Discussion:
[rancid] RANCID pulls hourly diff off NEXUS 5500 despite no changes
Pete Boynton
2012-10-17 13:49:42 UTC
Permalink
Hello,

We are running version of 2.3.8 of RANCID. The problem we are having is
that every hour RANCID detects a change in the config and so it posts a new
page even though no chance has occurred. It detects the line:

!Time: Wed Oct 17 06:00:06 2012


has changed from the hour before, so I guess technically a change has
occurred and RANCID is doing what it was designed to do. However we are
getting spammed with versions that really don't tell us when an important
change has been made. This is only a problem on the NEXUS switches.
Everything else works fine.

Question:

1. Is there a way to tell RANCID to ignore the line that begins with !Time?

Thanks for any help you can give

Pedro
Hughes, Doug
2012-10-17 14:08:58 UTC
Permalink
Which section does it occur in? Is it part of Show Ver or other? If you go into that section in the rancid file you can add a regex match to discard Time:

For instance, go to sub ShowVersion
Scroll down and you'll see a ton of regular expressions.
Add a new one like this:
# ignore time changes to avoid hourly spam
/^Time: / && next;

Put that line in whatever section is generating the annoying timestamp.


From: rancid-discuss-***@shrubbery.net [mailto:rancid-discuss-***@shrubbery.net] On Behalf Of Pete Boynton
Sent: Wednesday, October 17, 2012 9:50 AM
To: rancid-***@shrubbery.net
Subject: [rancid] RANCID pulls hourly diff off NEXUS 5500 despite no changes

Hello,

We are running version of 2.3.8 of RANCID. The problem we are having is that every hour RANCID detects a change in the config and so it posts a new page even though no chance has occurred. It detects the line:

!Time: Wed Oct 17 06:00:06 2012


has changed from the hour before, so I guess technically a change has occurred and RANCID is doing what it was designed to do. However we are getting spammed with versions that really don't tell us when an important change has been made. This is only a problem on the NEXUS switches. Everything else works fine.

Question:

1. Is there a way to tell RANCID to ignore the line that begins with !Time?

Thanks for any help you can give

Pedro
Pete Boynton
2012-10-17 15:07:37 UTC
Permalink
Doug,

Thanks for the quick reply. I am pretty much a RANCID newbie but I want to
answer your question:

Which section does it occur in?

How could I find out what section this is happening.

Thanks



On Wed, Oct 17, 2012 at 10:08 AM, Hughes, Doug <
Post by Hughes, Doug
Is it part of Show Ver or other? If you go into that section in the
** **
For instance, go to sub ShowVersion****
Scroll down and you’ll see a ton of regular expressions.****
Add a new one like this:****
# ignore time changes to avoid hourly spam****
/^Time: / && next;****
** **
Put that line in whatever section is generating the annoying timestamp.***
*
** **
** **
*Sent:* Wednesday, October 17, 2012 9:50 AM
*Subject:* [rancid] RANCID pulls hourly diff off NEXUS 5500 despite no
changes****
** **
Hello,
We are running version of 2.3.8 of RANCID. The problem we are having is
that every hour RANCID detects a change in the config and so it posts a new
!Time: Wed Oct 17 06:00:06 2012
has changed from the hour before, so I guess technically a change has
occurred and RANCID is doing what it was designed to do. However we are
getting spammed with versions that really don't tell us when an important
change has been made. This is only a problem on the NEXUS switches.
Everything else works fine.
1. Is there a way to tell RANCID to ignore the line that begins with !Time?
Thanks for any help you can give
Pedro ****
Hughes, Doug
2012-10-17 15:10:50 UTC
Permalink
You should have lines beginning with a prefix around it..

Like !Flash: or !BootFlash: or !Image: or something like that...



From: Pete Boynton [mailto:***@gmail.com]
Sent: Wednesday, October 17, 2012 11:08 AM
To: Hughes, Doug
Cc: rancid-***@shrubbery.net
Subject: Re: [rancid] RANCID pulls hourly diff off NEXUS 5500 despite no changes

Doug,

Thanks for the quick reply. I am pretty much a RANCID newbie but I want to answer your question:

Which section does it occur in?

How could I find out what section this is happening.

Thanks


On Wed, Oct 17, 2012 at 10:08 AM, Hughes, Doug <***@deshawresearch.com<mailto:***@deshawresearch.com>> wrote:
Is it part of Show Ver or other? If you go into that section in the rancid file you can add a regex match to discard Time:

For instance, go to sub ShowVersion
Scroll down and you'll see a ton of regular expressions.
Add a new one like this:
# ignore time changes to avoid hourly spam
/^Time: / && next;

Put that line in whatever section is generating the annoying timestamp.


From: rancid-discuss-***@shrubbery.net<mailto:rancid-discuss-***@shrubbery.net> [mailto:rancid-discuss-***@shrubbery.net<mailto:rancid-discuss-***@shrubbery.net>] On Behalf Of Pete Boynton
Sent: Wednesday, October 17, 2012 9:50 AM
To: rancid-***@shrubbery.net<mailto:rancid-***@shrubbery.net>
Subject: [rancid] RANCID pulls hourly diff off NEXUS 5500 despite no changes

Hello,

We are running version of 2.3.8 of RANCID. The problem we are having is that every hour RANCID detects a change in the config and so it posts a new page even though no chance has occurred. It detects the line:

!Time: Wed Oct 17 06:00:06 2012


has changed from the hour before, so I guess technically a change has occurred and RANCID is doing what it was designed to do. However we are getting spammed with versions that really don't tell us when an important change has been made. This is only a problem on the NEXUS switches. Everything else works fine.

Question:

1. Is there a way to tell RANCID to ignore the line that begins with !Time?

Thanks for any help you can give

Pedro
Hughes, Doug
2012-10-17 15:56:09 UTC
Permalink
My rancid hasn't been updated in a while, but it should be mostly similar, still

There's a WriteTerm subroutine that is responsible for processing the show running-config execution. Looks under there for something like:
# some versions have other crap mixed in with the bits in the
# block above
/^! (Last configuration|NVRAM config last)/ && next;

You could just modify that line and add between the t of last and the closing ')', "|^Time: ") (without the quotes)

Or add another line under:
# Dog gone Cool matches to process the rest of the config
/^Time: / && next;

You may have to adjust for spaces or indentation in the output.


From: Pete Boynton [mailto:***@gmail.com]
Sent: Wednesday, October 17, 2012 11:51 AM
To: Hughes, Doug
Cc: rancid-***@shrubbery.net
Subject: Re: [rancid] RANCID pulls hourly diff off NEXUS 5500 despite no changes

OK then this happens during the show running config section
On Wed, Oct 17, 2012 at 11:10 AM, Hughes, Doug <***@deshawresearch.com<mailto:***@deshawresearch.com>> wrote:
You should have lines beginning with a prefix around it..

Like !Flash: or !BootFlash: or !Image: or something like that...



From: Pete Boynton [mailto:***@gmail.com<mailto:***@gmail.com>]
Sent: Wednesday, October 17, 2012 11:08 AM
To: Hughes, Doug
Cc: rancid-***@shrubbery.net<mailto:rancid-***@shrubbery.net>
Subject: Re: [rancid] RANCID pulls hourly diff off NEXUS 5500 despite no changes

Doug,

Thanks for the quick reply. I am pretty much a RANCID newbie but I want to answer your question:

Which section does it occur in?

How could I find out what section this is happening.

Thanks

On Wed, Oct 17, 2012 at 10:08 AM, Hughes, Doug <***@deshawresearch.com<mailto:***@deshawresearch.com>> wrote:
Is it part of Show Ver or other? If you go into that section in the rancid file you can add a regex match to discard Time:

For instance, go to sub ShowVersion
Scroll down and you'll see a ton of regular expressions.
Add a new one like this:
# ignore time changes to avoid hourly spam
/^Time: / && next;

Put that line in whatever section is generating the annoying timestamp.


From: rancid-discuss-***@shrubbery.net<mailto:rancid-discuss-***@shrubbery.net> [mailto:rancid-discuss-***@shrubbery.net<mailto:rancid-discuss-***@shrubbery.net>] On Behalf Of Pete Boynton
Sent: Wednesday, October 17, 2012 9:50 AM
To: rancid-***@shrubbery.net<mailto:rancid-***@shrubbery.net>
Subject: [rancid] RANCID pulls hourly diff off NEXUS 5500 despite no changes

Hello,

We are running version of 2.3.8 of RANCID. The problem we are having is that every hour RANCID detects a change in the config and so it posts a new page even though no chance has occurred. It detects the line:

!Time: Wed Oct 17 06:00:06 2012


has changed from the hour before, so I guess technically a change has occurred and RANCID is doing what it was designed to do. However we are getting spammed with versions that really don't tell us when an important change has been made. This is only a problem on the NEXUS switches. Everything else works fine.

Question:

1. Is there a way to tell RANCID to ignore the line that begins with !Time?

Thanks for any help you can give

Pedro
Pete Boynton
2012-10-17 15:50:54 UTC
Permalink
OK then this happens during the show running config section

On Wed, Oct 17, 2012 at 11:10 AM, Hughes, Doug <
You should have lines beginning with a prefix around it..****
** **
Like !Flash: or !BootFlash: or !Image: or something like that…****
** **
** **
** **
*Sent:* Wednesday, October 17, 2012 11:08 AM
*To:* Hughes, Doug
*Subject:* Re: [rancid] RANCID pulls hourly diff off NEXUS 5500 despite
no changes****
** **
Doug,
Thanks for the quick reply. I am pretty much a RANCID newbie but I want to
Which section does it occur in?
How could I find out what section this is happening.
Thanks
****
On Wed, Oct 17, 2012 at 10:08 AM, Hughes, Doug <
Is it part of Show Ver or other? If you go into that section in the
rancid file you can add a regex match to discard Time:****
****
For instance, go to sub ShowVersion****
Scroll down and you’ll see a ton of regular expressions.****
Add a new one like this:****
# ignore time changes to avoid hourly spam****
/^Time: / && next;****
****
Put that line in whatever section is generating the annoying timestamp.***
*
****
****
*Sent:* Wednesday, October 17, 2012 9:50 AM
*Subject:* [rancid] RANCID pulls hourly diff off NEXUS 5500 despite no
changes****
****
Hello,
We are running version of 2.3.8 of RANCID. The problem we are having is
that every hour RANCID detects a change in the config and so it posts a new
!Time: Wed Oct 17 06:00:06 2012
has changed from the hour before, so I guess technically a change has
occurred and RANCID is doing what it was designed to do. However we are
getting spammed with versions that really don't tell us when an important
change has been made. This is only a problem on the NEXUS switches.
Everything else works fine.
1. Is there a way to tell RANCID to ignore the line that begins with !Time?
Thanks for any help you can give
Pedro ****
** **
Lee
2012-10-19 02:51:52 UTC
Permalink
Make sure the device type in router.db is cisco-nx
( ie: deviceName:cisco-nx:up )

nxrancid has a line (well... the 2.3.6 version has a line, I haven't
upgraded yet)
/^!Time: / && next; # kill this junk
in sub WriteTerm to ignore lines that start with "!Time: "

Regards,
Lee
Post by Pete Boynton
Hello,
We are running version of 2.3.8 of RANCID. The problem we are having is
that every hour RANCID detects a change in the config and so it posts a new
!Time: Wed Oct 17 06:00:06 2012
has changed from the hour before, so I guess technically a change has
occurred and RANCID is doing what it was designed to do. However we are
getting spammed with versions that really don't tell us when an important
change has been made. This is only a problem on the NEXUS switches.
Everything else works fine.
1. Is there a way to tell RANCID to ignore the line that begins with !Time?
Thanks for any help you can give
Pedro
Loading...