[f-nsp] using

[Niels Bakker]

* Bruce.Rodger at strath.ac.uk (Bruce Rodger) [Fri 01 Oct 2004, 11:15 CEST]:
[about rancid]
> The only real problem I've found is that occasionally when retrieving
> the config from a BigIron, the module serial number (as reported by
> "show version") gets corrupted, so you occasionally get emails from
> rancid saying the config has changed, with a corresponding email an
> hour later saying it has changed back....

You get that too?  Here it usually happens with the standby mgmt module.
I first thought it'd be telnet crapping out, or rancid's --More-- pause
detector (pagebreaks are a pain to work around on IronWare in automated
scripts), until it showed "Non-exist." for the first time, and reverted
to the correct serial # on the next run.

Guess I now have really no excuse anymore to not submit it as a bug :)

I can wholeheartedly recommend rancid.  Hook it up to a user with
lowered privilege levels (one that can only execute "show" command),
optionally write a script to watch syslog and tell rancid to get the
config whenever a box logs that it's been changed.  You can't upload
configs with it but it forms a good audit trail along with cvsweb.


	-- Niels.

--