<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; "><p style="width:700px"><a href="http://www.acens.com"><img border="0" width="700" height="70" src="cid:0032-0001@01cc7760.b9c9c7e0" alt="acens - the hosting company"></a><!-- $acens --> </p>
<div> </div><div>Hi,</div><div><br></div><div> I have in the same server Rancid and syslo-ng and each device send its log to this server.</div><div><br></div><div> Well. With a filter to detect device changes a trigger a script to call rancid to get device config changes.</div><div><br></div><div> Cheers.</div><div><br></div><div><br></div><div><br></div><span id="OLK_SRC_BODY_SECTION"><div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt"><span style="font-weight:bold">De: </span> Amanda Lalli-Cafini <<a href="mailto:Amanda.Lalli-Cafini@navitas.com">Amanda.Lalli-Cafini@navitas.com</a>><br><span style="font-weight:bold">Fecha: </span> Tue, 20 Sep 2011 04:43:07 +0200<br><span style="font-weight:bold">Para: </span> "<a href="mailto:rancid-discuss@shrubbery.net">rancid-discuss@shrubbery.net</a>" <<a href="mailto:rancid-discuss@shrubbery.net">rancid-discuss@shrubbery.net</a>><br><span style="font-weight:bold">Asunto: </span> [rancid] getting Rancid to run automatically after a user changes the configuraiton<br></div><div><br></div><div dir="ltr"><style id="owaTempEditStyle"></style><style title="owaParaStyle"><!--P {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
--></style><div ocsi="x"><div style="FONT-FAMILY: Tahoma; DIRECTION: ltr; COLOR: #000000; FONT-SIZE: 13px"><div></div><div dir="ltr"><font color="#000000" size="2" face="Tahoma">Good Day All,</font></div><div dir="ltr"><font size="2" face="tahoma"></font> </div><div dir="ltr"><font size="2" face="tahoma">We have rancid running on a server that is also running TACACS+</font></div><div dir="ltr"><font size="2" face="tahoma"></font> </div><div dir="ltr"><font size="2" face="tahoma">We have rancid running every 4 hours using crontab.</font></div><div dir="ltr"><font size="2" face="tahoma"></font> </div><div dir="ltr"><font size="2" face="tahoma">I have been asked to get it running in response to a user making a change to the configuration.</font></div><div dir="ltr"><font size="2" face="tahoma"></font> </div><div dir="ltr"><font size="2" face="tahoma">I found some help in the FAQ about this, but I am not exactally sure where to get started.</font></div><div dir="ltr"><font size="2" face="tahoma">I suppose the first thing I need to do is to see if I have syslog on the TACACS server.</font></div><div dir="ltr"><font size="2" face="tahoma"></font> </div><div dir="ltr"><font size="2" face="tahoma">I was wondering if anyone could expand on the FAQ a bit and give me a little more idea of how to get this going please?</font></div><div dir="ltr"><font size="2" face="tahoma"></font> </div><div dir="ltr"><font size="2" face="tahoma">thanks in advance for any assistance</font></div><div dir="ltr"><font size="2" face="tahoma"></font> </div><div dir="ltr"><font size="2" face="tahoma">regards</font></div><div dir="ltr"><font size="2" face="tahoma"></font> </div><div dir="ltr"><font size="2" face="tahoma">Amanda</font></div><div dir="ltr"><font size="2" face="tahoma"></font> </div><div dir="ltr">Q. I'd like to have RANCID automatically begin collection when someone<br>
finishes configuring a router. How can I do this?<br>
A. Using a syslog watcher script, one can trigger RANCID from the syslog<br>
line emitted by, for example, an IOS router after configuration mode is<br>
ended.</div><div dir="ltr"> Here's a simple example using the Simple Event Correlator:<br>
(<a href="http://simple-evcorr.sourceforge.net/">http://simple-evcorr.sourceforge.net/</a>)</div><div dir="ltr"> If the syslog line in your logs looks like this (wrapped for readability):</div><div dir="ltr"> Apr 5 09:56:52 acc1.geo269.example.com 72: 000069: *Mar 6 21:40:13.466 \<br>
AEDT: %SYS-5-CONFIG_I: Configured from console by gwbush on vty0 (10.1.1.1)</div><div dir="ltr"> You would use a SEC configuration stanza like this:</div><div dir="ltr"> # example rancid trigger<br>
#<br>
type=SingleWithSuppress<br>
ptype=RegExp<br>
pattern=\s\S+:\S+\S+\s(\S+)\.example\.com.*SYS-5-CONFIG_I<br>
action=shellcmd /opt/rancid/bin/do-diffs -r $1<br>
window=1800</div><div dir="ltr"> This will execute the command '/opt/rancid/bin/do-diffs -r acc1.geo269'<br>
when it is fed a line like that syslog line. The command will be run at<br>
most once every 1800 seconds. If you do not get hostnames in your<br>
log lines that match your router.db entries, either fix your reverse<br>
DNS or remove the '-r $1' part.</div></div></div></div></span><div> </div>
<table border="0" cellspacing="0" cellpadding="0" style="width:700px">
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<tr>
<td width="55%" valign=top style='width:55%;background:#EEEEEE;padding:6.0pt 6.0pt 6.0pt 6.0pt'>
<p style='line-height:9pt'><span style='font-size:8.0pt;font-family:"Arial","sans-serif";color:#666666;font-weight:bold;'>Iñaki Martínez Díez</span><br>
<span style='font-size:8.0pt; font-family:"Arial","sans-serif";color:#666666;font-weight:bold;'>Departamento de redes</span><br>
<span style='font-size:8.0pt; font-family:"Arial","sans-serif";color:#666666;font-weight:bold;'>acens Technologies S.L.</span></p>
</td>
<td width="45%" valign=top style='width:45.0%;background:#EEEEEE;padding: 6.0pt 6.0pt 6.0pt 6.0pt'>
<p align=right style='text-align:right;line-height:9pt'>
<a href="mailto:imd@acens.com" style='color:#666666;font-size:8.0pt;font-family:"Verdana", "sans-serif"; text-decoration:none'>imd@acens.com</a><br>
<span style='font-size:8.0pt;font-family:"Arial","sans-serif";color:#666666;'>Teléfono: 637 772 156</span><br>
<span style='font-size:8.0pt;font-family:"Arial","sans-serif";color:#666666;'>Fax: 911 418 501</span><br>
</p>
</td>
</tr>
<tr>
<td colspan=2 style='padding:6.0pt 6.0pt 6.0pt 6.0pt'>
<p align=center style='margin-bottom:12.0pt;text-align:center;font-family:"Verdana", "sans-serif";color:#999999;;font-size:7.0pt'>Este mensaje puede contener información confidencial dirigida exclusivamente a su destinatario.<br>
No se permite su copia o distribución sin la autorización expresa y por anticipado de acens.<br>
Si recibió este mensaje por error, por favor, comuníquelo al emisor y elimínelo de su ordenador. Gracias.</p>
<p align=center style='text-align:center;font-family:"Verdana", "sans-serif";color:#999999;font-size:7.0pt'>This message may contain confidential information exclusively addressed to its intended recipient.<br>
The copy or distribution of this message is not permitted without the prior express consent by acens.<br>
If you are not the intended recipient of this message please advise the sender and delete it. Thank you.</p>
</td>
</tr>
</table>
</body></html>