<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>I apologize I just realized that I the wrong file open I had looked at the 3.1 version of Extreme Networks xrancid not xrrancid which is the one I had open when I was looking at the script from below. In 3.1 they removed that file and integrated it into the rancid.types.base file. If you want to compare what you have the ftp://ftp.shrubbery.net/pub/rancid/rancid-3.1.tar.gz is what we built our distribution off of since there wasn't a package available for Debian.<br/>
<br/>
-----Original Message-----<br/>
On Thu, 16 Oct 2014 14:37:56 +1300<br/>
Jos <buoy@clear.net.nz> wrote:<br/>
<br/>
Hi<br/>
<br/>
Thanks for this, perhaps it’s as stupid as this, in my 3.1 install I don’t<br/>
have a xrrancid file, does it ship as part of the standalone 3.1 zipped<br/>
download?<br/>
<br/>
Cheers, Jos<br/>
<br/>
On 16/10/14 14:19, "Anson Maddock" <anson.maddock@gmx.com> wrote:<br/>
<br/>
>I'm utilizing Rancid 3.1 on Debian currently, I also have the<br/>
>repositories and CVS from when we were running 2.3.8. We do not have<br/>
>ACLSORT enabled and we are not seeing the problems you are describing.<br/>
>Our ASR9Ks are running 4.3.2 code. We are not not showing any truncation<br/>
>in the configs/CVS from our 2.3.8 database.<br/>
>Here is the sort from our xrrancid 3.1 distribution file. Can you confirm<br/>
>that the xrrancid file is a 3.1 version?<br/>
><br/>
># This is a sort routine that will sort on the<br/>
># ip address when the ip address is anywhere in<br/>
># the strings.<br/>
>sub ipsort {<br/>
>local(%lines) = @_;<br/>
>local($i) = 0;<br/>
>local(@sorted_lines);<br/>
>foreach $addr (sort sortbyipaddr keys %lines) {<br/>
>$sorted_lines[$i] = $lines{$addr};<br/>
>$i++;<br/>
>}<br/>
>@sorted_lines;<br/>
>}<br/>
><br/>
># These two routines will sort based upon IP addresses<br/>
>sub ipaddrval {<br/>
>my(@a) = ($_[0] =~ m#^(\d+)\.(\d+)\.(\d+)\.(\d+)$#);<br/>
>$a[3] + 256 * ($a[2] + 256 * ($a[1] +256 * $a[0]));<br/>
>}<br/>
>sub sortbyipaddr {<br/>
>&ipaddrval($a) <=> &ipaddrval($b);<br/>
>}<br/>
><br/>
>-----Original Message-----<br/>
>On Wed, 15 Oct 2014 23:14:09 +0200<br/>
>Alan McKinnon <alan.mckinnon@gmail.com> wrote:<br/>
><br/>
>On 15/10/2014 09:59, Jos wrote:<br/>
>> Hi Guys<br/>
>><br/>
>> Thanks to you both for the replies. I should have mentioned I’ve tried<br/>
>>the<br/>
>> ACL-SORT option being disabled/enabled in config without seeing any<br/>
>> success, I had this line in rancid.conf:<br/>
>><br/>
>> # if ACLSORT is NO, access-lists will NOT be sorted.<br/>
>> ACLSORT=NO; export ACLSORT<br/>
>> #<br/>
>><br/>
>> I have tried removing “export ACLSORT” with no luck either.<br/>
>><br/>
>><br/>
>> I have 4 or 5 ASR9K’s running 4.3.x and all do the same thing. Perhaps a<br/>
>> better example is this one:<br/>
>><br/>
>> Rancid backs up this:<br/>
>> ipv4 access-list name<br/>
>> permit ipv4 any 166<br/>
>> remark the below subnet is currently not in use<br/>
>> permit ipv4 any 166<br/>
>><br/>
>> What we have configured is:<br/>
>> ipv4 access-list name<br/>
>> 10 permit ipv4 any 166.1xx.xx.xx/28<br/>
>> 20 remark the below subnet is currently not in use<br/>
>> 30 permit ipv4 any 166.1xx.xx.xxx/28<br/>
>><br/>
>><br/>
>> - so the rancid backup leaves a bit to be desired here I think.<br/>
><br/>
><br/>
>The truncated address is due to this code in WriteTerm():<br/>
><br/>
>if (/^ipv(4|6) access-list (\S+)\s*$/) {<br/>
>...<br/>
>while (<INPUT>) {<br/>
>...<br/>
>($seq, $cmd, $misc, $ip) = ($_ =~ /^\s+(\d+) (\w+) (.*\s)(\w+)/);<br/>
>if ($cmd =~ /(permit|deny)/) {<br/>
>ProcessHistory("ACL $nlri $key $cmd",<br/>
>"$aclsort","$ip", " $cmd $misc$ip\n");<br/>
>...<br/>
>}<br/>
>}<br/>
><br/>
><br/>
>That final (\w+) stops at the first dot.<br/>
><br/>
>I'm no Cisco guru and don't know all the permutations of how XR lists<br/>
>access-lists, but I imagine the address must be everything after<br/>
>"ipv(4|6) any ", so the regex should probably become:<br/>
><br/>
><br/>
>($_ =~ /^\s+(\d+) (\w+) (.*\s)(.*)/)<br/>
><br/>
><br/>
>This is for 2.3.8 (I don't have a 3.x install to hand to check)<br/>
><br/>
>><br/>
>> I have:<br/>
>> expect version 5.44.1.15<br/>
>> This is on centos 6.5, I had the packaged version of rancid installed,<br/>
>>an<br/>
>> old 2.3.8 or something but then grabbed 3.1 and compiled it and have<br/>
>> removed the package.<br/>
>><br/>
>><br/>
>> Thanks for all your help with this, I can share more config if you let<br/>
>>me<br/>
>> know what exactly.<br/>
>><br/>
>> Cheers, Jos<br/>
>><br/>
>><br/>
>> On 15/10/14 18:27, "heasley" <heas@shrubbery.net> wrote:<br/>
>><br/>
>>> Wed, Oct 15, 2014 at 07:22:23AM +0200, Alan McKinnon:<br/>
>>>>> Rancid collected config:<br/>
>>>>> ipv4 access-list no-rfc1918<br/>
>>>>> remark Deny traffic to RFC 1918<br/>
>>>>> deny ipv4 10.0.0.0/8 any<br/>
>>>>> deny ipv4 any 10<br/>
>>>>> deny ipv4 172.16.0.0/12 any<br/>
>>>>> deny ipv4 any 172<br/>
>>>>> deny ipv4 192.168.0.0/16 any<br/>
>>>>> deny ipv4 any 192<br/>
>>>>> permit ipv4 any any<br/>
>>>>><br/>
>>>>><br/>
>>>>> A minor problem where the ACL is obvious as above, but this is the<br/>
>>>>> exception.<br/>
>>>>> Can someone suggest a good fix or workaround for this please<br/>
>>>> (preferably<br/>
>>>>> without changing the ASR9K config), I trust it affects others with<br/>
>>>> this<br/>
>>>>> sort of config?<br/>
>>>>> I can see earlier posts mention xrrancid but can’t find that in our<br/>
>>>> 3.1<br/>
>>>>> install.<br/>
>>>><br/>
>>>> This appears to be rancid's acl renumbering, which is the designed<br/>
>>>> behaviour for good reasons.<br/>
>>><br/>
>>> I dont think so; yes its removing the line numbers, but its botching<br/>
>>>every<br/>
>>> other line.<br/>
>>> _______________________________________________<br/>
>>> Rancid-discuss mailing list<br/>
>>> Rancid-discuss@shrubbery.net<br/>
>>> <a href="http://www.shrubbery.net/mailman/listinfo/rancid-discuss" target="_blank">http://www.shrubbery.net/mailman/listinfo/rancid-discuss</a><br/>
>><br/>
>><br/>
><br/>
><br/>
>--<br/>
>Alan McKinnon<br/>
>alan.mckinnon@gmail.com<br/>
><br/>
>_______________________________________________<br/>
>Rancid-discuss mailing list<br/>
>Rancid-discuss@shrubbery.net<br/>
><a href="http://www.shrubbery.net/mailman/listinfo/rancid-discuss" target="_blank">http://www.shrubbery.net/mailman/listinfo/rancid-discuss</a><br/>
><br/>
>_______________________________________________<br/>
>Rancid-discuss mailing list<br/>
>Rancid-discuss@shrubbery.net<br/>
><a href="http://www.shrubbery.net/mailman/listinfo/rancid-discuss" target="_blank">http://www.shrubbery.net/mailman/listinfo/rancid-discuss</a><br/>
<br/>
<br/>
</div></div></body></html>