[c-nsp] 4510 reporting dozens of config changes throughout the day...

[Ryan West]

Without seeing the differences between configs on your 4510's, I would look at the archive section of the config to see if the auditing is enabled.

-ryan

From: Steven Fischer [mailto:sfischer1967 at gmail.com]
Sent: Sunday, June 07, 2009 11:03 PM
To: Ryan West
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] 4510 reporting dozens of config changes throughout the day...

indeed, we are running RANCID...good call.  and they are periodic...but none of my other devices do this, and we have another 4510 that doesn't appear to be doing it either.

can anything be done?  I'm just waiting for management to see this and wonder what in blue-blazes is going on, and then to panic.
On Sun, Jun 7, 2009 at 10:56 PM, Ryan West <rwest at zyedge.com<mailto:rwest at zyedge.com>> wrote:
Are you running any type of backup utility (RANCID etc) that might be triggering your logs?  Are the timestamps periodic or random?

-ryan

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net<mailto:cisco-nsp-bounces at puck.nether.net> [mailto:cisco-nsp-bounces at puck.nether.net<mailto:cisco-nsp-bounces at puck.nether.net>] On Behalf Of Steven Fischer
Sent: Sunday, June 07, 2009 10:48 PM
To: cisco-nsp at puck.nether.net<mailto:cisco-nsp at puck.nether.net>
Subject: [c-nsp] 4510 reporting dozens of config changes throughout the day...

I have a 4510 in our environment that is reporting literally dozens of
changes to the running configuration throughout the day - days on which I am
certain no changes have been made to it - the syslog message is given with
the header -  AUDIT-5-RUN_CONFIG.  Cisco's support site doesn't give me a
whole lot.  Any ideas on what could be causing this?

--
To him who is able to keep you from falling and to present you before his
glorious presence without fault and with great joy
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net<mailto:cisco-nsp at puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/



--
To him who is able to keep you from falling and to present you before his glorious presence without fault and with great joy