-dk9.5.1.3.bin !Software: system compile time: 1/21/2011 19:00:00 [03/11/2011 08:37:35] ! + !LIC: show license usage !LIC: TBM13436247_134432796.lic: !LIC: SERVER this_host ANY !LIC: VENDOR cisco !LIC: INCREMENT LAN_ENTERPRISE_SERVICES_PKG cisco 1.0 permanent uncounted \ @@ -28,8 +29,9 @@ !LIC: VENDOR_STRING=MDS HOSTID=VDH=TBM13436241 \ !LIC: NOTICE=200912090811230002< PAK>N7K-C7010-BUNTBM13436247 \ !LIC: SIGN=D21C78C8D0EA ! + !LIC: show license host-id !LIC: Feature Ins Lic Status Expiry Date Comments !LIC: Count !LIC: ENHANCED_LAYER2_PKG No - Unused - !LIC: SCALABLE_SERVICES_PKG No - Unused - @@ -38,8 +40,9 @@ !LIC: LAN_ENTERPRISE_SERVICES_PKG Yes - Unused Never - ! !LIC: License hostid: VDH=TBM11436241 ! + !Red: show environment clock !Red: % Permission denied ! !Env: show environment fan !Env: Clock: @@ -48,9 +51,8 @@ !Env: ---------------------------------------------------------- !Env: A Clock Module -- NotSupported/None !Env: B Clock Module -- NotSupported/None ! - !Env: show environment temperature !Env: Fan: !Env: ------------------------------------------------------ !Env: Fan Model Hw Status !Env: ------------------------------------------------------ @@ -61,9 +63,11 @@ !Env: Fan_in_PS1 -- -- Ok !Env: Fan_in_PS2 -- -- Ok !Env: Fan_in_PS3 -- -- Absent !Env: Fan Air Filter : Absent + !Env: show environment temperature ! + !Env: show power !Env: Temperature: !Env: -------------------------------------------------------------------- !Env: Module Sensor MajorThresh MinorThres Status !Env: (Celsius) (Celsius) @@ -172,9 +176,8 @@ !Env: Total Power Available for additional modules 1700 W ! !Variable: % Permission denied ! - !Flash: bootflash: dir debug: !Flash: bootflash: 4096 Apr 09 14:00:19 2011 bak/ !Flash: bootflash: 49152 Apr 09 14:01:49 2011 lost+found/ !Flash: bootflash: 100118021 Mar 18 08:41:00 2010 n7000-s1-dk9.4.2.4.bin @@ -189,24 +192,22 @@ !Flash: bootflash: 431 MB used !Flash: bootflash: 1294 MB free !Flash: bootflash: 1726 MB total ! + !Flash: debug: dir slot0: !Flash: debug: 8568 Apr 10 01:29:18 2011 bootvar_debug.log !Flash: debug: 4 Apr 10 01:29:18 2011 bootvar_debug.meta !Flash: debug: Usage for debug://sup-local !Flash: debug: 0 MB used !Flash: debug: 1 MB free !Flash: debug: 2 MB total ! - !Flash: usb1: dir usb2: - !Flash: usb2: dir volatile: - !Flash: volatile: show module + !Flash: slot0: dir usb1: !Flash: volatile: Usage for volatile://sup-local !Flash: volatile: 0 MB used !Flash: volatile: 500 MB free !Flash: volatile: 500 MB total ! - !Mod: show module xbar !Mod: Mod Ports Module-Type Model Status !Mod: --- ----- -------------------------------- ------------------ ------------ !Mod: 1 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok !Mod: 2 32 10 Gbps Ethernet Module N7K-M132XP-12 ok @@ -314,18 +315,19 @@ !PID: N7K-C7010-FAN-F !VID: V02 !SN: FOX1339XA7Q ! + !DEBUG: show cores vdc-all !DEBUG: Debug level is set to Minor(1) !DEBUG: default for new sessions logging level: 0 !DEBUG: `end` ! !CORES: % Permission denied ! - !PROC_LOGS: show running-config !PROC_LOGS: VDC Process PID Normal-exit Stack Core Log-create-time !PROC_LOGS: --- --------------- ------ ----------- ----- ----- --------------- ! + exit -------------- next part -------------- An HTML attachment was scrubbed... URL: From frnkblk at iname.com Tue Apr 26 22:37:05 2011 From: frnkblk at iname.com (Frank Bulk) Date: Tue, 26 Apr 2011 17:37:05 -0500 Subject: [rancid] TippingPoint support? Message-ID: <008401cc0462$7825a1a0$6870e4e0$@iname.com> I checked the archives but could find no record. Has anyone gotten rancid to work with TippingPoint's appliances? We have a TP10 specifically. Frank From hugo.deprez at gmail.com Wed Apr 27 15:00:58 2011 From: hugo.deprez at gmail.com (Hugo Deprez) Date: Wed, 27 Apr 2011 17:00:58 +0200 Subject: [rancid] hlogin timeout Message-ID: Hello guys, I'm trying to backup HP Procurve switches. Model I tried are : HP-2610, HP-2810 and HP-2510 To debug i try the following command : sudo -u rancid /var/lib/rancid/bin/hlogin -c "show version" HP-2610 I always block at the HP UI : Copyright (C) 1991-2009 Hewlett-Packard Co. All Rights Reserved. RESTRICTED RIGHTS LEGEND [...] Press to key to ctntieue The hlogin return Error: TIMEOUT reached I am running Debian Squeeze with rancid 2.3.3-1 (official package) Is that a bug from this rancid version ? Thanks in advance Hugo -------------- next part -------------- An HTML attachment was scrubbed... URL: From heas at shrubbery.net Wed Apr 27 15:41:26 2011 From: heas at shrubbery.net (john heasley) Date: Wed, 27 Apr 2011 15:41:26 +0000 Subject: [rancid] hlogin timeout In-Reply-To: References: Message-ID: <20110427154126.GA17240@shrubbery.net> Wed, Apr 27, 2011 at 05:00:58PM +0200, Hugo Deprez: > I'm trying to backup HP Procurve switches. > Model I tried are : HP-2610, HP-2810 and HP-2510 > > To debug i try the following command : > [...] > > > Press to key to ctntieue > > The hlogin return Error: TIMEOUT reached > > I am running Debian Squeeze with rancid 2.3.3-1 (official package) > > Is that a bug from this rancid version ? yes, sort of. a change in linux libc caused this. grab 2.3.6 from ftp.shrubbery.net From hugo.deprez at gmail.com Wed Apr 27 15:56:30 2011 From: hugo.deprez at gmail.com (Hugo Deprez) Date: Wed, 27 Apr 2011 17:56:30 +0200 Subject: [rancid] hlogin timeout In-Reply-To: <20110427154126.GA17240@shrubbery.net> References: <20110427154126.GA17240@shrubbery.net> Message-ID: Hello John, thank you for the information. I'll have a look for the latest rancid version. Regards, Hugo On 27 April 2011 17:41, john heasley wrote: > Wed, Apr 27, 2011 at 05:00:58PM +0200, Hugo Deprez: > > I'm trying to backup HP Procurve switches. > > Model I tried are : HP-2610, HP-2810 and HP-2510 > > > > To debug i try the following command : > > > [...] > > > > > > Press to key to ctntieue > > > > The hlogin return Error: TIMEOUT reached > > > > I am running Debian Squeeze with rancid 2.3.3-1 (official package) > > > > Is that a bug from this rancid version ? > > yes, sort of. a change in linux libc caused this. grab 2.3.6 from > ftp.shrubbery.net > -------------- next part -------------- An HTML attachment was scrubbed... URL: From heas at shrubbery.net Wed Apr 27 18:10:50 2011 From: heas at shrubbery.net (john heasley) Date: Wed, 27 Apr 2011 18:10:50 +0000 Subject: [rancid] microtik problems In-Reply-To: <20101206141231.GA93483@bewilderbeast.blackhelicopters.org> Message-ID: <20110427181049.GQ17240@shrubbery.net> Mon, Dec 06, 2010 at 09:12:31AM -0500, Michael W. Lucas: > sshcmd apparently doesn't handle spaces well, so I had to use an > external script. The sshcmd script is just: This should fix that and will be included in the next release along with the mikrotik module from Chris Boot. Index: bin/mtlogin.in =================================================================== --- bin/mtlogin.in (revision 2295) +++ bin/mtlogin.in (working copy) @@ -518,7 +518,7 @@ if { "$cmethod" == "" } { set cmethod {{telnet} {ssh}} } # Figure out the SSH executable name - set sshcmd [find sshcmd $router] + set sshcmd [join [lindex [find sshcmd $router] 0] ""] if { "$sshcmd" == "" } { set sshcmd {ssh} } # Login to the router From cgauthier at mapscu.com Wed Apr 27 22:17:07 2011 From: cgauthier at mapscu.com (Chris Gauthier) Date: Wed, 27 Apr 2011 15:17:07 -0700 Subject: [rancid] FW: routers router config diffs In-Reply-To: <20110427192347.16DA0CA06D@netmon.mapscu.com> References: <20110427192347.16DA0CA06D@netmon.mapscu.com> Message-ID: Anyone seen this issue with rancid and Cisco IOS 15.0? I tried to find out which version of rancid I have, but I cannot seem to find it. Anyway, here is the behavior and it is really annoying since the only change is that file. This seems a lot like the earlier ASA "crashdump" issue that they had. I don't want to see these all the time. Thanks, Chris Index: configs/10.0.1.9 ============================================================= ====== retrieving revision 1.15 diff -U 4 -r1.15 10.0.1.9 @@ -26,11 +26,11 @@ !Flash: 9 0 Nov 05 2010 00:07:16 syslog !Flash: 11 6523 Nov 05 2010 00:11:44 startup-config-20101104_1711 !Flash: 12 261987 Apr 20 2011 06:12:00 syslog/log_20110416-121956 !Flash: 13 258273 Apr 25 2011 00:01:08 syslog/log_20110420-001701 - !Flash: 14 120840 Apr 27 2011 17:41:12 syslog/log_20110424-202035 + !Flash: 14 124993 Apr 27 2011 19:01:12 syslog/log_20110424-202035 !Flash: 16 258002 Apr 16 2011 17:40:18 syslog/log_20110413-001319 - !Flash: 221515776 bytes available (36225024 bytes used) + !Flash: 221511680 bytes available (36229120 bytes used) ! > !Flash: nvram: Directory of nvram:/ > !Flash: nvram: 244 -rw- 6605 startup-config > !Flash: nvram: 245 ---- 3573 private-config ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ CONFIDENTIALITY NOTICE Attention: The information contained in this email and/or attachments is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any system and destroy any copies. From chris at siliconhotrod.com Thu Apr 28 01:08:55 2011 From: chris at siliconhotrod.com (Chris Moody) Date: Wed, 27 Apr 2011 18:08:55 -0700 Subject: [rancid] FW: routers router config diffs In-Reply-To: References: <20110427192347.16DA0CA06D@netmon.mapscu.com> Message-ID: <4DB8BE27.5010301@siliconhotrod.com> Chris, Yes - I have run into behaviors like this for our Nexus deployments. I was even seeing some log file for the CPM module (with 0 bytesize) getting "touch"ed by the OS periodically...making it show up as something new/different. Annoying is putting it kindly. Particularly when you cannot control the behavior....but I digress. What we (I) did to rectify the problem was to add some "exclusions" into the nxrancid routine. (not sure if you're using cisco or cisco-nx device types). It involves some -very- simple programming to modify the code to suit your needs. I'm writing this assuming little programming skills on your part for the sake of assumption. If you're more 1337, then pardon my simplification. Copy the original executable to something like nxrancid-ORIG so that you have a working backup BEFORE making any changes. Fire up 'vi' and you scroll down through the code to the stanza that's running the command(s) that are triggering the output. For the sake of this discussion, let's say it's the 'DirSlotN' subroutine that's running the command 'dir logflash' which is causing this output. Find the subroutine 'DirSlotN' and then you'll need to insert a command before the 'ProcessHistory' line that will cause the routine to skip over the output line(s) that are causing you a problem. ex> ---------------------------------------------------- scroll down to here... # This routine parses "dir /all ((disk|slot)N|bootflash|nvram):" sub DirSlotN { print STDERR " In DirSlotN: $_" if ($debug); my($dev) = (/\s([^\s]+):/); while () { ====== after these lines... but before this line... ProcessHistory("FLASH","","","!Flash: $dev: $_"); ---------------------------------------------------- You should find some space just before the ProcessHistory line. So, for your particular issue, you'd insert a perl code statement like so: /syslog\/log_20/ && next; What this accomplishes is, via regex, any line that pattern matches 'syslog/log_20' will get jumped over and ignored. I know this is a hack, but it's what solved our issues. Just be SURE to save a copy of the modifications & note someplace that this has been modified or you will run into trouble if/when you upgrade and it gets overwritten. If you need help with any specifics, please feel free to shoot me an email off-list (so as not to spam people with customizations) Cheers, -Chris On 4/27/11 3:17 PM, Chris Gauthier wrote: > Anyone seen this issue with rancid and Cisco IOS 15.0? I tried to find out which version of rancid I have, but I cannot seem to find it. Anyway, here is the behavior and it is really annoying since the only change is that file. This seems a lot like the earlier ASA "crashdump" issue that they had. I don't want to see these all the time. > > Thanks, > > Chris > > > Index: configs/10.0.1.9 > ============================================================= ====== > retrieving revision 1.15 > diff -U 4 -r1.15 10.0.1.9 > @@ -26,11 +26,11 @@ > !Flash: 9 0 Nov 05 2010 00:07:16 syslog > !Flash: 11 6523 Nov 05 2010 00:11:44 startup-config-20101104_1711 > !Flash: 12 261987 Apr 20 2011 06:12:00 syslog/log_20110416-121956 > !Flash: 13 258273 Apr 25 2011 00:01:08 syslog/log_20110420-001701 > - !Flash: 14 120840 Apr 27 2011 17:41:12 syslog/log_20110424-202035 > + !Flash: 14 124993 Apr 27 2011 19:01:12 syslog/log_20110424-202035 > !Flash: 16 258002 Apr 16 2011 17:40:18 syslog/log_20110413-001319 > - !Flash: 221515776 bytes available (36225024 bytes used) > + !Flash: 221511680 bytes available (36229120 bytes used) > ! >> !Flash: nvram: Directory of nvram:/ >> !Flash: nvram: 244 -rw- 6605 startup-config >> !Flash: nvram: 245 ---- 3573 private-config > ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ > CONFIDENTIALITY NOTICE > Attention: The information contained in this email and/or attachments is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any system and destroy any copies. > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss From paul at gear.dyndns.org Thu Apr 28 03:17:49 2011 From: paul at gear.dyndns.org (Paul Gear) Date: Thu, 28 Apr 2011 13:17:49 +1000 Subject: [rancid] hlogin timeout In-Reply-To: References: Message-ID: On 28/04/11 01:00, Hugo Deprez wrote: > Hello guys, > > I'm trying to backup HP Procurve switches. > Model I tried are : HP-2610, HP-2810 and HP-2510 > > To debug i try the following command : > > sudo -u rancid /var/lib/rancid/bin/hlogin -c "show version" HP-2610 > > I always block at the HP UI : > When i deployed RANCID, i found that forgetting to set autoenable on ProCurve switches resulted in very similar behaviour. Check that you have it set. I found that using the patch for expect was not necessary in my case. Paul From heas at shrubbery.net Fri Apr 29 16:23:30 2011 From: heas at shrubbery.net (john heasley) Date: Fri, 29 Apr 2011 16:23:30 +0000 Subject: [rancid] FW: routers router config diffs In-Reply-To: References: <20110427192347.16DA0CA06D@netmon.mapscu.com> Message-ID: <20110429162330.GM23073@shrubbery.net> Wed, Apr 27, 2011 at 03:17:07PM -0700, Chris Gauthier: > Anyone seen this issue with rancid and Cisco IOS 15.0? I tried to find out which version of rancid I have, but I cannot seem to find it. Anyway, here is the behavior and it is really annoying since the only change is that file. This seems a lot like the earlier ASA "crashdump" issue that they had. I don't want to see these all the time. > I dont have any r15 boxes. Is this something you have configured (or auto- configured by the upgrade) or just a new "feature" of 15? is there other stuff in the syslog dir, besides these log files? > > Chris > > > Index: configs/10.0.1.9 > ============================================================= ====== > retrieving revision 1.15 > diff -U 4 -r1.15 10.0.1.9 > @@ -26,11 +26,11 @@ > !Flash: 9 0 Nov 05 2010 00:07:16 syslog > !Flash: 11 6523 Nov 05 2010 00:11:44 startup-config-20101104_1711 > !Flash: 12 261987 Apr 20 2011 06:12:00 syslog/log_20110416-121956 > !Flash: 13 258273 Apr 25 2011 00:01:08 syslog/log_20110420-001701 > - !Flash: 14 120840 Apr 27 2011 17:41:12 syslog/log_20110424-202035 > + !Flash: 14 124993 Apr 27 2011 19:01:12 syslog/log_20110424-202035 > !Flash: 16 258002 Apr 16 2011 17:40:18 syslog/log_20110413-001319 > - !Flash: 221515776 bytes available (36225024 bytes used) > + !Flash: 221511680 bytes available (36229120 bytes used) > ! > > !Flash: nvram: Directory of nvram:/ > > !Flash: nvram: 244 -rw- 6605 startup-config > > !Flash: nvram: 245 ---- 3573 private-config > > ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ > CONFIDENTIALITY NOTICE > Attention: The information contained in this email and/or attachments is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any system and destroy any copies. > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss From cgauthier at mapscu.com Fri Apr 29 16:25:13 2011 From: cgauthier at mapscu.com (Chris Gauthier) Date: Fri, 29 Apr 2011 09:25:13 -0700 Subject: [rancid] FW: routers router config diffs In-Reply-To: <20110429162330.GM23073@shrubbery.net> References: <20110427192347.16DA0CA06D@netmon.mapscu.com> <20110429162330.GM23073@shrubbery.net> Message-ID: Hi John, This, I think, is a "feature" of 15.x. What is odd is that it is a Cisco 891 running 15.0, but my fleet of 2811's are also running 15.x and they're not exhibiting this behavior. I'll report back to the list with more soon. Side question: how do I determine which version of rancid is installed? I *think* it might be 2.3.2, but I seem to remember upgrading, too. It was installed by hand. Chris Gauthier, CCNA Security Network Administrator Maps Credit Union v: 503.588.0181 x3401 f: 503.779.1083 https://www.mapscu.com > -----Original Message----- > From: john heasley [mailto:heas at shrubbery.net] > Sent: Friday, April 29, 2011 9:24 AM > To: Chris Gauthier > Cc: rancid-discuss at shrubbery.net > Subject: Re: [rancid] FW: routers router config diffs > > Wed, Apr 27, 2011 at 03:17:07PM -0700, Chris Gauthier: > > Anyone seen this issue with rancid and Cisco IOS 15.0? I tried to find out > which version of rancid I have, but I cannot seem to find it. Anyway, here is the > behavior and it is really annoying since the only change is that file. This seems a > lot like the earlier ASA "crashdump" issue that they had. I don't want to see > these all the time. > > > > I dont have any r15 boxes. Is this something you have configured (or auto- > configured by the upgrade) or just a new "feature" of 15? is there other stuff in > the syslog dir, besides these log files? > > > > > Chris > > > > > > Index: configs/10.0.1.9 > > > ============================================================= > ====== > > retrieving revision 1.15 diff -U 4 -r1.15 10.0.1.9 @@ -26,11 +26,11 @@ > > !Flash: 9 0 Nov 05 2010 00:07:16 syslog > > !Flash: 11 6523 Nov 05 2010 00:11:44 startup-config-20101104_1711 > > !Flash: 12 261987 Apr 20 2011 06:12:00 syslog/log_20110416-121956 > > !Flash: 13 258273 Apr 25 2011 00:01:08 syslog/log_20110420-001701 > > - !Flash: 14 120840 Apr 27 2011 17:41:12 syslog/log_20110424-202035 > > + !Flash: 14 124993 Apr 27 2011 19:01:12 syslog/log_20110424-202035 > > !Flash: 16 258002 Apr 16 2011 17:40:18 syslog/log_20110413-001319 > > - !Flash: 221515776 bytes available (36225024 bytes used) > > + !Flash: 221511680 bytes available (36229120 bytes used) > > ! > > > !Flash: nvram: Directory of nvram:/ > > > !Flash: nvram: 244 -rw- 6605 startup-config > > > !Flash: nvram: 245 ---- 3573 private-config > > > > ---------------------------------------------------------------------- > > ---------------------------------------------------------------------- > > ---------------------------------------------------------------------- > > CONFIDENTIALITY NOTICE > > Attention: The information contained in this email and/or attachments is > intended only for the person or entity to which it is addressed and may contain > confidential and/or privileged material. Any review, retransmission, > dissemination or other use of, or taking of any action in reliance upon, this > information by persons or entities other than the intended recipient is > prohibited. If you received this in error, please contact the sender and delete the > material from any system and destroy any copies. > > _______________________________________________ > > Rancid-discuss mailing list > > Rancid-discuss at shrubbery.net > > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ CONFIDENTIALITY NOTICE Attention: The information contained in this email and/or attachments is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any system and destroy any copies. From heas at shrubbery.net Fri Apr 29 17:03:06 2011 From: heas at shrubbery.net (john heasley) Date: Fri, 29 Apr 2011 17:03:06 +0000 Subject: [rancid] FW: routers router config diffs In-Reply-To: References: <20110427192347.16DA0CA06D@netmon.mapscu.com> <20110429162330.GM23073@shrubbery.net> Message-ID: <20110429170306.GU23073@shrubbery.net> Fri, Apr 29, 2011 at 09:25:13AM -0700, Chris Gauthier: > Hi John, > > This, I think, is a "feature" of 15.x. What is odd is that it is a Cisco 891 running 15.0, but my fleet of 2811's are also running 15.x and they're not exhibiting this behavior. I'll report back to the list with more soon. a few recent IOS/XRs have had debug collecting files mistakingly left in shipped code or configured by default. this may be another case of that problem. you might tell cisco about the issue if you find it is plaform specific. > Side question: how do I determine which version of rancid is installed? I *think* it might be 2.3.2, but I seem to remember upgrading, too. It was installed by hand. rancid -V or -V option to any of the login or clogin scripts post 2.3.1 or so. From heas at shrubbery.net Fri Apr 29 18:24:25 2011 From: heas at shrubbery.net (john heasley) Date: Fri, 29 Apr 2011 18:24:25 +0000 Subject: [rancid] hlogin timeout In-Reply-To: References: Message-ID: <20110429182425.GH23073@shrubbery.net> Thu, Apr 28, 2011 at 01:17:49PM +1000, Paul Gear: > When i deployed RANCID, i found that forgetting to set autoenable on > ProCurve switches resulted in very similar behaviour. Check that you > have it set. true, but given the mangling in the output that he provided, i'm about 99% sure its their libc change for wide characters. > I found that using the patch for expect was not necessary > in my case. thats probably luck of the timing. From peo at chalmers.se Sat Apr 30 05:39:10 2011 From: peo at chalmers.se (Per-Olof Olsson) Date: Sat, 30 Apr 2011 07:39:10 +0200 Subject: [rancid] hlogin timeout In-Reply-To: <20110427154126.GA17240@shrubbery.net> References: <20110427154126.GA17240@shrubbery.net> Message-ID: <4DBBA07E.308@chalmers.se> john heasley 2011-04-27 17:41: > Wed, Apr 27, 2011 at 05:00:58PM +0200, Hugo Deprez: >> I'm trying to backup HP Procurve switches. >> Model I tried are : HP-2610, HP-2810 and HP-2510 >> >> To debug i try the following command : > >> [...] >> >> >> Press to key to ctntieue >> >> The hlogin return Error: TIMEOUT reached >> >> I am running Debian Squeeze with rancid 2.3.3-1 (official package) >> >> Is that a bug from this rancid version ? > > yes, sort of. a change in linux libc caused this. grab 2.3.6 from > ftp.shrubbery.net > _______________________________________________ > Rancid-discuss mailing list > Rancid-discuss at shrubbery.net > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss Or bug in rancid 2.3.3 "Missing hpuifilter in hlogin" Look for subject "[rancid] Re: Rancid stopped working for my HP switches" from 04/03/2010 and/or [rancid] SSH issues "couldn't compile regular expression pattern: parentheses () not balanced from 06/23/2010 Peo ---------------------------------------------------------- Per-Olof Olsson Email: peo at chalmers.se Chalmers tekniska h?gskola IT-service H?rsalsv?gen 5 412 96 G?teborg Tel: 031/772 6738 Fax: 031/772 8680 ---------------------------------------------------------- From negru_tudor at yahoo.com Sat Apr 30 16:25:59 2011 From: negru_tudor at yahoo.com (tudor negru) Date: Sat, 30 Apr 2011 09:25:59 -0700 (PDT) Subject: [rancid] Adding Scripts to Rancid Message-ID: <146362.50602.qm@web62205.mail.re1.yahoo.com> Hi all, I'm kinda new to RANCID but after installing it and giving it a go, I came to the conclusion it's a quite powerful tool. I was going through some docs and saw that RANCID relies on Expect and PERL scripting. The thing is that I would want to write my own basic, very simple little script for a Nortel Option 11 C. I am aware of the Nortel Meridian CLI commands and I've written some very simple Expect scripts for a CISCO router and they worked but I would like to write and integrate the Nortel script into Rancid. Guys, where do I need to start? I don't really want to edit existing scripts to suit my new one, preferably I'd want to start off clean, from scratch since I'll be happy if I get even the simplest of scripts running (log into the device, get the time and date and log out) - I need to understand the structure, how do i get it ticking, connect the bits and pieces. Would it be possible to share some light on the structure, which script should call which or where should I start? Best Regards, Negru Tudor Adrian -------------- next part -------------- An HTML attachment was scrubbed... URL: