[rancid] F5 BIG-IP issue

[Shaun Krok]

Hi Heasley

We have found a new issue where rancid is unable to collect changes from one of our F5 boxes in a QA environment.
The F5 appliance has just been upgraded to 13.0 of BIG-IP + ASM module
All was fine with the upgrade and rancid
A few days later a new beta product of F5 was installed on the box called AVR (not sure what is does but think it has something to do with IP blocking)

The problem is now when I run : export NOPIPE=YES && ./f5rancid -d il-f5-pri IL &
I have 2 files created :
1. il-f5-pri.new
2. il-f5-pri.raw

The f5rancid script stops with the following message: Error: TIMEOUT reached and when looking to the .RAW file I see where it stops but do not know how to fix it.
I know it is part of ShowLicence !!
On many of our other sites we have ASM and LTM working fine with Rancid.
This QA box has the following option module installed and this is where I can see it breaking !

Any help would be much appreciated !

I have tried to use the lates f5rancid file from version 3.6.2 and it also times out in the same place.

If you require can arrange access so you can debug a living box !

Rancid version we are running rancid 3.2.99 is fairly old but very stable !

Thank you

Shaun



Below is a section Time Limited Modules :
################
Time Limited Modules
IPI Subscription, 1Yr, 1600|HDJUFUK-LATUGAQ|20170729|20180730|SUBSCRIPTION
#########


###########################################################################################
Sys::License
Licensed Version 11.2.1
Registration key BDRZF-OIOWS-GOXXE-UPZYR-KUQNSUW
Licensed On 2014/02/02
Service Check Date 2017/07/29
Platform ID C112
Appliance Serial Number f5-zjxo-xvwn

Active Modules
ASM, Unlimited (FCUIUEO-IXFFTED)
LTM, Base, 2000S (IOJQRSN-NOZEOWZ)
Application Acceleration Manager, Core
IPV6 Gateway
Rate Shaping
Ram Cache
Anti-Virus Checks
Base Endpoint Security Checks
Firewall Checks
Network Access
Secure Virtual Keyboard
APM, Web Application
Machine Certificate Checks
Protected Workspace
Remote Desktop
App Tunnel
ASM, Unlimited
SSL, 2000S

Time Limited Modules
IPI Subscription, 1Yr, 1600|HDJUFUK-LATUGAQ|20170729|20180730|SUBSCRIPTION
Error: TIMEOUT reached

###################################################################################


Shaun Krok
Network Team

Herzliya Business Park
Herzliya Pituach 46140
Israel

Telephone: [phone]
Mobile: [phone]
email:***@888holdings.com







This email message and its attachments are for the sole use of the intended recipient(s) and may not be shared with any other party. They may contain confidential information of 888 Holdings plc or its direct and indirect subsidiaries (together, the “888 Group”) and are to be regarded as confidential information under any non-disclosure agreement. Any review, use, disclosure or distribution by persons or entities other than the intended recipient(s) is prohibited. Nothing in this message is capable of or intended to create any legally binding obligation. The 888 Group will only ever assume a legally binding obligation where recorded in a written agreement duly executed by the authorized signatories of the relevant 888 Group company. The 888 Group accepts no liability for any personal views expressed in this message. If you are not the intended recipient, please contact the sender by return and destroy all copies of the original message and its attachments. Thank you

[heasley]

Post by Shaun Krok
Rancid version we are running rancid 3.2.99 is fairly old but very stable !

3.2.99 i think would be just f5rancid/device type f5; is therefore the
command cat /config/bigip.license? I though perhaps it was just being
slow or hanging, but seems unlikely with cat. so, i suspect you have
modified the base rancid; how so?
Actually, rancid.types.base shows that “bigip” as being for F5 versions 11+ and “f5” being used for versions <=10. So, he is using the correct type in this case. I’m about to consider 13, so it would be good to know about.

he wrote 3.2.99 and i think that bigip didnt appear until 3.5.

[Gauthier, Chris]

Chris GauthierSenior Network Engineer | comScore, Inc.
o +1 503-331-***@comscore.com
317 SW Alder St, Suite 500 | Portland | OR97204
............................................................................................................................................................................................................................

Post by Shaun Krok
Rancid version we are running rancid 3.2.99 is fairly old but very stable !

3.2.99 i think would be just f5rancid/device type f5; is therefore the
command cat /config/bigip.license? I though perhaps it was just being
slow or hanging, but seems unlikely with cat. so, i suspect you have
modified the base rancid; how so?
Actually, rancid.types.base shows that “bigip” as being for F5 versions 11+ and “f5” being used for versions <=10. So, he is using the correct type in this case. I’m about to consider 13, so it would be good to know about.

he wrote 3.2.99 and i think that bigip didnt appear until 3.5.

-=-=-=-=-
Ooops. This is called “foot in mouth” syndrome. ;) My brain totally forgot it was an earlier version.