Send netdisco-users mailing list submissions to
[email protected]
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.sourceforge.net/lists/listinfo/netdisco-users
or, via email, send a message with subject or body 'help' to
[email protected]
You can reach the person managing the list at
[email protected]
When replying, please edit your Subject line so it is more specific
than "Re: Contents of netdisco-users digest..."
Today's Topics:
1. Re: Detect device as Checkpoint (cedric delaunay)
--- Begin Message ---
Hello all,
Nobody had successfull stuf with checkpoint ? Am I the onlyest with
these dificulties ?
Thanks
Cédric
Le 09/01/2018 à 09:11, cedric delaunay a écrit :
Hello,
It's better with this patch :
[root@berger2 TOIP7450]$ diff
/home/netdisco/perl5/lib/perl5/App/Netdisco/SSHCollector/Platform/GAIAEmbedded.pm.bak
/home/netdisco/perl5/lib/perl5/App/Netdisco/SSHCollector/Platform/GAIAEmbedded.pm
69c69,70
< my $linereg = qr/\?\s+\(([0-9\.]+)\)\s+at\s+([a-fA-F0-9:]+)/;
---
> my $linereg = qr/([0-9\.]+)\s+ether\s+([a-fA-F0-9:]+).+/;
> # my $linereg = qr/\?\s+\(([0-9\.]+)\)\s+at\s+([a-fA-F0-9:]+)/;
But Checkpoints are still detect as Level2 device, unknown vendor...
Thanks
Cédric
Le 08/01/2018 à 15:39, cedric delaunay a écrit :
Hum,
ssh-collector bug looks like paloalto's one
Arp table result on checkpoint looks like :
Address HWtype HWaddress Flags Mask Iface
10.21.4.250 ether 00:1C:FF:AA:AE:98 C
eth1.954
XX.YYY.211.240 ether FF:FF:FF:FF:FF:FF CM
eth1.355
I guess regexp in
/home/netdisco/perl5/lib/perl5/App/Netdisco/SSHCollector/Platform/GAIAEmbedded.pm
have to be updated.
That do you think about ?
Cédric
Le 08/01/2018 à 15:21, cedric delaunay a écrit :
Hi Olivier,
Thanks for your reply and happy new year all.
I let the subject standby during holidays but today I'm still unable
to detect my device as i would like.
I'v got a error during ssh-collector execution :
[netdisco@berger2 ~]$ ~/bin/netdisco-sshcollector -DQ
Warning: Permanently added '10.0.1.2' (RSA) to the list of known hosts.
This system is for authorized use only.
This system is for authorized use only.
[1080] 2018-01-08 13:29:06 debug 10.0.1.3 1080 arpnip()
[1082] 2018-01-08 13:29:06 debug 10.0.1.2 1082 arpnip()
[1080] 2018-01-08 13:30:06 warn WARNING: no entries received from <10.0.1.3>
[1082] 2018-01-08 13:30:06 warn WARNING: no entries received from <10.0.1.2>
Can't use string ("1") as an ARRAY ref while "strict refs" in use at
/home/netdisco/bin/netdisco-sshcollector line 114, <$__ANONIO__> line 3.
I upgraded netdisco to 2.38.5
discover process finds some characteristics on device but not
interesting things
I got : running time, ip adresses, location
but not : vendor, version, serial-number...
Checkpoint are on gaia 80.10 and are on blades, not virtual firewalls.
Do anybody succeed on this before ?
Thanks
Cédric
Le 14/12/2017 à 23:24, Oliver Gorwits a écrit :
Hi Cedric,
On 2017-12-13 15:27, Delaunay Cedric wrote:
Hi all,
I try to ensure netdisco detect our physical checkpoint firewalls
but
I'm unable to make it run...
You probably want the "ssh collector" helper script, which can
retrieve ARP entries from the firewall:
https://metacpan.org/pod/distribution/App-Netdisco/bin/netdisco-sshcollector
together with the standard Discover, it should be enough.
regards,
oliver.
On first try, discover dectects it as layer2 device so I applyed
this
patch :
http://netdisco-users.narkive.com/tTHHPnmv/checkpoint-firewall-no-arp-cache-polling-since-upgrade-from-ipso-to-gaia-os#post3
This is better as it now detect interfaces but it stops on
SNMP::Info's mib and never use checkpint's mib.
here is a delete/discover of the device.
does anybody as an idee to help me ?
Thanks a lot
Cedric
[netdisco@server ~]$ /home/netdisco/bin/netdisco-do delete -d
10.0.1.2
-DI
[24983] 2017-12-13 15:25:39 info delete: started at Wed Dec 13
16:25:39 2017
[24983] 2017-12-13 15:25:39 info delete: finished at Wed Dec 13
16:25:39 2017
[24983] 2017-12-13 15:25:39 info delete: status done: Deleted device
10.0.1.2.
[netdisco@server ~]$ /home/netdisco/bin/netdisco-do discover -d
10.0.1.2 -DI
[25868] 2017-12-13 15:25:42 info discover: started at Wed Dec 13
16:25:42 2017
[25868] 2017-12-13 15:25:42 debug [10.0.1.2] try_connect with ver: 2,
class: SNMP::Info, comm:
SNMP::Info::_global uptime : DISMAN-EVENT-MIB::sysUpTimeInstance :
.1.3.6.1.2.1.1.3.0
SNMP::Info::_validate_autoload_method(CARP_TRACE) Unable to resolve
method.
SNMP::Info::_global(uptime) Timeout at
/home/netdisco/perl5/lib/perl5/App/Netdisco/Util/SNMP.pm line 176.
[25868] 2017-12-13 15:25:45 debug [10.0.1.2] try_connect with ver: 1,
class: SNMP::Info, comm:
SNMP::Info::_global uptime : DISMAN-EVENT-MIB::sysUpTimeInstance :
.1.3.6.1.2.1.1.3.0
SNMP::Info::_validate_autoload_method(CARP_TRACE) Unable to resolve
method.
SNMP::Info::_global(uptime) Timeout at
/home/netdisco/perl5/lib/perl5/App/Netdisco/Util/SNMP.pm line 176.
[25868] 2017-12-13 15:25:48 debug [10.0.1.2] try_connect with ver: 2,
class: SNMP::Info, comm:
SNMP::Info::_global uptime : DISMAN-EVENT-MIB::sysUpTimeInstance :
.1.3.6.1.2.1.1.3.0
SNMP::Info::_global layers : SNMPv2-MIB::sysServices.0 :
.1.3.6.1.2.1.1.7.0
SNMP::Info::_validate_autoload_method(CARP_TRACE) Unable to resolve
method.
SNMP::Info::_global(layers) NOSUCHINSTANCE at
/home/netdisco/perl5/lib/perl5/App/Netdisco/Util/SNMP.pm line 176.
SNMP::Info::_global description : SNMPv2-MIB::sysDescr.0 :
.1.3.6.1.2.1.1.1.0
SNMP::Info::_validate_autoload_method(CARP_TRACE) Unable to resolve
method.
Device doesn't implement sysServices but did return sysDescr. Might
give unexpected results.
at /home/netdisco/perl5/lib/perl5/App/Netdisco/Util/SNMP.pm line
155.
SNMP::Info::_global id : SNMPv2-MIB::sysObjectID.0 :
.1.3.6.1.2.1.1.2.0
SNMP::Info 3.34
SNMP::Info::device_type() layers:00000000 id:2620 sysDescr:"Linux
ckp-iutsm1 2.6.18-92cpx86_64 #1 SMP Fri Apr 7 13:55:39 IDT 2017
x86_64"
SNMP::Info::_load_attr ip_index : IP-MIB::ipAdEntIfIndex :
.1.3.6.1.2.1.4.20.1.2
SNMP::Info::_load_attr interfaces : IF-MIB::ifIndex :
.1.3.6.1.2.1.2.2.1.1
SNMP::Info::_load_attr ip_netmask : IP-MIB::ipAdEntNetMask :
.1.3.6.1.2.1.4.20.1.3
[25868] 2017-12-13 15:25:48 debug [10.0.1.2] device - aliased as
XXXXXXXXXX
...............
[25868] 2017-12-13 15:25:48 debug [10.0.1.2] device - aliased as
YYYYYYYYYY
[25868] 2017-12-13 15:25:48 debug resolving 23 aliases with max 50
outstanding requests
SNMP::Info::_validate_autoload_method(vtp_d_name) Unable to resolve
method.
SNMP::Info::_global contact : SNMPv2-MIB::sysContact.0 :
.1.3.6.1.2.1.1.4.0
SNMP::Info::_global name : SNMPv2-MIB::sysName.0 : .1.3.6.1.2.1.1.5.0
SNMP::Info::_global location : SNMPv2-MIB::sysLocation.0 :
.1.3.6.1.2.1.1.6.0
SNMP::Info::_global ports : IF-MIB::ifNumber.0 : .1.3.6.1.2.1.2.1.0
SNMP::Info::_validate_autoload_method(mac) Unable to resolve method.
SNMP::Info::_validate_autoload_method(ps1_type) Unable to resolve
method.
SNMP::Info::_validate_autoload_method(ps2_type) Unable to resolve
method.
SNMP::Info::_validate_autoload_method(ps1_status) Unable to resolve
method.
SNMP::Info::_validate_autoload_method(ps2_status) Unable to resolve
method.
SNMP::Info::_validate_autoload_method(fan) Unable to resolve method.
SNMP::Info::_validate_autoload_method(slots) Unable to resolve
method.
SNMP::Info::_validate_autoload_method(vendor) Unable to resolve
method.
SNMP::Info::_validate_autoload_method(os) Unable to resolve method.
SNMP::Info::_validate_autoload_method(os_ver) Unable to resolve
method.
SNMP::Info::_validate_autoload_method(model) Unable to resolve
method.
SNMP::Info::_validate_autoload_method(serial) Unable to resolve
method.
[25868] 2017-12-13 15:25:48 debug [10.0.1.2] device - removed 0
aliases
[25868] 2017-12-13 15:25:48 debug [10.0.1.2] device - added 23 new
aliases
SNMP::Info::_load_attr i_type : IF-MIB::ifType : .1.3.6.1.2.1.2.2.1.3
SNMP::Info::_validate_autoload_method(i_ignore) Unable to resolve
method.
SNMP::Info::_load_attr i_description : IF-MIB::ifDescr :
.1.3.6.1.2.1.2.2.1.2
SNMP::Info::_load_attr i_mtu : IF-MIB::ifMtu : .1.3.6.1.2.1.2.2.1.4
SNMP::Info::_load_attr orig_i_speed : IF-MIB::ifSpeed :
.1.3.6.1.2.1.2.2.1.5
SNMP::Info::_load_attr i_mac : IF-MIB::ifPhysAddress :
.1.3.6.1.2.1.2.2.1.6
SNMP::Info::_load_attr i_up : IF-MIB::ifOperStatus :
.1.3.6.1.2.1.2.2.1.8
SNMP::Info::_load_attr i_up_admin : IF-MIB::ifAdminStatus :
.1.3.6.1.2.1.2.2.1.7
SNMP::Info::_load_attr i_name : IF-MIB::ifName :
.1.3.6.1.2.1.31.1.1.1.1
SNMP::Info::_validate_autoload_method(i_duplex) Unable to resolve
method.
SNMP::Info::_validate_autoload_method(i_duplex_admin) Unable to
resolve method.
SNMP::Info::_validate_autoload_method(i_stp_state) Unable to resolve
method.
SNMP::Info::_validate_autoload_method(i_vlan) Unable to resolve
method.
SNMP::Info::_load_attr i_lastchange : IF-MIB::ifLastChange :
.1.3.6.1.2.1.2.2.1.9
SNMP::Info::_validate_autoload_method(agg_ports) Unable to resolve
method.
SNMP::Info::_global load_uptime : DISMAN-EVENT-MIB::sysUpTimeInstance
: .1.3.6.1.2.1.1.3.0
SNMP::Info::_global snmpEngineTime :
SNMP-FRAMEWORK-MIB::snmpEngineTime.0 : .1.3.6.1.6.3.10.2.1.3.0
[25868] 2017-12-13 15:25:48 debug [10.0.1.2] interfaces - removed 0
interfaces
[25868] 2017-12-13 15:25:48 debug [10.0.1.2] interfaces - added 14
new
interfaces
SNMP::Info::_validate_autoload_method(i_ssidlist) Unable to resolve
method.
SNMP::Info::_validate_autoload_method(v_name) Unable to resolve
method.
SNMP::Info::_validate_autoload_method(v_index) Unable to resolve
method.
SNMP::Info::_validate_autoload_method(i_vlan) Unable to resolve
method.
SNMP::Info::_validate_autoload_method(i_vlan_membership) Unable to
resolve method.
SNMP::Info::_validate_autoload_method(i_vlan_type) Unable to resolve
method.
[25868] 2017-12-13 15:25:49 debug [10.0.1.2] vlans - removed 0 device
VLANs
[25868] 2017-12-13 15:25:49 debug [10.0.1.2] vlans - added 0 new
device VLANs
[25868] 2017-12-13 15:25:49 debug [10.0.1.2] vlans - removed 0 port
VLANs
[25868] 2017-12-13 15:25:49 debug [10.0.1.2] vlans - added 0 new port
VLANs
SNMP::Info::_validate_autoload_method(peth_power_watts) Unable to
resolve method.
SNMP::Info::_validate_autoload_method(peth_power_status) Unable to
resolve method.
[25868] 2017-12-13 15:25:49 debug [10.0.1.2] power - 0 power modules
SNMP::Info::_validate_autoload_method(e_index) Unable to resolve
method.
[25868] 2017-12-13 15:25:49 debug [10.0.1.2] modules - removed 0
chassis modules
[25868] 2017-12-13 15:25:49 debug [10.0.1.2] modules - 0 chassis
components (added one pseudo for chassis)
[25868] 2017-12-13 15:25:49 debug [10.0.1.2] neigh - setting manual
topology links
SNMP::Info::_validate_autoload_method(hasLLDP) Unable to resolve
method.
SNMP::Info::_validate_autoload_method(hasCDP) Unable to resolve
method.
SNMP::Info::_validate_autoload_method(hasSONMP) Unable to resolve
method.
SNMP::Info::_validate_autoload_method(hasFDP) Unable to resolve
method.
SNMP::Info::_validate_autoload_method(hasEDP) Unable to resolve
method.
SNMP::Info::_validate_autoload_method(hasAMAP) Unable to resolve
method.
SNMP::Info::_validate_autoload_method(hasCDP) Unable to resolve
method.
[25868] 2017-12-13 15:25:49 debug [10.0.1.2] neigh - CDP/LLDP not
enabled!
[25868] 2017-12-13 15:25:49 info discover: finished at Wed Dec 13
16:25:49 2017
[25868] 2017-12-13 15:25:49 info discover: status done: Ended
discover
for 10.0.1.2
[netdisco@berger2 ~]$
Delaunay Cedric - [email protected]
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/netdisco-users
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/netdisco-users
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org!http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/netdisco-users
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org!http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/netdisco-users
--
Cédric Delaunay Direction des Systèmes d'Informations
Equipe Réseau & Telephonie 263, Avenue du Général Leclerc
Tel: 02 23 23 71 59 CS 74205 - 35042 Rennes Cedex
Pour toute demande utiliser l'aide et assistance via l'ENT à l'adresse
http://ent.univ-rennes1.fr
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/netdisco-users
--
Cédric Delaunay Direction des Systèmes d'Informations
Equipe Réseau & Telephonie 263, Avenue du Général Leclerc
Tel: 02 23 23 71 59 CS 74205 - 35042 Rennes Cedex
Pour toute demande utiliser l'aide et assistance via l'ENT à l'adresse
http://ent.univ-rennes1.fr
smime.p7s
Description: Signature cryptographique S/MIME
--- End Message ---
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list - Digest Mode
[email protected]
https://lists.sourceforge.net/lists/listinfo/netdisco-users
