[rancid] Re: cisco syslog diff

[john heasley]

Tue, Aug 18, 2009 at 06:12:02PM +0200, Traiano Welcome:
> Hi
> 
> I have the same problem, after an IOS upgrade on a 7609 router, 
> resulting in annoying 5-minutely diff mails, so I made the following 
> adjustment to the ShowLash() subroutine in bin/rancid:

isnt there some config knob that is causing the file to be created in
the first place?

> ---
> while (<INPUT>) {
> tr/\015//d;
> last if (/^$prompt/);
> ----> last if (/Flash/);
> next if (/^(\s*|\s*$cmd\s*)$/);
> return(1) if ($type =~ /^(12[40]|7)/);
> return(-1) if (/command authorization failed/i);
> return(1) if /^\s*\^\s*$/;
> return(1) if /(Invalid input detected|Type help or )/;
> # the pager can not be disabled per-session on the PIX
> s/^<-+ More -+>\s*//;
> /\s+vlan\.dat$/ && next;
> ProcessHistory("FLASH","","","!Flash: $_");
> }
> ---
> 
> Is this the correct way to do this? Will this result in a loss of 
> information that I might need to determine IOS version changes between 
> upgrades?
> 
> Thanks,
> Traiano
> 
> 
> 
> 
> 
> 
> 
> 
> Lance Vermilion wrote:
> > That will just remove it from the Diff portion it will not remove it 
> > from printing it. If you find the sub routine that processes the dir 
> > command you will see there is a line that will say Flash:.
> >
> > -Lance
> >
> > On Wed, Aug 12, 2009 at 2:00 AM, Smirnoff Alexander 
> > <asmirnoff at office.beeline.ru <mailto:asmirnoff at office.beeline.ru>> wrote:
> >
> >     Ok, I am just add | grep -v "Flash:" before >$TMP.diff in
> >     control_rancid and waiting for results ;)
> >
> >     ------------------------------------------------------------------------
> >
> >     *From:* lavermil at gheek.net <mailto:lavermil at gheek.net>
> >     [mailto:lavermil at gheek.net <mailto:lavermil at gheek.net>] *On Behalf
> >     Of *Lance Vermilion
> >     *Sent:* Wednesday, August 12, 2009 12:34 AM
> >
> >
> >     *To:* Smirnoff Alexander
> >     *Cc:* rancid-discuss at shrubbery.net
> >     <mailto:rancid-discuss at shrubbery.net>
> >     *Subject:* Re: [rancid] cisco syslog diff
> >
> >     You will need to look for the sub routine that has Flash in it. Do
> >     a search for that in the appropriate rancid file.
> >
> >     -Lance
> >
> >     On Mon, Aug 10, 2009 at 11:36 PM, Smirnoff Alexander
> >     <asmirnoff at office.beeline.ru <mailto:asmirnoff at office.beeline.ru>>
> >     wrote:
> >
> >     dir | e syslog ? it is very simple way, but I need more ;)
> >
> >     how I can just disable all lines like ?!Flash: ? from mail diff
> >     output , but this lines can be stored in CVS config changes?
> >
> >     ------------------------------------------------------------------------
> >
> >     *From:* lavermil at gheek.net <mailto:lavermil at gheek.net>
> >     [mailto:lavermil at gheek.net <mailto:lavermil at gheek.net>] *On Behalf
> >     Of *Lance Vermilion
> >     *Sent:* Thursday, August 21, 2008 10:13 PM
> >
> >
> >     *To:* Smirnoff Alexander
> >     *Cc:* rancid-discuss at shrubbery.net
> >     <mailto:rancid-discuss at shrubbery.net>
> >     *Subject:* Re: [rancid] cisco syslog diff
> >
> >     the other option is to write some custom pieces to not include or
> >     modify the command for dir to exclude things you don't want to
> >     include.
> >
> >     dir | e syslog
> >
> >     something like that. You may have to escape the |, you will need
> >     to mess with it a little.
> >
> >     On Wed, Aug 20, 2008 at 11:19 PM, Smirnoff Alexander
> >     <asmirnoff at gldn.net <mailto:asmirnoff at gldn.net>> wrote:
> >
> >     If I remove this command (dir) I lost other important changer ,
> >     like ios change. I mean about more intellectual rancid
> >     acknowledges behavior , then minor changes like syslog grow not
> >     cause email's.
> >
> >     ------------------------------------------------------------------------
> >
> >     *From:* lavermil at gheek.net <mailto:lavermil at gheek.net>
> >     [mailto:lavermil at gheek.net <mailto:lavermil at gheek.net>] *On Behalf
> >     Of *Lance Vermilion
> >     *Sent:* Wednesday, August 20, 2008 12:11 AM
> >     *To:* Smirnoff Alexander
> >     *Cc:* rancid-discuss at shrubbery.net
> >     <mailto:rancid-discuss at shrubbery.net>
> >     *Subject:* Re: [rancid] cisco syslog diff
> >
> >     remove that command from what is checked in the rancid file under
> >     <rancid home>/bin/
> >
> >     2008/8/19 Smirnoff Alexander <asmirnoff at gldn.net
> >     <mailto:asmirnoff at gldn.net>>
> >
> >     Hello!
> >
> >     How I can disable alerts on changing like this:
> >
> >     Index: configs/172.17.200.64 <http://172.17.200.64>
> >
> >     ===================================================================
> >
> >     retrieving revision 1.12
> >
> >     diff -U 4 -r1.12 172.17.200.64 <http://172.17.200.64>
> >
> >     @@ -41,10 +41,10 @@
> >
> >     !Flash: 7 drwx 4032 Feb 02 2005 05:17:01 +03:00 html
> >
> >     !Flash: 21 -rwx 109 Feb 02 2005 05:09:06 +03:00 info
> >
> >     !Flash: 22 -rwx 109 Feb 02 2005 05:18:09 +03:00 info.ver
> >
> >     !Flash: 362 -rwx 6269 Aug 18 2008 10:50:57 +04:00 config.text
> >
> >     - !Flash: 363 -rwx 662228 Aug 19 2008 10:04:07 +04:00 syslog
> >
> >     - !Flash: 7741440 bytes total (2416640 bytes free)
> >
> >     + !Flash: 363 -rwx 662626 Aug 19 2008 11:48:59 +04:00 syslog
> >
> >     + !Flash: 7741440 bytes total (2416128 bytes free)
> >
> >     !
> >
> >     !Flash: nvram: Directory of nvram:/
> >
> >     !Flash: nvram: 26 -rw- 6269 <no date> startup-config
> >
> >     !Flash: nvram: 27 ---- 26 <no date> private-config
> >
> >     When only syslog file size change?
> >
> >     -- 
> >     Regards,
> >     Alexandr Smirnov