Rancid monitors a router's (or device's) configuration

headers Saulo Zimbaro | 19 Jun 2013 20:04 · /wkGwA6F39glvzYWmk3z9KoN7L/

_______________________________________________
Rancid-discuss mailing list
Rancid-discuss <at> shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
_______________________________________________
Rancid-discuss mailing list
Rancid-discuss <at> shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
Hi,

Our provider edge runs on GSR 12's and they carry a hefty config. NetOps
complain that rancid noticeably spikes the cpu load [1] when it runs
these 4 (essentially the same) commands.

{'more system:running-config'   => 'WriteTerm'},        # ASA/PIX
{ running-config view full'=> 'WriteTerm'},        # workaround for
{'show running-config'          => 'WriteTerm'},
{'write term'                   => 'WriteTerm'},

I got it under control easily by forking rancid to a gsrrancid script
and removing the bits I don't want from  <at> commandtable.

I'd rather not do it this way, I'd like to have this in the rancid
parser. But I can't figure a way to modify  <at> commandtable at runtime
based on chassis/OS type.

Ideas?

[1] It's a legit complaint, not a fiction of a NetOps engineer's
imagination. On every other chassis I can ignore the effects rancid
causes, but not these ones. We do things with the 12k most folks think
should not be possible 

--

-- 
Alan McKinnon
alan.mckinnon <at> gmail.com

_______________________________________________
Rancid-discuss mailing list
Rancid-discuss <at> shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

Howdy,

Does RANCID supports the Cisco SF300 SMB switches? The regular 'cisco' and
the 'cisco-sb' (from
http://chrpinedo.blogspot.nl/2012/03/cisco-small-business-sg300-backup-with
.html) give me an empty file in the cvs, while direct logging in on the
switch and doing a sho ru (after enable) works just fine.

Any tips or help?

_______________________________________________
Rancid-discuss mailing list
Rancid-discuss <at> shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

_______________________________________________
Rancid-discuss mailing list
Rancid-discuss <at> shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
_______________________________________________
Rancid-discuss mailing list
Rancid-discuss <at> shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
_______________________________________________
Rancid-discuss mailing list
Rancid-discuss <at> shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
Hi

I am currently running rancid 2.3.8-3 on a debian server.

I am backing up 3 fortinet firewalls and everytime rancid runs it produces a diff against various things
changing.  This
happens on every run even if no config changes have been made to the firewall:

 <at>  <at>  -2538,7 +2538,7  <at>  <at> 
   end
   config system autoupdate tunneling
       set address ''
-     set password ENC 7rz3NZFEnq39bkDpQoOq1xFb9S+pQwBXZedGObWBC7hC/QYQBMnsGbxKvbtSLtmBELRLqU631S6JPt8jsr0qKo2r10Vv5UzYddzby6Q3tWIls1IC
+     set password ENC 51lWQzr6MmALlpq9n4uTbPbGcL9XHTvXmQ4kMLcz3u2Ua8yt9tkanbZp0J5uaKsiLqgLqEIKnQQFQYKoh+qNcGSeDMsFhHk/H18pPn4nuBQ0IxMq
       set port 0
       set status disable
       set username ''

 <at>  <at>  -7474,23 +7474,23  <at>  <at> 
   end
   config vpn certificate local
       edit "Fortinet_Factory"
-         set password ENC NNWSYkoMA+edjwo5LVP2a1M6K20cxS0iN/wkGwA6F39glvzYWmk3z9KoN7L//UR86M3u+8+d7Kk0k79NYf63wkLtpZnxRYWrLPTLeunMQLD5Rz2f
+         set password ENC 0QNWT3omKlWgl1dROK2zvJDEdmhmrOQcre178jDza1qcDDJ4ROArDrJ2mWi5qIFFS6cZs8rIa9rUv34zvfmC/8U/xorbn6g/c1/jKfoCNo5KTP1E
           set private-key "-----BEGIN RSA PRIVATE KEY-----
   Proc-Type: 4,ENCRYPTED
- DEK-Info: DES-EDE3-CBC,A8B9D863C86CD1F9
- 8+cZant/s9PvQE2cK0010WPxMAXo7cp8BnmhCBpjvo7wEKXux+5yasNhe1ZxDcZm
- j7PmNrqqO+J6qG5Whd90Hp9BCJ8eNYQJojW0IfB2RPYocD058bk+kjZ7MPov/JBz
- QgDhnzoP9qFjPzA2GGMQ+1JFMJZI63VlRGUhKnN8xc0X1B9oHnb7U3/d3wipSekM
- eSKd4Sy6kcZJc726OV273pr6ftJyob1tDmIGXZzMRgAzUehFO1w+2u39hPsTOcq/
- IyF/RKTcfXoLilPFwZQvpDzIlurzCCv1ySsxhpFCKLScPaCwaTY6g8qz03VTMC6h
+ DEK-Info: DES-EDE3-CBC,39706AFBAD7CE8DF
+ 9KJ7kMJlzqKVFwS8dChmvlalrMbIKd0AxSo9VU/Wa1MSPo6HN8IjCAUtcM9zvbSX
+ E7aCk75D8vglifkuRqa+wtCcT8xVrEdwnHXpkvc9RH2JPs4JRhOyrYUAsnCMkQp3
+ rLS0OditRHWbxG8M5xo5V2dIs7L6wkN7wJ9Rdrj+AKf49bsLayIdTkF4ruG0tBXR
+ ugQDLe6G6lCq2CW3y0m6SA5fQE2bXQy0YztDrHSZzzm5wXHhfpEUzmAU9gR1kl/s
+ V1+fzVRhIXw2sf8CoH83DLvON0wiNOE/J9BhUgvxq9SzbRPhXrUS/58S1cdr7Wz

   -----END RSA PRIVATE KEY-----"

I have looked back through the archives and found something similar back in 2010 but would assume that the
patch has
been integrated into the latest version.

Could any one suggest a fix for this as its getting slightly annoying getting a diff everytime there is a backup.

Many thanks

Richard
This e-mail is sent on behalf of NewNet Limited, a company registered in England and Wales, registered
number 03128506, registered office Carnac Lodge, Cams Estate, FAREHAM, Hampshire PO16 8UJ and
regulated by Ofcom. The information in this e-mail is confidential and is intended solely for the use of
that individual or entity to which it is addressed. Unauthorised use, dissemination, distribution,
publication or copying of this communication is strictly prohibited. If you receive this in error,
please notify us by email to privacy <at> newnet.co.uk<mailto:privacy <at> newnet.co.uk> and delete any
copies. For information about how we process data and monitor communications please see our privacy statement<http://www.newnet.co.uk/Bottom-Bar/privacy-policy.php>.
_______________________________________________
Rancid-discuss mailing list
Rancid-discuss <at> shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

Alan McKinnon said the following on 06/04/2013 05:22 PM:
[CUT]
> What do you have in router.db for that device? 

10.10.15.96:hp:up

I have a cisco device as well - and that works just fine.

--

-- 
Regards,
Klavs Klavsen, GSEC - kl <at> vsen.dk - http://www.vsen.dk - Tlf. 61281200

"Those who do not understand Unix are condemned to reinvent it, poorly."
   --Henry Spencer

_______________________________________________
Rancid-discuss mailing list
Rancid-discuss <at> shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

heasley said the following on 06/04/2013 05:20 PM:
> Tue, Jun 04, 2013 at 04:57:33PM +0200, Klavs Klavsen:
>> I am trying to backup a hp procurve 2520.
>>
>> using rancid 2.3.6 (I tried updating hlogin to v2.3.8).
> are you using linux?  if so, would you try the hpuifilter from 3.0a2?

Yes - I'll gladly test that.

>> When running:
>> /usr/libexec/rancid/hlogin -c "show version;show flash;show
>> system-information;show system information;show module;show stack;write
>> term" 10.10.15.96
>>
>> it seems to work fine. It logs in, runs the commands, and after a few
>> seconds (and a lot of output :) - it writes exit etc. and gets out just
>> fine.
>>
>> When I then run rancid-run - I see it has spawned that exact command,
>> but there it appearently fails - because the log says:
>> Trying to get all of the configs.
>> 10.10.15.96: End of run not found
>> ;
>> =====================================
>> Getting missed routers: round 1.
>> 10.10.15.96: End of run not found
>> ;
>> =====================================
>> Getting missed routers: round 2.
>> 10.10.15.96: End of run not found
>> ;
>> =====================================
>> Getting missed routers: round 3.
>> 10.10.15.96: End of run not found
>> ;
>> =====================================
>> Getting missed routers: round 4.
>> 10.10.15.96: End of run not found
>>
>> Any ideas as to what I could do, to try to debug it?
> This is rare, a failure w/o some indication of why, but is difficult to
> debug.  start by trying the debugging with the PATH from rancid.conf.
Typical - rare failures.. gr8 :)

What do you mean? I don't believe there's any PATH set in rancid.conf.

I am home from work now - and it's national holiday tomorrow - but 
thursday, I'll try hpuifilter 3.0.2a and I figured I'd try to insert 
some debugging output in rancid-run - around where it calls hlogin (or 
is it rancid-control that calls hlogin.. I don't remember right now..)

p.s. router db contains: 10.10.15.96:hp:up

--

-- 
Regards,
Klavs Klavsen, GSEC - kl <at> vsen.dk - http://www.vsen.dk - Tlf. 61281200

"Those who do not understand Unix are condemned to reinvent it, poorly."
   --Henry Spencer

_______________________________________________
Rancid-discuss mailing list
Rancid-discuss <at> shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

I am trying to backup a hp procurve 2520.

using rancid 2.3.6 (I tried updating hlogin to v2.3.8).

When running:
/usr/libexec/rancid/hlogin -c "show version;show flash;show 
system-information;show system information;show module;show stack;write 
term" 10.10.15.96

it seems to work fine. It logs in, runs the commands, and after a few 
seconds (and a lot of output :) - it writes exit etc. and gets out just 
fine.

When I then run rancid-run - I see it has spawned that exact command, 
but there it appearently fails - because the log says:
Trying to get all of the configs.
10.10.15.96: End of run not found
;
=====================================
Getting missed routers: round 1.
10.10.15.96: End of run not found
;
=====================================
Getting missed routers: round 2.
10.10.15.96: End of run not found
;
=====================================
Getting missed routers: round 3.
10.10.15.96: End of run not found
;
=====================================
Getting missed routers: round 4.
10.10.15.96: End of run not found

Any ideas as to what I could do, to try to debug it?

--

-- 
Regards,
Klavs Klavsen, GSEC - kl <at> vsen.dk - http://www.vsen.dk - Tlf. 61281200

"Those who do not understand Unix are condemned to reinvent it, poorly."
   --Henry Spencer

_______________________________________________
Rancid-discuss mailing list
Rancid-discuss <at> shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

47	June 2013
42	May 2013
51	April 2013
52	March 2013
56	February 2013
51	January 2013
29	December 2012
18	November 2012
45	October 2012
11	September 2012
52	August 2012
37	July 2012
23	June 2012
41	May 2012
40	April 2012
67	March 2012
58	February 2012
98	January 2012
35	December 2011
69	November 2011
38	October 2011
80	September 2011
48	August 2011
72	July 2011
44	June 2011
32	May 2011
36	April 2011
55	March 2011
91	February 2011
54	January 2011
57	December 2010
42	November 2010
66	October 2010
88	September 2010
94	August 2010
65	July 2010
75	June 2010
48	May 2010
92	April 2010
118	March 2010
79	February 2010
76	January 2010
86	December 2009
107	November 2009
100	October 2009
60	September 2009
62	August 2009
80	July 2009
60	June 2009
66	May 2009
97	April 2009
49	March 2009
124	February 2009
74	January 2009
84	December 2008
105	November 2008
35	October 2008
88	September 2008
57	August 2008
41	July 2008
36	June 2008
72	May 2008
72	April 2008
99	March 2008
100	February 2008
127	January 2008
26	December 2007
63	November 2007
77	October 2007
29	September 2007
81	August 2007
66	July 2007
67	June 2007
27	May 2007
50	April 2007
88	March 2007
42	February 2007
98	January 2007
36	December 2006
65	November 2006
56	October 2006
72	September 2006
68	August 2006
67	July 2006
46	June 2006
59	May 2006
27	April 2006
70	March 2006
20	February 2006
38	January 2006
38	December 2005
31	November 2005
25	October 2005
38	September 2005
28	August 2005
36	July 2005
88	June 2005
52	May 2005
13	April 2005
22	March 2005
5	February 2005
5	January 2005
28	December 2004
8	November 2004
35	October 2004
25	September 2004
19	August 2004
21	July 2004
12	June 2004
18	May 2004
25	April 2004
31	March 2004
19	February 2004
75	January 2004
43	December 2003
17	November 2003
28	October 2003
52	September 2003
25	August 2003
27	July 2003
31	June 2003
7	May 2003
38	April 2003
5	March 2003
12	February 2003
7	January 2003
20	December 2002
15	November 2002
34	October 2002
7	September 2002
5	August 2002
6	July 2002
9	June 2002

[rancid] ignoring flash memory changes

[rancid] Rancid CVS Problem

[rancid] Limit commands run for GSR

[rancid] Support for the Cisco SF300

[rancid] Bkp DELL PC 5548 and 5448 with Rancid

[rancid] Checking for root

[rancid] End of run not found on telnet

[rancid] Rancid / Fortigate

Re: [rancid] hp procurve problem - hlogin works - rancid-run fails

Re: [rancid] hp procurve problem - hlogin works - rancid-run fails

[rancid] hp procurve problem - hlogin works - rancid-run fails

Mon	Tue	Wed	Thu	Fri	Sat	Sun

					1	2
3	4	5	6	7	8	9
10	11	12	13	14	15	16
17	18	19	20	21	22	23
24	25	26	27	28	29	30