[rancid] Force10 FTOS 9 keeps triggering alerts due to flash mod time changing

Discussion:

Thomas Vachon

2013-08-01 12:39:10 UTC

It seems in Force10 FTOS9 the mod time on ".." on the flash changes every
time a login happens. So everytime RANCID logs in, it triggers an alert.
Has anyone else seen this and stopped it from triggering? Just to note, I
am not seeing this on the FTOS 8 switches (S55) only the FTOS 9 right after
upgrade (S4810P stacked). Below is a few examples.

===================================================================
retrieving revision 1.41
diff -u -4 -r1.41 192.168.124.199
!Boot Variables: BOOT INTERFACE GATEWAY IP ADDRESS = 0.0.0.0
!Boot Variables: Reload Mode = normal-reload
!
!Flash: flash: 1 drwx 4096 Jan 01 1980 00:00:00 +00:00 .
- !Flash: flash: 2 drwx 2048 Aug 02 2013 01:53:36 +00:00 ..
+ !Flash: flash: 2 drwx 2048 Aug 02 2013 02:53:36 +00:00 ..

!Flash: flash: 3 drwx 4096 Mar 30 2012 18:16:28 +00:00
TRACE_LOG_DIR
!Flash: flash: 4 drwx 4096 Mar 30 2012 18:16:28 +00:00
CORE_DUMP_DIR
!Flash: flash: 5 d--- 4096 Mar 30 2012 18:16:28 +00:00
ADMIN_DIR
!Flash: flash: 6 drwx 4096 Jul 31 2013 11:55:02 +00:00
CONFIG_TEMPLATE

--------------------

===================================================================
retrieving revision 1.42
diff -u -4 -r1.42 192.168.124.199
@@ -27,9 +27,9 @@
!Boot Variables: BOOT INTERFACE GATEWAY IP ADDRESS = 0.0.0.0
!Boot Variables: Reload Mode = normal-reload
!
!Flash: flash: 1 drwx 4096 Jan 01 1980 00:00:00 +00:00 .
- !Flash: flash: 2 drwx 2048 Aug 02 2013 02:53:36 +00:00 ..
+ !Flash: flash: 2 drwx 2048 Aug 02 2013 03:53:36 +00:00 ..

!Flash: flash: 3 drwx 4096 Mar 30 2012 18:16:28 +00:00
TRACE_LOG_DIR
!Flash: flash: 4 drwx 4096 Mar 30 2012 18:16:28 +00:00
CORE_DUMP_DIR
!Flash: flash: 5 d--- 4096 Mar 30 2012 18:16:28 +00:00
ADMIN_DIR
!Flash: flash: 6 drwx 4096 Jul 31 2013 11:55:02 +00:00
CONFIG_TEMPLATE

--
Thomas Vachon
Principal Operations Architect
*session M*
***@sessionm.com

heasley

2013-08-01 13:28:08 UTC

Permalink

Post by Thomas Vachon
It seems in Force10 FTOS9 the mod time on ".." on the flash changes every
time a login happens. So everytime RANCID logs in, it triggers an alert.
Has anyone else seen this and stopped it from triggering? Just to note, I
am not seeing this on the FTOS 8 switches (S55) only the FTOS 9 right after
upgrade (S4810P stacked). Below is a few examples.
===================================================================
retrieving revision 1.41
diff -u -4 -r1.41 192.168.124.199
!Boot Variables: BOOT INTERFACE GATEWAY IP ADDRESS = 0.0.0.0
!Boot Variables: Reload Mode = normal-reload
!
!Flash: flash: 1 drwx 4096 Jan 01 1980 00:00:00 +00:00 .
- !Flash: flash: 2 drwx 2048 Aug 02 2013 01:53:36 +00:00 ..
+ !Flash: flash: 2 drwx 2048 Aug 02 2013 02:53:36 +00:00 ..
!Flash: flash: 3 drwx 4096 Mar 30 2012 18:16:28 +00:00
TRACE_LOG_DIR
!Flash: flash: 4 drwx 4096 Mar 30 2012 18:16:28 +00:00
CORE_DUMP_DIR
!Flash: flash: 5 d--- 4096 Mar 30 2012 18:16:28 +00:00
ADMIN_DIR
!Flash: flash: 6 drwx 4096 Jul 31 2013 11:55:02 +00:00
CONFIG_TEMPLATE
--------------------
===================================================================
retrieving revision 1.42
diff -u -4 -r1.42 192.168.124.199
@@ -27,9 +27,9 @@
!Boot Variables: BOOT INTERFACE GATEWAY IP ADDRESS = 0.0.0.0
!Boot Variables: Reload Mode = normal-reload
!
!Flash: flash: 1 drwx 4096 Jan 01 1980 00:00:00 +00:00 .
- !Flash: flash: 2 drwx 2048 Aug 02 2013 02:53:36 +00:00 ..
+ !Flash: flash: 2 drwx 2048 Aug 02 2013 03:53:36 +00:00 ..
!Flash: flash: 3 drwx 4096 Mar 30 2012 18:16:28 +00:00
TRACE_LOG_DIR
!Flash: flash: 4 drwx 4096 Mar 30 2012 18:16:28 +00:00
CORE_DUMP_DIR
!Flash: flash: 5 d--- 4096 Mar 30 2012 18:16:28 +00:00
ADMIN_DIR
!Flash: flash: 6 drwx 4096 Jul 31 2013 11:55:02 +00:00
CONFIG_TEMPLATE

Try

Index: bin/f10rancid.in
===================================================================
--- bin/f10rancid.in (revision 2719)
+++ bin/f10rancid.in (working copy)
@@ -336,6 +336,8 @@
return(1) if /(Open device \S+ failed|Error opening \S+:)/;

/Directory of/ && next;
+ # . & ..
+ / \.{1,2}$/ && next;

# clean up totals line
if (/.* (\d+) bytes total/) {
Index: CHANGES
===================================================================
--- CHANGES (revision 2719)
+++ CHANGES (working copy)
@@ -1,4 +1,6 @@
3.0a3
+ f10rancid: skip . & ..
+
*login: change -c handling of ;'s for escaping like \;

rancid.conf: add MAILSPLIT to split large diff mail by kilobytes

Thomas Vachon

2013-08-01 13:52:27 UTC

Permalink

No better. Still happens on ever rancid-run. I tried moving it to a
non-terminating regex and adding a \n with no luck. IT seems to trip up on
the date. Here is the exact output of dir flash:

Directory of flash:

1 drwx 4096 Jan 01 1980 00:00:00 +00:00 .
2 drwx 2048 Aug 02 2013 05:36:24 +00:00 ..
3 drwx 4096 Mar 30 2012 18:16:28 +00:00 TRACE_LOG_DIR
4 drwx 4096 Mar 30 2012 18:16:28 +00:00 CORE_DUMP_DIR
5 d--- 4096 Mar 30 2012 18:16:28 +00:00 ADMIN_DIR
6 drwx 4096 Jul 31 2013 11:55:02 +00:00 CONFIG_TEMPLATE
7 -rwx 16712 Jul 31 2013 11:53:56 +00:00 startup-config
8 drwx 4096 Jul 31 2012 09:38:16 +00:00 RUNTIME_PATCH_DIR
9 -rwx 16351 Jun 19 2013 10:26:30 +00:00 startup-config.bak

Looking at dir flash:/.. it is actually the / mount of the FTOS OS, which
is getting modified by a log entry for the login as far as I can tell.

--
Thomas Vachon
Principal Operations Architect
*session M*
+1-617-963-8993 x7104

Post by heasley

Post by Thomas Vachon
It seems in Force10 FTOS9 the mod time on ".." on the flash changes

every

Post by Thomas Vachon
time a login happens. So everytime RANCID logs in, it triggers an alert.
Has anyone else seen this and stopped it from triggering? Just to note,

Post by Thomas Vachon
am not seeing this on the FTOS 8 switches (S55) only the FTOS 9 right

after

Post by Thomas Vachon
upgrade (S4810P stacked). Below is a few examples.
===================================================================
retrieving revision 1.41
diff -u -4 -r1.41 192.168.124.199
!Boot Variables: BOOT INTERFACE GATEWAY IP ADDRESS = 0.0.0.0
!Boot Variables: Reload Mode = normal-reload
!
!Flash: flash: 1 drwx 4096 Jan 01 1980 00:00:00 +00:00 .
- !Flash: flash: 2 drwx 2048 Aug 02 2013 01:53:36 +00:00 ..
+ !Flash: flash: 2 drwx 2048 Aug 02 2013 02:53:36 +00:00 ..
!Flash: flash: 3 drwx 4096 Mar 30 2012 18:16:28 +00:00
TRACE_LOG_DIR
!Flash: flash: 4 drwx 4096 Mar 30 2012 18:16:28 +00:00
CORE_DUMP_DIR
!Flash: flash: 5 d--- 4096 Mar 30 2012 18:16:28 +00:00
ADMIN_DIR
!Flash: flash: 6 drwx 4096 Jul 31 2013 11:55:02 +00:00
CONFIG_TEMPLATE
--------------------
===================================================================
retrieving revision 1.42
diff -u -4 -r1.42 192.168.124.199
@@ -27,9 +27,9 @@
!Boot Variables: BOOT INTERFACE GATEWAY IP ADDRESS = 0.0.0.0
!Boot Variables: Reload Mode = normal-reload
!
!Flash: flash: 1 drwx 4096 Jan 01 1980 00:00:00 +00:00 .
- !Flash: flash: 2 drwx 2048 Aug 02 2013 02:53:36 +00:00 ..
+ !Flash: flash: 2 drwx 2048 Aug 02 2013 03:53:36 +00:00 ..
!Flash: flash: 3 drwx 4096 Mar 30 2012 18:16:28 +00:00
TRACE_LOG_DIR
!Flash: flash: 4 drwx 4096 Mar 30 2012 18:16:28 +00:00
CORE_DUMP_DIR
!Flash: flash: 5 d--- 4096 Mar 30 2012 18:16:28 +00:00
ADMIN_DIR
!Flash: flash: 6 drwx 4096 Jul 31 2013 11:55:02 +00:00
CONFIG_TEMPLATE

Try
Index: bin/f10rancid.in
===================================================================
--- bin/f10rancid.in (revision 2719)
+++ bin/f10rancid.in (working copy)
@@ -336,6 +336,8 @@
return(1) if /(Open device \S+ failed|Error opening \S+:)/;
/Directory of/ && next;
+ # . & ..
+ / \.{1,2}$/ && next;
# clean up totals line
if (/.* (\d+) bytes total/) {
Index: CHANGES
===================================================================
--- CHANGES (revision 2719)
+++ CHANGES (working copy)
@@ -1,4 +1,6 @@
3.0a3
+ f10rancid: skip . & ..
+
*login: change -c handling of ;'s for escaping like \;
rancid.conf: add MAILSPLIT to split large diff mail by kilobytes

Hughes, Doug

2013-08-01 15:05:56 UTC

Permalink

Try this..
Edit f10rancid
Go to sub ShowFlash

If you want to just remove the '..' directory that is triggering:
Right after one of the two 'next if' lines, add another:
next if (/\.\.$/);

Or if you want to remove all drwx directories (they don't add much value. We mostly care about the files)
next if (/drwx/);

From: rancid-discuss-***@shrubbery.net [mailto:rancid-discuss-***@shrubbery.net] On Behalf Of Thomas Vachon
Sent: Thursday, August 01, 2013 9:52 AM
To: heasley
Cc: rancid-***@shrubbery.net
Subject: Re: [rancid] Force10 FTOS 9 keeps triggering alerts due to flash mod time changing

No better. Still happens on ever rancid-run. I tried moving it to a non-terminating regex and adding a \n with no luck. IT seems to trip up on the date. Here is the exact output of dir flash:

Directory of flash:

1 drwx 4096 Jan 01 1980 00:00:00 +00:00 .
2 drwx 2048 Aug 02 2013 05:36:24 +00:00 ..
3 drwx 4096 Mar 30 2012 18:16:28 +00:00 TRACE_LOG_DIR
4 drwx 4096 Mar 30 2012 18:16:28 +00:00 CORE_DUMP_DIR
5 d--- 4096 Mar 30 2012 18:16:28 +00:00 ADMIN_DIR
6 drwx 4096 Jul 31 2013 11:55:02 +00:00 CONFIG_TEMPLATE
7 -rwx 16712 Jul 31 2013 11:53:56 +00:00 startup-config
8 drwx 4096 Jul 31 2012 09:38:16 +00:00 RUNTIME_PATCH_DIR
9 -rwx 16351 Jun 19 2013 10:26:30 +00:00 startup-config.bak

Looking at dir flash:/.. it is actually the / mount of the FTOS OS, which is getting modified by a log entry for the login as far as I can tell.

--
Thomas Vachon
Principal Operations Architect
session M
+1-617-963-8993 x7104

Try

Index: bin/f10rancid.in<http://f10rancid.in>
===================================================================
--- bin/f10rancid.in<http://f10rancid.in> (revision 2719)
+++ bin/f10rancid.in<http://f10rancid.in> (working copy)
@@ -336,6 +336,8 @@
return(1) if /(Open device \S+ failed|Error opening \S+:)/;

/Directory of/ && next;
+ # . & ..
+ / \.{1,2}$/ && next;

# clean up totals line
if (/.* (\d+) bytes total/) {
Index: CHANGES
===================================================================
--- CHANGES (revision 2719)
+++ CHANGES (working copy)
@@ -1,4 +1,6 @@
3.0a3
+ f10rancid: skip . & ..
+
*login: change -c handling of ;'s for escaping like \;

rancid.conf: add MAILSPLIT to split large diff mail by kilobytes

Hughes, Doug

2013-08-01 14:52:33 UTC

Permalink

I don't have FTOS9 yet, so I haven't seen it. Heasley's patch seems reasonable. I'd probably just make it skip lines in the Flash callback routine that match drwx

From: rancid-discuss-***@shrubbery.net [mailto:rancid-discuss-***@shrubbery.net] On Behalf Of Thomas Vachon
Sent: Thursday, August 01, 2013 8:39 AM
To: rancid-***@shrubbery.net
Subject: [rancid] Force10 FTOS 9 keeps triggering alerts due to flash mod time changing

It seems in Force10 FTOS9 the mod time on ".." on the flash changes every time a login happens. So everytime RANCID logs in, it triggers an alert. Has anyone else seen this and stopped it from triggering? Just to note, I am not seeing this on the FTOS 8 switches (S55) only the FTOS 9 right after upgrade (S4810P stacked). Below is a few examples.

===================================================================
retrieving revision 1.41
diff -u -4 -r1.41 192.168.124.199
!Boot Variables: BOOT INTERFACE GATEWAY IP ADDRESS = 0.0.0.0
!Boot Variables: Reload Mode = normal-reload
!
!Flash: flash: 1 drwx 4096 Jan 01 1980 00:00:00 +00:00 .
- !Flash: flash: 2 drwx 2048 Aug 02 2013 01:53:36 +00:00 ..
+ !Flash: flash: 2 drwx 2048 Aug 02 2013 02:53:36 +00:00 ..
[Loading Image...

]

!Flash: flash: 3 drwx 4096 Mar 30 2012 18:16:28 +00:00 TRACE_LOG_DIR
!Flash: flash: 4 drwx 4096 Mar 30 2012 18:16:28 +00:00 CORE_DUMP_DIR
!Flash: flash: 5 d--- 4096 Mar 30 2012 18:16:28 +00:00 ADMIN_DIR
!Flash: flash: 6 drwx 4096 Jul 31 2013 11:55:02 +00:00 CONFIG_TEMPLATE

--------------------

===================================================================
retrieving revision 1.42
diff -u -4 -r1.42 192.168.124.199
@@ -27,9 +27,9 @@
!Boot Variables: BOOT INTERFACE GATEWAY IP ADDRESS = 0.0.0.0
!Boot Variables: Reload Mode = normal-reload
!
!Flash: flash: 1 drwx 4096 Jan 01 1980 00:00:00 +00:00 .
- !Flash: flash: 2 drwx 2048 Aug 02 2013 02:53:36 +00:00 ..
+ !Flash: flash: 2 drwx 2048 Aug 02 2013 03:53:36 +00:00 ..
[https://mail.google.com/mail/u/0/images/cleardot.gif]

!Flash: flash: 3 drwx 4096 Mar 30 2012 18:16:28 +00:00 TRACE_LOG_DIR
!Flash: flash: 4 drwx 4096 Mar 30 2012 18:16:28 +00:00 CORE_DUMP_DIR
!Flash: flash: 5 d--- 4096 Mar 30 2012 18:16:28 +00:00 ADMIN_DIR
!Flash: flash: 6 drwx 4096 Jul 31 2013 11:55:02 +00:00 CONFIG_TEMPLATE

--
Thomas Vachon
Principal Operations Architect
session M
***@sessionm.com<mailto:***@sessionm.com>