[rancid] cisco syslog diff

Discussion:

[rancid] cisco syslog diff

Smirnoff Alexander

2008-08-19 09:42:27 UTC

Hello!

How I can disable alerts on changing like this:

Index: configs/172.17.200.64

===================================================================

retrieving revision 1.12

diff -U 4 -r1.12 172.17.200.64

@@ -41,10 +41,10 @@

!Flash: 7 drwx 4032 Feb 02 2005 05:17:01 +03:00 html

!Flash: 21 -rwx 109 Feb 02 2005 05:09:06 +03:00 info

!Flash: 22 -rwx 109 Feb 02 2005 05:18:09 +03:00 info.ver

!Flash: 362 -rwx 6269 Aug 18 2008 10:50:57 +04:00 config.text

- !Flash: 363 -rwx 662228 Aug 19 2008 10:04:07 +04:00 syslog

- !Flash: 7741440 bytes total (2416640 bytes free)

+ !Flash: 363 -rwx 662626 Aug 19 2008 11:48:59 +04:00 syslog

+ !Flash: 7741440 bytes total (2416128 bytes free)

!

!Flash: nvram: Directory of nvram:/

!Flash: nvram: 26 -rw- 6269 <no date> startup-config

!Flash: nvram: 27 ---- 26 <no date> private-config

When only syslog file size change?

--
Regards,
Alexandr Smirnov

Lance Vermilion

2008-08-19 20:11:01 UTC

remove that command from what is checked in the rancid file under <rancid
home>/bin/

Post by Smirnoff Alexander
Hello!
Index: configs/172.17.200.64
===================================================================
retrieving revision 1.12
diff -U 4 -r1.12 172.17.200.64
@@ -41,10 +41,10 @@
!Flash: 7 drwx 4032 Feb 02 2005 05:17:01 +03:00 html
!Flash: 21 -rwx 109 Feb 02 2005 05:09:06 +03:00 info
!Flash: 22 -rwx 109 Feb 02 2005 05:18:09 +03:00 info.ver
!Flash: 362 -rwx 6269 Aug 18 2008 10:50:57 +04:00 config.text
- !Flash: 363 -rwx 662228 Aug 19 2008 10:04:07 +04:00 syslog
- !Flash: 7741440 bytes total (2416640 bytes free)
+ !Flash: 363 -rwx 662626 Aug 19 2008 11:48:59 +04:00 syslog
+ !Flash: 7741440 bytes total (2416128 bytes free)
!
!Flash: nvram: Directory of nvram:/
!Flash: nvram: 26 -rw- 6269 <no date>
startup-config
!Flash: nvram: 27 ---- 26 <no date>
private-config
When only syslog file size change?
--
Regards,
Alexandr Smirnov
_______________________________________________
Rancid-discuss mailing list
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

Lance Vermilion

2008-08-21 18:12:46 UTC

the other option is to write some custom pieces to not include or modify the
command for dir to exclude things you don't want to include.

dir | e syslog

something like that. You may have to escape the |, you will need to mess
with it a little.

If I remove this command (dir) I lost other important changer , like ios
change. I mean about more intellectual rancid acknowledges behavior , then
minor changes like syslog grow not cause email's.
------------------------------
Vermilion
*Sent:* Wednesday, August 20, 2008 12:11 AM
*To:* Smirnoff Alexander
*Subject:* Re: [rancid] cisco syslog diff
remove that command from what is checked in the rancid file under <rancid
home>/bin/
Hello!
Index: configs/172.17.200.64
===================================================================
retrieving revision 1.12
diff -U 4 -r1.12 172.17.200.64
@@ -41,10 +41,10 @@
!Flash: 7 drwx 4032 Feb 02 2005 05:17:01 +03:00 html
!Flash: 21 -rwx 109 Feb 02 2005 05:09:06 +03:00 info
!Flash: 22 -rwx 109 Feb 02 2005 05:18:09 +03:00 info.ver
!Flash: 362 -rwx 6269 Aug 18 2008 10:50:57 +04:00 config.text
- !Flash: 363 -rwx 662228 Aug 19 2008 10:04:07 +04:00 syslog
- !Flash: 7741440 bytes total (2416640 bytes free)
+ !Flash: 363 -rwx 662626 Aug 19 2008 11:48:59 +04:00 syslog
+ !Flash: 7741440 bytes total (2416128 bytes free)
!
!Flash: nvram: Directory of nvram:/
!Flash: nvram: 26 -rw- 6269 <no date>
startup-config
!Flash: nvram: 27 ---- 26 <no date>
private-config
When only syslog file size change?
--
Regards,
Alexandr Smirnov
_______________________________________________
Rancid-discuss mailing list
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

Lance Vermilion

2008-08-21 20:30:55 UTC

Thx Daniel. I haven't had time to look at the code to provide stuff like
that.

Post by Lance Vermilion
the other option is to write some custom pieces to not include or modify

the

Post by Lance Vermilion
command for dir to exclude things you don't want to include.
dir | e syslog
something like that. You may have to escape the |, you will need to mess
with it a little.

And you'd have to remember to skip over the "bytes total" / "bytes free"
which
will also be changing.
ShowFlash() and DirSlotN() in rancid might be the right places to do this,
next if /\s+syslog$/; # syslog file size keeps changing
next if /bytes total/; # ...which makes the total usage change
or something smarter, if you want to see that the file is present, but
don't
care about the updated filesize and timestamp.
--
Dan

Daniel Medina

2008-08-21 20:31:23 UTC

Post by Lance Vermilion
the other option is to write some custom pieces to not include or modify the
command for dir to exclude things you don't want to include.
dir | e syslog
something like that. You may have to escape the |, you will need to mess
with it a little.

And you'd have to remember to skip over the "bytes total" / "bytes free" which
will also be changing.

ShowFlash() and DirSlotN() in rancid might be the right places to do this,
updating the INPUT loop, ex:

next if /\s+syslog$/; # syslog file size keeps changing
next if /bytes total/; # ...which makes the total usage change

or something smarter, if you want to see that the file is present, but don't
care about the updated filesize and timestamp.

--
Dan

Smirnoff Alexander

2008-08-25 09:30:28 UTC

I do following changes in bin/rancid:

# This routine parses "show flash"
sub ShowFlash {
# skip if this is 7000, 7200, 7500, or 12000; else we end up with
# redundant data from dir /all slot0:
print STDERR " In ShowFlash: $_" if ($debug);

while (<INPUT>) {
tr/\015//d;
last if (/^$prompt/);
next if (/^(\s*|\s*$cmd\s*)$/);

Post by Lance Vermilion

next if /\s+syslog$/; # syslog file size keeps changing
next if /bytes total/; # ...which makes the total usage change

return(1) if ($type =~ /^(12[40]|7)/);
return(1) if /^\s*\^\s*$/;
return(1) if /Line has invalid autocommand /;
return(1) if /(Invalid input detected|Type help or )/;
return(-1) if (/command authorization failed/i);
# the pager can not be disabled per-session on the PIX
if (/^(<-+ More -+>)/) {
my($len) = length($1);
s/^$1\s{$len}//;
}

/\s+(multiple-fs|nv_hdr|vlan\.dat)$/ && next;
ProcessHistory("FLASH","","","!Flash: $_");
}
ProcessHistory("","","","!\n");
return;
}

# This routine parses "dir /all ((disk|slot)N|bootflash|nvram):"
sub DirSlotN {
# Skip if this is not a 3600, 7000, 7200, 7500, or 12000.
print STDERR " In DirSlotN: $_" if ($debug);

my($dev) = (/\s([^\s]+):/);

while (<INPUT>) {
tr/\015//d;
last if (/^$prompt/);
next if (/^(\s*|\s*$cmd\s*)$/);

Post by Lance Vermilion

next if /\s+syslog$/; # syslog file size keeps changing
next if /bytes total/; # ...which makes the total usage change

# return(1) if ($type !~ /^(12[40]|7|36)/);
return(1) if /^\s*\^\s*$/;
return(1) if /Line has invalid autocommand /;
return(1) if /(Invalid input detected|Type help or )/;
return(1) if /(No such device|Error Sending Request)/i;
return(1) if /\%Error: No such file or directory/;
return(1) if /No space information available/;
return(-1) if /\%Error calling/;
return(-1) if /(: device being squeezed|ATA_Status time out)/i; # busy
return(-1) if (/command authorization failed/i);
return(1) if /(Open device \S+ failed|Error opening \S+:)/;
# the pager can not be disabled per-session on the PIX
if (/^(<-+ More -+>)/) {
my($len) = length($1);
s/^$1\s{$len}//;
}

ProcessHistory("FLASH","","","!Flash: $dev: $_");
}
ProcessHistory("","","","!\n");
return(0);
}

And after Rancid send me messages like this, after every rancid run:

Index: configs/10.4.1.2
===================================================================
retrieving revision 1.3
diff -U 4 -r1.3 10.4.1.2
@@ -38,14 +38,12 @@
!Flash: Directory of flash:/
!Flash: 2 -rwx 2774747 Mar 01 1993 00:09:10 c2950-i6q4l2-mz.121-12c.EA1.bin
!Flash: 3 -rwx 47 Oct 16 2007 11:26:05 private-сonfig.text
!Flash: 5 -rwx 5645 Oct 16 2007 11:26:05 config.text
- !Flash: 7741440 bytes total (4957184 bytes free)
!
!Flash: nvram: Directory of nvram:/
!Flash: nvram: 1 -rw- 5645 <no date> startup-config
!Flash: nvram: 2 ---- 47 <no date> private-config
- !Flash: nvram: 32768 bytes total (27123 bytes free)
!
!VTP: VTP Version : 2
!VTP: Configuration Revision : 23
!VTP: Maximum VLANs supported locally : 64

With only "-" of bytes total in Flash.

-----Original Message-----
From: Daniel Medina [mailto:***@gmail.com]
Sent: Friday, August 22, 2008 12:31 AM
To: Lance Vermilion
Cc: Smirnoff Alexander; rancid-***@shrubbery.net
Subject: Re: [rancid] Re: cisco syslog diff

Post by Lance Vermilion
the other option is to write some custom pieces to not include or modify the
command for dir to exclude things you don't want to include.
dir | e syslog
something like that. You may have to escape the |, you will need to mess
with it a little.

And you'd have to remember to skip over the "bytes total" / "bytes free" which
will also be changing.

ShowFlash() and DirSlotN() in rancid might be the right places to do this,
updating the INPUT loop, ex:

next if /\s+syslog$/; # syslog file size keeps changing
next if /bytes total/; # ...which makes the total usage change

or something smarter, if you want to see that the file is present, but don't
care about the updated filesize and timestamp.

--
Dan

Smirnoff Alexander

2009-08-11 06:36:57 UTC

dir | e syslog - it is very simple way, but I need more ;)

how I can just disable all lines like '!Flash: ' from mail diff output ,
but this lines can be stored in CVS config changes?

________________________________

From: ***@gheek.net [mailto:***@gheek.net] On Behalf Of Lance
Vermilion
Sent: Thursday, August 21, 2008 10:13 PM
To: Smirnoff Alexander
Cc: rancid-***@shrubbery.net
Subject: Re: [rancid] cisco syslog diff

the other option is to write some custom pieces to not include or modify
the command for dir to exclude things you don't want to include.

dir | e syslog

something like that. You may have to escape the |, you will need to mess
with it a little.

On Wed, Aug 20, 2008 at 11:19 PM, Smirnoff Alexander
<***@gldn.net> wrote:

If I remove this command (dir) I lost other important changer , like ios
change. I mean about more intellectual rancid acknowledges behavior ,
then minor changes like syslog grow not cause email's.

________________________________

From: ***@gheek.net [mailto:***@gheek.net] On Behalf Of Lance
Vermilion
Sent: Wednesday, August 20, 2008 12:11 AM
To: Smirnoff Alexander
Cc: rancid-***@shrubbery.net
Subject: Re: [rancid] cisco syslog diff

remove that command from what is checked in the rancid file under
<rancid home>/bin/

2008/8/19 Smirnoff Alexander <***@gldn.net>

Hello!

How I can disable alerts on changing like this:

Index: configs/172.17.200.64

===================================================================

retrieving revision 1.12

diff -U 4 -r1.12 172.17.200.64

@@ -41,10 +41,10 @@

!Flash: 7 drwx 4032 Feb 02 2005 05:17:01 +03:00 html

!Flash: 21 -rwx 109 Feb 02 2005 05:09:06 +03:00 info

!Flash: 22 -rwx 109 Feb 02 2005 05:18:09 +03:00 info.ver

!Flash: 362 -rwx 6269 Aug 18 2008 10:50:57 +04:00
config.text

- !Flash: 363 -rwx 662228 Aug 19 2008 10:04:07 +04:00 syslog

- !Flash: 7741440 bytes total (2416640 bytes free)

+ !Flash: 363 -rwx 662626 Aug 19 2008 11:48:59 +04:00 syslog

+ !Flash: 7741440 bytes total (2416128 bytes free)

!

!Flash: nvram: Directory of nvram:/

!Flash: nvram: 26 -rw- 6269 <no date>
startup-config

!Flash: nvram: 27 ---- 26 <no date>
private-config

When only syslog file size change?

--
Regards,
Alexandr Smirnov

Lance Vermilion

2009-08-11 20:34:20 UTC

You will need to look for the sub routine that has Flash in it. Do a search
for that in the appropriate rancid file.

-Lance

On Mon, Aug 10, 2009 at 11:36 PM, Smirnoff Alexander <

dir | e syslog it is very simple way, but I need more ;)
how I can just disable all lines like !Flash: from mail diff output ,
but this lines can be stored in CVS config changes?
------------------------------
Vermilion
*Sent:* Thursday, August 21, 2008 10:13 PM
*To:* Smirnoff Alexander
*Subject:* Re: [rancid] cisco syslog diff
the other option is to write some custom pieces to not include or modify
the command for dir to exclude things you don't want to include.
dir | e syslog
something like that. You may have to escape the |, you will need to mess
with it a little.
If I remove this command (dir) I lost other important changer , like ios
change. I mean about more intellectual rancid acknowledges behavior , then
minor changes like syslog grow not cause email's.
------------------------------
Vermilion
*Sent:* Wednesday, August 20, 2008 12:11 AM
*To:* Smirnoff Alexander
*Subject:* Re: [rancid] cisco syslog diff
remove that command from what is checked in the rancid file under <rancid
home>/bin/
Hello!
Index: configs/172.17.200.64
===================================================================
retrieving revision 1.12
diff -U 4 -r1.12 172.17.200.64
@@ -41,10 +41,10 @@
!Flash: 7 drwx 4032 Feb 02 2005 05:17:01 +03:00 html
!Flash: 21 -rwx 109 Feb 02 2005 05:09:06 +03:00 info
!Flash: 22 -rwx 109 Feb 02 2005 05:18:09 +03:00 info.ver
!Flash: 362 -rwx 6269 Aug 18 2008 10:50:57 +04:00 config.text
- !Flash: 363 -rwx 662228 Aug 19 2008 10:04:07 +04:00 syslog
- !Flash: 7741440 bytes total (2416640 bytes free)
+ !Flash: 363 -rwx 662626 Aug 19 2008 11:48:59 +04:00 syslog
+ !Flash: 7741440 bytes total (2416128 bytes free)
!
!Flash: nvram: Directory of nvram:/
!Flash: nvram: 26 -rw- 6269 <no date>
startup-config
!Flash: nvram: 27 ---- 26 <no date>
private-config
When only syslog file size change?
--
Regards,
Alexandr Smirnov
_______________________________________________
Rancid-discuss mailing list
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

Smirnoff Alexander

2009-08-12 09:00:38 UTC

Ok, I am just add | grep -v "Flash:" before >$TMP.diff in
control_rancid and waiting for results ;)

________________________________

From: ***@gheek.net [mailto:***@gheek.net] On Behalf Of Lance
Vermilion
Sent: Wednesday, August 12, 2009 12:34 AM
To: Smirnoff Alexander
Cc: rancid-***@shrubbery.net
Subject: Re: [rancid] cisco syslog diff

You will need to look for the sub routine that has Flash in it. Do a
search for that in the appropriate rancid file.

-Lance

On Mon, Aug 10, 2009 at 11:36 PM, Smirnoff Alexander
<***@office.beeline.ru> wrote:

dir | e syslog - it is very simple way, but I need more ;)

how I can just disable all lines like '!Flash: ' from mail diff output ,
but this lines can be stored in CVS config changes?

________________________________

From: ***@gheek.net [mailto:***@gheek.net] On Behalf Of Lance
Vermilion
Sent: Thursday, August 21, 2008 10:13 PM

To: Smirnoff Alexander
Cc: rancid-***@shrubbery.net
Subject: Re: [rancid] cisco syslog diff

the other option is to write some custom pieces to not include or modify
the command for dir to exclude things you don't want to include.

dir | e syslog

something like that. You may have to escape the |, you will need to mess
with it a little.

On Wed, Aug 20, 2008 at 11:19 PM, Smirnoff Alexander
<***@gldn.net> wrote:

If I remove this command (dir) I lost other important changer , like ios
change. I mean about more intellectual rancid acknowledges behavior ,
then minor changes like syslog grow not cause email's.

________________________________

From: ***@gheek.net [mailto:***@gheek.net] On Behalf Of Lance
Vermilion
Sent: Wednesday, August 20, 2008 12:11 AM
To: Smirnoff Alexander
Cc: rancid-***@shrubbery.net
Subject: Re: [rancid] cisco syslog diff

remove that command from what is checked in the rancid file under
<rancid home>/bin/

2008/8/19 Smirnoff Alexander <***@gldn.net>

Hello!

How I can disable alerts on changing like this:

Index: configs/172.17.200.64

===================================================================

retrieving revision 1.12

diff -U 4 -r1.12 172.17.200.64

@@ -41,10 +41,10 @@

!Flash: 7 drwx 4032 Feb 02 2005 05:17:01 +03:00 html

!Flash: 21 -rwx 109 Feb 02 2005 05:09:06 +03:00 info

!Flash: 22 -rwx 109 Feb 02 2005 05:18:09 +03:00 info.ver

!Flash: 362 -rwx 6269 Aug 18 2008 10:50:57 +04:00
config.text

- !Flash: 363 -rwx 662228 Aug 19 2008 10:04:07 +04:00 syslog

- !Flash: 7741440 bytes total (2416640 bytes free)

+ !Flash: 363 -rwx 662626 Aug 19 2008 11:48:59 +04:00 syslog

+ !Flash: 7741440 bytes total (2416128 bytes free)

!

!Flash: nvram: Directory of nvram:/

!Flash: nvram: 26 -rw- 6269 <no date>
startup-config

!Flash: nvram: 27 ---- 26 <no date>
private-config

When only syslog file size change?

--
Regards,
Alexandr Smirnov

Lance Vermilion

2009-08-12 18:48:00 UTC

That will just remove it from the Diff portion it will not remove it from
printing it. If you find the sub routine that processes the dir command you
will see there is a line that will say Flash:.
-Lance

On Wed, Aug 12, 2009 at 2:00 AM, Smirnoff Alexander <

Ok, I am just add | grep -v "Flash:" before >$TMP.diff in control_rancid
and waiting for results ;)
------------------------------
Vermilion
*Sent:* Wednesday, August 12, 2009 12:34 AM
*To:* Smirnoff Alexander
*Subject:* Re: [rancid] cisco syslog diff
You will need to look for the sub routine that has Flash in it. Do a search
for that in the appropriate rancid file.
-Lance
On Mon, Aug 10, 2009 at 11:36 PM, Smirnoff Alexander <
dir | e syslog it is very simple way, but I need more ;)
how I can just disable all lines like !Flash: from mail diff output ,
but this lines can be stored in CVS config changes?
------------------------------
Vermilion
*Sent:* Thursday, August 21, 2008 10:13 PM
*To:* Smirnoff Alexander
*Subject:* Re: [rancid] cisco syslog diff
the other option is to write some custom pieces to not include or modify
the command for dir to exclude things you don't want to include.
dir | e syslog
something like that. You may have to escape the |, you will need to mess
with it a little.
If I remove this command (dir) I lost other important changer , like ios
change. I mean about more intellectual rancid acknowledges behavior , then
minor changes like syslog grow not cause email's.
------------------------------
Vermilion
*Sent:* Wednesday, August 20, 2008 12:11 AM
*To:* Smirnoff Alexander
*Subject:* Re: [rancid] cisco syslog diff
remove that command from what is checked in the rancid file under <rancid
home>/bin/
Hello!
Index: configs/172.17.200.64
===================================================================
retrieving revision 1.12
diff -U 4 -r1.12 172.17.200.64
@@ -41,10 +41,10 @@
!Flash: 7 drwx 4032 Feb 02 2005 05:17:01 +03:00 html
!Flash: 21 -rwx 109 Feb 02 2005 05:09:06 +03:00 info
!Flash: 22 -rwx 109 Feb 02 2005 05:18:09 +03:00 info.ver
!Flash: 362 -rwx 6269 Aug 18 2008 10:50:57 +04:00 config.text
- !Flash: 363 -rwx 662228 Aug 19 2008 10:04:07 +04:00 syslog
- !Flash: 7741440 bytes total (2416640 bytes free)
+ !Flash: 363 -rwx 662626 Aug 19 2008 11:48:59 +04:00 syslog
+ !Flash: 7741440 bytes total (2416128 bytes free)
!
!Flash: nvram: Directory of nvram:/
!Flash: nvram: 26 -rw- 6269 <no date>
startup-config
!Flash: nvram: 27 ---- 26 <no date>
private-config
When only syslog file size change?
--
Regards,
Alexandr Smirnov
_______________________________________________
Rancid-discuss mailing list
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

Traiano Welcome

2009-08-18 16:12:02 UTC

Hi

I have the same problem, after an IOS upgrade on a 7609 router,
resulting in annoying 5-minutely diff mails, so I made the following
adjustment to the ShowLash() subroutine in bin/rancid:

---
while (<INPUT>) {
tr/\015//d;
last if (/^$prompt/);
----> last if (/Flash/);
next if (/^(\s*|\s*$cmd\s*)$/);
return(1) if ($type =~ /^(12[40]|7)/);
return(-1) if (/command authorization failed/i);
return(1) if /^\s*\^\s*$/;
return(1) if /(Invalid input detected|Type help or )/;
# the pager can not be disabled per-session on the PIX
s/^<-+ More -+>\s*//;
/\s+vlan\.dat$/ && next;
ProcessHistory("FLASH","","","!Flash: $_");
}
---

Is this the correct way to do this? Will this result in a loss of
information that I might need to determine IOS version changes between
upgrades?

Thanks,
Traiano

Post by Lance Vermilion
That will just remove it from the Diff portion it will not remove it
from printing it. If you find the sub routine that processes the dir
command you will see there is a line that will say Flash:.
-Lance
On Wed, Aug 12, 2009 at 2:00 AM, Smirnoff Alexander
Ok, I am just add | grep -v "Flash:" before >$TMP.diff in
control_rancid and waiting for results ;)
------------------------------------------------------------------------
Of *Lance Vermilion
*Sent:* Wednesday, August 12, 2009 12:34 AM
*To:* Smirnoff Alexander
*Subject:* Re: [rancid] cisco syslog diff
You will need to look for the sub routine that has Flash in it. Do
a search for that in the appropriate rancid file.
-Lance
On Mon, Aug 10, 2009 at 11:36 PM, Smirnoff Alexander
dir | e syslog – it is very simple way, but I need more ;)
how I can just disable all lines like ‘!Flash: ‘ from mail diff
output , but this lines can be stored in CVS config changes?
------------------------------------------------------------------------
Of *Lance Vermilion
*Sent:* Thursday, August 21, 2008 10:13 PM
*To:* Smirnoff Alexander
*Subject:* Re: [rancid] cisco syslog diff
the other option is to write some custom pieces to not include or
modify the command for dir to exclude things you don't want to
include.
dir | e syslog
something like that. You may have to escape the |, you will need
to mess with it a little.
On Wed, Aug 20, 2008 at 11:19 PM, Smirnoff Alexander
If I remove this command (dir) I lost other important changer ,
like ios change. I mean about more intellectual rancid
acknowledges behavior , then minor changes like syslog grow not
cause email's.
------------------------------------------------------------------------
Of *Lance Vermilion
*Sent:* Wednesday, August 20, 2008 12:11 AM
*To:* Smirnoff Alexander
*Subject:* Re: [rancid] cisco syslog diff
remove that command from what is checked in the rancid file under
<rancid home>/bin/
Hello!
Index: configs/172.17.200.64 <http://172.17.200.64>
===================================================================
retrieving revision 1.12
diff -U 4 -r1.12 172.17.200.64 <http://172.17.200.64>
@@ -41,10 +41,10 @@
!Flash: 7 drwx 4032 Feb 02 2005 05:17:01 +03:00 html
!Flash: 21 -rwx 109 Feb 02 2005 05:09:06 +03:00 info
!Flash: 22 -rwx 109 Feb 02 2005 05:18:09 +03:00 info.ver
!Flash: 362 -rwx 6269 Aug 18 2008 10:50:57 +04:00 config.text
- !Flash: 363 -rwx 662228 Aug 19 2008 10:04:07 +04:00 syslog
- !Flash: 7741440 bytes total (2416640 bytes free)
+ !Flash: 363 -rwx 662626 Aug 19 2008 11:48:59 +04:00 syslog
+ !Flash: 7741440 bytes total (2416128 bytes free)
!
!Flash: nvram: Directory of nvram:/
!Flash: nvram: 26 -rw- 6269 <no date> startup-config
!Flash: nvram: 27 ---- 26 <no date> private-config
When only syslog file size change?
--
Regards,
Alexandr Smirnov
_______________________________________________
Rancid-discuss mailing list
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
------------------------------------------------------------------------
_______________________________________________
Rancid-discuss mailing list
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

john heasley

2009-08-18 16:56:50 UTC

Post by Traiano Welcome
Hi
I have the same problem, after an IOS upgrade on a 7609 router,
resulting in annoying 5-minutely diff mails, so I made the following

isnt there some config knob that is causing the file to be created in
the first place?

Post by Traiano Welcome
---
while (<INPUT>) {
tr/\015//d;
last if (/^$prompt/);
----> last if (/Flash/);
next if (/^(\s*|\s*$cmd\s*)$/);
return(1) if ($type =~ /^(12[40]|7)/);
return(-1) if (/command authorization failed/i);
return(1) if /^\s*\^\s*$/;
return(1) if /(Invalid input detected|Type help or )/;
# the pager can not be disabled per-session on the PIX
s/^<-+ More -+>\s*//;
/\s+vlan\.dat$/ && next;
ProcessHistory("FLASH","","","!Flash: $_");
}
---
Is this the correct way to do this? Will this result in a loss of
information that I might need to determine IOS version changes between
upgrades?
Thanks,
Traiano

Post by Lance Vermilion
That will just remove it from the Diff portion it will not remove it
from printing it. If you find the sub routine that processes the dir
command you will see there is a line that will say Flash:.
-Lance
On Wed, Aug 12, 2009 at 2:00 AM, Smirnoff Alexander
Ok, I am just add | grep -v "Flash:" before >$TMP.diff in
control_rancid and waiting for results ;)
------------------------------------------------------------------------
Of *Lance Vermilion
*Sent:* Wednesday, August 12, 2009 12:34 AM
*To:* Smirnoff Alexander
*Subject:* Re: [rancid] cisco syslog diff
You will need to look for the sub routine that has Flash in it. Do
a search for that in the appropriate rancid file.
-Lance
On Mon, Aug 10, 2009 at 11:36 PM, Smirnoff Alexander
dir | e syslog ? it is very simple way, but I need more ;)
how I can just disable all lines like ?!Flash: ? from mail diff
output , but this lines can be stored in CVS config changes?
------------------------------------------------------------------------
Of *Lance Vermilion
*Sent:* Thursday, August 21, 2008 10:13 PM
*To:* Smirnoff Alexander
*Subject:* Re: [rancid] cisco syslog diff
the other option is to write some custom pieces to not include or
modify the command for dir to exclude things you don't want to
include.
dir | e syslog
something like that. You may have to escape the |, you will need
to mess with it a little.
On Wed, Aug 20, 2008 at 11:19 PM, Smirnoff Alexander
If I remove this command (dir) I lost other important changer ,
like ios change. I mean about more intellectual rancid
acknowledges behavior , then minor changes like syslog grow not
cause email's.
------------------------------------------------------------------------
Of *Lance Vermilion
*Sent:* Wednesday, August 20, 2008 12:11 AM
*To:* Smirnoff Alexander
*Subject:* Re: [rancid] cisco syslog diff
remove that command from what is checked in the rancid file under
<rancid home>/bin/
Hello!
Index: configs/172.17.200.64 <http://172.17.200.64>
===================================================================
retrieving revision 1.12
diff -U 4 -r1.12 172.17.200.64 <http://172.17.200.64>
@@ -41,10 +41,10 @@
!Flash: 7 drwx 4032 Feb 02 2005 05:17:01 +03:00 html
!Flash: 21 -rwx 109 Feb 02 2005 05:09:06 +03:00 info
!Flash: 22 -rwx 109 Feb 02 2005 05:18:09 +03:00 info.ver
!Flash: 362 -rwx 6269 Aug 18 2008 10:50:57 +04:00 config.text
- !Flash: 363 -rwx 662228 Aug 19 2008 10:04:07 +04:00 syslog
- !Flash: 7741440 bytes total (2416640 bytes free)
+ !Flash: 363 -rwx 662626 Aug 19 2008 11:48:59 +04:00 syslog
+ !Flash: 7741440 bytes total (2416128 bytes free)
!
!Flash: nvram: Directory of nvram:/
!Flash: nvram: 26 -rw- 6269 <no date> startup-config
!Flash: nvram: 27 ---- 26 <no date> private-config
When only syslog file size change?
--
Regards,
Alexandr Smirnov

Traiano Welcome

2009-08-24 10:22:23 UTC

Post by john heasley

Post by Traiano Welcome
Hi
I have the same problem, after an IOS upgrade on a 7609 router,
resulting in annoying 5-minutely diff mails, so I made the following

isnt there some config knob that is causing the file to be created in
the first place?

I've been trying to find out if this might be the case. My suspicion is
that this should be fixed on the cisco IOS, but I have not yet been able
to pinpoint the correct knob ...

Post by john heasley

Post by Traiano Welcome
---
while (<INPUT>) {
tr/\015//d;
last if (/^$prompt/);
----> last if (/Flash/);
next if (/^(\s*|\s*$cmd\s*)$/);
return(1) if ($type =~ /^(12[40]|7)/);
return(-1) if (/command authorization failed/i);
return(1) if /^\s*\^\s*$/;
return(1) if /(Invalid input detected|Type help or )/;
# the pager can not be disabled per-session on the PIX
s/^<-+ More -+>\s*//;
/\s+vlan\.dat$/ && next;
ProcessHistory("FLASH","","","!Flash: $_");
}
---
Is this the correct way to do this? Will this result in a loss of
information that I might need to determine IOS version changes between
upgrades?
Thanks,
Traiano

Post by Lance Vermilion
That will just remove it from the Diff portion it will not remove it
from printing it. If you find the sub routine that processes the dir
command you will see there is a line that will say Flash:.
-Lance
On Wed, Aug 12, 2009 at 2:00 AM, Smirnoff Alexander
Ok, I am just add | grep -v "Flash:" before >$TMP.diff in
control_rancid and waiting for results ;)
------------------------------------------------------------------------
Of *Lance Vermilion
*Sent:* Wednesday, August 12, 2009 12:34 AM
*To:* Smirnoff Alexander
*Subject:* Re: [rancid] cisco syslog diff
You will need to look for the sub routine that has Flash in it. Do
a search for that in the appropriate rancid file.
-Lance
On Mon, Aug 10, 2009 at 11:36 PM, Smirnoff Alexander
dir | e syslog ? it is very simple way, but I need more ;)
how I can just disable all lines like ?!Flash: ? from mail diff
output , but this lines can be stored in CVS config changes?
------------------------------------------------------------------------
Of *Lance Vermilion
*Sent:* Thursday, August 21, 2008 10:13 PM
*To:* Smirnoff Alexander
*Subject:* Re: [rancid] cisco syslog diff
the other option is to write some custom pieces to not include or
modify the command for dir to exclude things you don't want to
include.
dir | e syslog
something like that. You may have to escape the |, you will need
to mess with it a little.
On Wed, Aug 20, 2008 at 11:19 PM, Smirnoff Alexander
If I remove this command (dir) I lost other important changer ,
like ios change. I mean about more intellectual rancid
acknowledges behavior , then minor changes like syslog grow not
cause email's.
------------------------------------------------------------------------
Of *Lance Vermilion
*Sent:* Wednesday, August 20, 2008 12:11 AM
*To:* Smirnoff Alexander
*Subject:* Re: [rancid] cisco syslog diff
remove that command from what is checked in the rancid file under
<rancid home>/bin/
Hello!
Index: configs/172.17.200.64 <http://172.17.200.64>
===================================================================
retrieving revision 1.12
diff -U 4 -r1.12 172.17.200.64 <http://172.17.200.64>
@@ -41,10 +41,10 @@
!Flash: 7 drwx 4032 Feb 02 2005 05:17:01 +03:00 html
!Flash: 21 -rwx 109 Feb 02 2005 05:09:06 +03:00 info
!Flash: 22 -rwx 109 Feb 02 2005 05:18:09 +03:00 info.ver
!Flash: 362 -rwx 6269 Aug 18 2008 10:50:57 +04:00 config.text
- !Flash: 363 -rwx 662228 Aug 19 2008 10:04:07 +04:00 syslog
- !Flash: 7741440 bytes total (2416640 bytes free)
+ !Flash: 363 -rwx 662626 Aug 19 2008 11:48:59 +04:00 syslog
+ !Flash: 7741440 bytes total (2416128 bytes free)
!
!Flash: nvram: Directory of nvram:/
!Flash: nvram: 26 -rw- 6269 <no date> startup-config
!Flash: nvram: 27 ---- 26 <no date> private-config
When only syslog file size change?
--
Regards,
Alexandr Smirnov

Smirnoff Alexander

2008-08-21 06:19:18 UTC

If I remove this command (dir) I lost other important changer , like ios
change. I mean about more intellectual rancid acknowledges behavior ,
then minor changes like syslog grow not cause email's.

________________________________

From: ***@gheek.net [mailto:***@gheek.net] On Behalf Of Lance
Vermilion
Sent: Wednesday, August 20, 2008 12:11 AM
To: Smirnoff Alexander
Cc: rancid-***@shrubbery.net
Subject: Re: [rancid] cisco syslog diff

remove that command from what is checked in the rancid file under
<rancid home>/bin/

2008/8/19 Smirnoff Alexander <***@gldn.net>

Hello!

How I can disable alerts on changing like this:

Index: configs/172.17.200.64

===================================================================

retrieving revision 1.12

diff -U 4 -r1.12 172.17.200.64

@@ -41,10 +41,10 @@

!Flash: 7 drwx 4032 Feb 02 2005 05:17:01 +03:00 html

!Flash: 21 -rwx 109 Feb 02 2005 05:09:06 +03:00 info

!Flash: 22 -rwx 109 Feb 02 2005 05:18:09 +03:00 info.ver

!Flash: 362 -rwx 6269 Aug 18 2008 10:50:57 +04:00
config.text

- !Flash: 363 -rwx 662228 Aug 19 2008 10:04:07 +04:00 syslog

- !Flash: 7741440 bytes total (2416640 bytes free)

+ !Flash: 363 -rwx 662626 Aug 19 2008 11:48:59 +04:00 syslog

+ !Flash: 7741440 bytes total (2416128 bytes free)

!

!Flash: nvram: Directory of nvram:/

!Flash: nvram: 26 -rw- 6269 <no date>
startup-config

!Flash: nvram: 27 ---- 26 <no date>
private-config

When only syslog file size change?

--
Regards,
Alexandr Smirnov

Smirnoff Alexander

2008-08-21 06:20:18 UTC

Where I can filter this file - on cisco router, or in rancid?

-----Original Message-----
From: john heasley [mailto:***@shrubbery.net]
Sent: Wednesday, August 20, 2008 9:18 AM
To: Smirnoff Alexander
Subject: Re: [rancid] cisco syslog diff

should just filter this file. which device is the file on?

Post by Smirnoff Alexander
Hello!
Index: configs/172.17.200.64
===================================================================
retrieving revision 1.12
diff -U 4 -r1.12 172.17.200.64
@@ -41,10 +41,10 @@
? !Flash:???? 7? drwx??????? 4032? Feb 02 2005 05:17:01 +03:00? html
? !Flash:??? 21? -rwx???????? 109? Feb 02 2005 05:09:06 +03:00? info
? !Flash:??? 22? -rwx???????? 109? Feb 02 2005 05:18:09 +03:00?

info.ver

Post by Smirnoff Alexander
? !Flash:?? 362? -rwx??????? 6269? Aug 18 2008 10:50:57 +04:00?

config.text

Post by Smirnoff Alexander
- !Flash:?? 363? -rwx????? 662228? Aug 19 2008 10:04:07 +04:00? syslog
- !Flash: 7741440 bytes total (2416640 bytes free)
+ !Flash:?? 363? -rwx????? 662626? Aug 19 2008 11:48:59 +04:00? syslog
+ !Flash: 7741440 bytes total (2416128 bytes free)
? !
? !Flash: nvram: Directory of nvram:/
? !Flash: nvram:??? 26? -rw-??????? 6269??????????????????? <no date>?

startup-config

Post by Smirnoff Alexander
? !Flash: nvram:??? 27? ----????????? 26??????????????????? <no date>?

private-config

Post by Smirnoff Alexander
When only syslog file size change?
--
Regards,
Alexandr Smirnov
_______________________________________________
Rancid-discuss mailing list
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

Smirnoff Alexander

2008-08-21 06:21:46 UTC

In this case we lost device logs, when router lost connectivity with remote syslog server.

-----Original Message-----
From: Peter Serwe [mailto:***@gmail.com]
Sent: Wednesday, August 20, 2008 12:03 AM
To: Smirnoff Alexander
Subject: Re: [rancid] cisco syslog diff

Well...

One way I'd suggest is point the things at a syslog host and don't
keep that log locally.

Peter

Post by Smirnoff Alexander
Hello!
Index: configs/172.17.200.64
===================================================================
retrieving revision 1.12
diff -U 4 -r1.12 172.17.200.64
@@ -41,10 +41,10 @@
!Flash: 7 drwx 4032 Feb 02 2005 05:17:01 +03:00 html
!Flash: 21 -rwx 109 Feb 02 2005 05:09:06 +03:00 info
!Flash: 22 -rwx 109 Feb 02 2005 05:18:09 +03:00 info.ver
!Flash: 362 -rwx 6269 Aug 18 2008 10:50:57 +04:00 config.text
- !Flash: 363 -rwx 662228 Aug 19 2008 10:04:07 +04:00 syslog
- !Flash: 7741440 bytes total (2416640 bytes free)
+ !Flash: 363 -rwx 662626 Aug 19 2008 11:48:59 +04:00 syslog
+ !Flash: 7741440 bytes total (2416128 bytes free)
!
!Flash: nvram: Directory of nvram:/
!Flash: nvram: 26 -rw- 6269 <no date>
startup-config
!Flash: nvram: 27 ---- 26 <no date>
private-config
When only syslog file size change?
--
Regards,
Alexandr Smirnov
_______________________________________________
Rancid-discuss mailing list
http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss

--
$B%T!<%?!<(J

15 Replies
3 Views
Permalink to this page
Disable enhanced parsing

Thread Navigation

Smirnoff Alexander 2008-08-19 09:42:27 UTC

Lance Vermilion 2008-08-19 20:11:01 UTC

Lance Vermilion 2008-08-21 18:12:46 UTC

Lance Vermilion 2008-08-21 20:30:55 UTC

Daniel Medina 2008-08-21 20:31:23 UTC

Smirnoff Alexander 2008-08-25 09:30:28 UTC

Smirnoff Alexander 2009-08-11 06:36:57 UTC

Lance Vermilion 2009-08-11 20:34:20 UTC

Smirnoff Alexander 2009-08-12 09:00:38 UTC

Lance Vermilion 2009-08-12 18:48:00 UTC

Traiano Welcome 2009-08-18 16:12:02 UTC

john heasley 2009-08-18 16:56:50 UTC

Traiano Welcome 2009-08-24 10:22:23 UTC

Smirnoff Alexander 2008-08-21 06:19:18 UTC

Smirnoff Alexander 2008-08-21 06:20:18 UTC

Smirnoff Alexander 2008-08-21 06:21:46 UTC

about - legalese

Loading...