[rancid] Re: CVS changes with ASA

john heasley heas at shrubbery.net
Mon Feb 2 21:35:30 UTC 2009


Mon, Feb 02, 2009 at 08:37:05PM +0000, Jethro R Binks:
> On Mon, 2 Feb 2009, john heasley wrote:
> 
> > > So rancid-run was logging in performing a write mem and then exiting.
> > 
> > it uses write term, not write mem, so it should not be writing the 
> > config unless Cisco does something unusual on this device.  But, we 
> > should just filter this line like we do for IOS devices.  Where does the 
> > line appear?
> 
> I'm investigating several PIX/ASA related difficulties with rancid at the 
> moment, and having moved to 2.3.2a8 rancid and clogin I also see this.  I 
> started to reply to this thread but got bogged down in looking into other 
> problems, but here's what I'd written on this particular issue:
> 
> Is this the "Written by rancid at ..." line you are seeing?  Having moved 
> to using clogin and rancid from 2.3.2a8, I see this too: it seems to be as 
> a result of using the output of "more system:running-config" specifically, 
> which is relatively new.  A simple patch fixes it (applying by hand should 
> be trivial, look for line 1551):
> 
> --- rancid.1.252        Fri Jan 23 09:07:50 2009
> +++ rancid.1.252.mod    Sun Feb  1 17:28:10 2009
> @@ -1551,6 +1551,7 @@
>         # some versions have other crap mixed in with the bits in the
>         # block above
>         /^! (Last configuration|NVRAM config last)/ && next;
>         /^: (Written by rancid at|Saved)/ && next;
> 
>         # skip consecutive comment lines to avoid oscillating extra comment
>         # line on some access servers.  grrr.
> 
> 
> 
> Here's some sample .raw output:
> 
> asa1# more system:running-config
> Cryptochecksum: 92e99914 e1bd90fa d62353b8 1881f920
> : Saved
> : Written by rancid at 22:47:44.539 UTC Sun Feb 1 2009
> !
> ASA Version 7.2(4)
> !
> hostname asa1
> domain-name net.strath.ac.uk
> ...
> 

I think the following patch will take care of these and the checksum
line that peter mentioned in private.

> Jethro.
> 
> 
> > 
> > > So everytime you ran it, the config was different because it was 
> always
> > > saving the config.
> > > 
> > > This behavior does show up on a8.
> > > 
> > > On Mon, Feb 2, 2009 at 7:19 PM, john heasley <heas at shrubbery.net> wrote:
> > > 
> > > > What is changing?
> > > >
> > > > Thu, Jan 29, 2009 at 11:56:28AM -0800, Peter Serwe:
> > > > > Correction.  Occasionally I see this behavior.
> > > > >
> > > > > I have an email from Rancid as of 53 minutes ago with this change.
> > > > >
> > > > > I'm currently running 2.3.2a8 against 7.2(4).
> > > > >
> > > > > Peter
> > > > >
> > > > > On Thu, Jan 29, 2009 at 11:54 AM, Peter Serwe <peter.serwe at gmail.com>
> > > > wrote:
> > > > > > I'm running 7.2(4) and I don't see this behavior either.
> > > > > >
> > > > > > Peter
> > > > > >
> > > > > > On Thu, Jan 29, 2009 at 11:27 AM, alex <rancid at ale.cx> wrote:
> > > > > >> On Wednesday 28 January 2009 23:15:15 Ryan DeBerry wrote:
> > > > > >>> I am able to backup ASA config but the config changes on every
> > > > rancid-run.
> > > > > >>> The only change is the timestamp when the config was written on the
> > > > > >>> rancid-run.  Is there a way to prevent this behavior?
> > > > > >>
> > > > > >> Interesting. I am backing up several ASAs and don't see this. What
> > > > release are
> > > > > >> you running? Most of mine are on 8.x.
> > > > > >>
> > > > > >> alexd
> > > > > >> _______________________________________________
> > > > > >> Rancid-discuss mailing list
> > > > > >> Rancid-discuss at shrubbery.net
> > > > > >> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
> > > > > >>
> > > > > >
> > > > > >
> > > > > >
> > > > > > --
> > > > > > ????
> > > > > >
> > > > >
> > > > >
> > > > >
> > > > > --
> > > > > ????
> > > > > _______________________________________________
> > > > > Rancid-discuss mailing list
> > > > > Rancid-discuss at shrubbery.net
> > > > > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
> > > > _______________________________________________
> > > > Rancid-discuss mailing list
> > > > Rancid-discuss at shrubbery.net
> > > > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
> > > >
> > _______________________________________________
> > Rancid-discuss mailing list
> > Rancid-discuss at shrubbery.net
> > http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss
> > 
> 
> -- 
> .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .
> Jethro R Binks
> Computing Officer, IT Services, University Of Strathclyde, Glasgow, UK
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss


Index: rancid.in
===================================================================
RCS file: /home/rancid/.CVS/rancid/bin/rancid.in,v
retrieving revision 1.252
diff -d -u -r1.252 rancid.in
--- rancid.in	29 Nov 2008 23:10:58 -0000	1.252
+++ rancid.in	2 Feb 2009 21:31:16 -0000
@@ -1551,6 +1551,8 @@
 	# some versions have other crap mixed in with the bits in the
 	# block above
 	/^! (Last configuration|NVRAM config last)/ && next;
+	# and for the ASA
+	/^: (Written by \w+ at|Saved)/ && next;
 
 	# skip consecutive comment lines to avoid oscillating extra comment
 	# line on some access servers.  grrr.
@@ -1824,7 +1826,7 @@
 	    next;
 	}
 
-	/^Cryptochecksum:/ && next;
+	/^ *Cryptochecksum:/ && next;
 
 	# catch anything that wasnt matched above.
 	ProcessHistory("","","","$_");



More information about the Rancid-discuss mailing list