netdisco-users Digest, Vol 138, Issue 18

Thu, 18 Jan 2018 01:17:51 -0800 

Send netdisco-users mailing list submissions to
        [email protected]

To subscribe or unsubscribe via the World Wide Web, visit
        https://lists.sourceforge.net/lists/listinfo/netdisco-users
or, via email, send a message with subject or body 'help' to
        [email protected]

You can reach the person managing the list at
        [email protected]

When replying, please edit your Subject line so it is more specific
than "Re: Contents of netdisco-users digest..."

Today's Topics:

   1. Re: Netdisco docker upgrade (Oliver Gorwits)
   2. Re: Expiry for logged IP retention ? (Oliver Gorwits)
   3. Re: Detect device as Checkpoint (Oliver Gorwits)
--- Begin Message --- 
Hi Josep
This dockerfile is maintained outside of the Netdisco project by "imimsri" so you will need to open a ticket at their github repository for support.
However we are also working on dockerfiles within the Netdisco project... they are not finished yet, but if you are interested you can certainly test and help us to get things working: 

https://github.com/netdisco/netdisco-docker

regards,
oliver.

On 2018-01-18 08:42, Josep Manel Andrés Moscardó wrote:

Hi,
I have just upgraded the version , here is the Dockerfile I am using:

https://github.com/imimsri/netdisco/blob/master/Dockerfile


So, after the upgrade I've notice the neighbors are not shown
correctly, the main switch , which was previously looking as a star,
now shows only two connections.

I have done the following, but I bet those changes will be lost after
container's reboot.

How should I work the docker upgrade and what can I do now?


[root@cd04c5e67a0e /]# netdisco-deploy
This is the Netdisco II deployment script.

Before we continue, the following prerequisites must be in place:
 * Database added to PostgreSQL for Netdisco
 * User added to PostgreSQL with rights to the Netdisco Database
* "~/environments/deployment.yml" file configured with Database dsn/user/pass 
 * A full backup of any existing Netdisco database data
 * Internet access (for OUIs and MIBs)

You will be asked to confirm all changes to your system.

So, is all the above in place? [Y/n]: y

Would you like to deploy the database schema? [Y/n]: y
DB schema update complete.
Statistics updated.

Download and update vendor MAC prefixes (OUI data)? [Y/n]: y
OUI update complete.

Download and update MIB files? [Y/n]: y
MIBs update complete.
[root@cd04c5e67a0e /]# netdisco-web restart
config watcher: watching /netdisco/environments for updates.
Netdisco Web                                                  [Started]
[root@cd04c5e67a0e /]#
[root@cd04c5e67a0e /]# netdisco-backend restart
config watcher: watching /netdisco/environments for updates.
Netdisco Backend                                              [Started]
[root@cd04c5e67a0e /]#



Thanks.

--- End Message ---
--- Begin Message --- 
Thanks Mark
Thinking about this a bit further, I can see why we are in this situation - the node and node_ip have many-many mappings and having one set of config settings for only node expiry has made things ambiguous.
What I propose is to have a node_ip_freshness config setting, just as we have a node_freshness setting. It will work in the same way, so a default of '0' has the Netdisco 1.x behaviour that we need to restore, and a duration can be given (days?) if people wish to have the "new" behaviour.
see: https://github.com/netdisco/netdisco/wiki/Configuration#code-node_freshness-code 

regards,
oliver.

On 2018-01-17 23:11, Mark Boolootian wrote:
Briefly, my understanding is that Netdisco is keeping the IPs where the MAC address is still also present. For situations where a MAC is roaming and getting different IPs all the time, this can certainly balloon the archive (I'm sure there are other scenarios too). For the curious, the code is here: 

Privacy addresses with IPv6 are a major factor.

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/netdisco-users

--- End Message ---
--- Begin Message --- 
Hi Cedric

I guess not many people are using this, and are also on the list?
I have sort of lost track of where we are on this - what patches are proposed and working, and whether this is an issue for Palo Alto AND Checkpoint, or only one platform.
So if you have working code... please could you open a ticket on our repository and give details: 

https://github.com/netdisco/netdisco/issues/new

Many thanks

Oliver.

On 2018-01-17 08:21, cedric delaunay wrote:

Hello all,
 Nobody had successfull stuf with checkpoint ? Am I the onlyest with
these dificulties ?
 Thanks
 Cédric

 Le 09/01/2018 à 09:11, cedric delaunay a écrit :


Hello,
It's better with this patch :

[root@berger2 TOIP7450]$ diff


/home/netdisco/perl5/lib/perl5/App/Netdisco/SSHCollector/Platform/GAIAEmbedded.pm.bak



/home/netdisco/perl5/lib/perl5/App/Netdisco/SSHCollector/Platform/GAIAEmbedded.pm

69c69,70
< my $linereg = qr/?s+(([0-9.]+))s+ats+([a-fA-F0-9:]+)/;
---

my $linereg = qr/([0-9.]+)s+ethers+([a-fA-F0-9:]+).+/;
# my $linereg = qr/?s+(([0-9.]+))s+ats+([a-fA-F0-9:]+)/;


But Checkpoints are still detect as Level2 device, unknown
vendor...
Thanks
Cédric

Le 08/01/2018 à 15:39, cedric delaunay a écrit :

Hum,
ssh-collector bug looks like paloalto's one

Arp table result on checkpoint looks like :

Address HWtype HWaddress Flags Mask Iface
10.21.4.250 ether 00:1C:FF:AA:AE:98 C eth1.954
XX.YYY.211.240 ether FF:FF:FF:FF:FF:FF CM eth1.355

I guess regexp in


/home/netdisco/perl5/lib/perl5/App/Netdisco/SSHCollector/Platform/GAIAEmbedded.pm

have to be updated.
That do you think about ?
Cédric

Le 08/01/2018 à 15:21, cedric delaunay a écrit :

Hi Olivier,
Thanks for your reply and happy new year all.
I let the subject standby during holidays but today I'm still
unable to detect my device as i would like.

I'v got a error during ssh-collector execution :

[netdisco@berger2 ~]$ ~/bin/netdisco-sshcollector -DQ
Warning: Permanently added '10.0.1.2' (RSA) to the list of known
hosts.
This system is for authorized use only.
This system is for authorized use only.
[1080] 2018-01-08 13:29:06 debug 10.0.1.3 1080 arpnip()
[1082] 2018-01-08 13:29:06 debug 10.0.1.2 1082 arpnip()
[1080] 2018-01-08 13:30:06  warn WARNING: no entries received from
<10.0.1.3>
[1082] 2018-01-08 13:30:06  warn WARNING: no entries received from
<10.0.1.2>
Can't use string ("1") as an ARRAY ref while "strict refs" in use at
/home/netdisco/bin/netdisco-sshcollector line 114, <$__ANONIO__>
line 3.

I upgraded netdisco to 2.38.5
discover process finds some characteristics on device but not
interesting things
I got : running time, ip adresses, location
but not : vendor, version, serial-number...

Checkpoint are on gaia 80.10 and are on blades, not virtual
firewalls.
Do anybody succeed on this before ?
Thanks
Cédric

Le 14/12/2017 à 23:24, Oliver Gorwits a écrit :
Hi Cedric,

On 2017-12-13 15:27, Delaunay Cedric wrote:
Hi all,
 I try to ensure netdisco detect our physical checkpoint firewalls
but
I'm unable to make it run...

You probably want the "ssh collector" helper script, which can
retrieve ARP entries from the firewall:



https://metacpan.org/pod/distribution/App-Netdisco/bin/netdisco-sshcollector

[1]

together with the standard Discover, it should be enough.

regards,
oliver.

 On first try, discover dectects it as layer2 device so I applyed
this
patch :


http://netdisco-users.narkive.com/tTHHPnmv/checkpoint-firewall-no-arp-cache-polling-since-upgrade-from-ipso-to-gaia-os#post3

[2]

 This is better as it now detect interfaces but it stops on
SNMP::Info's mib and never use checkpint's mib.
 here is a delete/discover of the device.

 does anybody as an idee to help me ?
 Thanks a lot
 Cedric

[netdisco@server ~]$ /home/netdisco/bin/netdisco-do delete -d
10.0.1.2
-DI
[24983] 2017-12-13 15:25:39 info delete: started at Wed Dec 13
16:25:39 2017
[24983] 2017-12-13 15:25:39 info delete: finished at Wed Dec 13
16:25:39 2017
[24983] 2017-12-13 15:25:39 info delete: status done: Deleted
device
10.0.1.2.

[netdisco@server ~]$ /home/netdisco/bin/netdisco-do discover -d
10.0.1.2 -DI
[25868] 2017-12-13 15:25:42 info discover: started at Wed Dec 13
16:25:42 2017
[25868] 2017-12-13 15:25:42 debug [10.0.1.2] try_connect with ver:
2,
class: SNMP::Info, comm:
SNMP::Info::_global [3] uptime :
DISMAN-EVENT-MIB::sysUpTimeInstance :
.1.3.6.1.2.1.1.3.0
SNMP::Info::_validate_autoload_method(CARP_TRACE) [4] Unable to
resolve
method.
SNMP::Info::_global(uptime) [5] Timeout at
/home/netdisco/perl5/lib/perl5/App/Netdisco/Util/SNMP.pm line 176.
[25868] 2017-12-13 15:25:45 debug [10.0.1.2] try_connect with ver:
1,
class: SNMP::Info, comm:
SNMP::Info::_global [3] uptime :
DISMAN-EVENT-MIB::sysUpTimeInstance :
.1.3.6.1.2.1.1.3.0
SNMP::Info::_validate_autoload_method(CARP_TRACE) [4] Unable to
resolve
method.
SNMP::Info::_global(uptime) [5] Timeout at
/home/netdisco/perl5/lib/perl5/App/Netdisco/Util/SNMP.pm line 176.
[25868] 2017-12-13 15:25:48 debug [10.0.1.2] try_connect with ver:
2,
class: SNMP::Info, comm:
SNMP::Info::_global [3] uptime :
DISMAN-EVENT-MIB::sysUpTimeInstance :
.1.3.6.1.2.1.1.3.0
SNMP::Info::_global [3] layers : SNMPv2-MIB::sysServices.0 :
.1.3.6.1.2.1.1.7.0
SNMP::Info::_validate_autoload_method(CARP_TRACE) [4] Unable to
resolve
method.
SNMP::Info::_global(layers) [6] NOSUCHINSTANCE at
/home/netdisco/perl5/lib/perl5/App/Netdisco/Util/SNMP.pm line 176.
SNMP::Info::_global [3] description : SNMPv2-MIB::sysDescr.0 :
.1.3.6.1.2.1.1.1.0
SNMP::Info::_validate_autoload_method(CARP_TRACE) [4] Unable to
resolve
method.
Device doesn't implement sysServices but did return sysDescr. Might

give unexpected results.
 at /home/netdisco/perl5/lib/perl5/App/Netdisco/Util/SNMP.pm line
155.
SNMP::Info::_global [3] id : SNMPv2-MIB::sysObjectID.0 :
.1.3.6.1.2.1.1.2.0
SNMP::Info 3.34
SNMP::Info::device_type() [7] layers:00000000 id:2620
sysDescr:"Linux
ckp-iutsm1 2.6.18-92cpx86_64 #1 SMP Fri Apr 7 13:55:39 IDT 2017
x86_64"
SNMP::Info::_load_attr [8] ip_index : IP-MIB::ipAdEntIfIndex :
.1.3.6.1.2.1.4.20.1.2
SNMP::Info::_load_attr [8] interfaces : IF-MIB::ifIndex :
.1.3.6.1.2.1.2.2.1.1
SNMP::Info::_load_attr [8] ip_netmask : IP-MIB::ipAdEntNetMask :
.1.3.6.1.2.1.4.20.1.3
[25868] 2017-12-13 15:25:48 debug [10.0.1.2] device - aliased as
XXXXXXXXXX
...............
[25868] 2017-12-13 15:25:48 debug [10.0.1.2] device - aliased as
YYYYYYYYYY
[25868] 2017-12-13 15:25:48 debug resolving 23 aliases with max 50
outstanding requests
SNMP::Info::_validate_autoload_method(vtp_d_name) [9] Unable to
resolve
method.
SNMP::Info::_global [3] contact : SNMPv2-MIB::sysContact.0 :
.1.3.6.1.2.1.1.4.0
SNMP::Info::_global [3] name : SNMPv2-MIB::sysName.0 :
.1.3.6.1.2.1.1.5.0
SNMP::Info::_global [3] location : SNMPv2-MIB::sysLocation.0 :
.1.3.6.1.2.1.1.6.0
SNMP::Info::_global [3] ports : IF-MIB::ifNumber.0 :
.1.3.6.1.2.1.2.1.0
SNMP::Info::_validate_autoload_method(mac) [10] Unable to resolve
method.
SNMP::Info::_validate_autoload_method(ps1_type) [11] Unable to
resolve
method.
SNMP::Info::_validate_autoload_method(ps2_type) [12] Unable to
resolve
method.
SNMP::Info::_validate_autoload_method(ps1_status) [13] Unable to
resolve
method.
SNMP::Info::_validate_autoload_method(ps2_status) [14] Unable to
resolve
method.
SNMP::Info::_validate_autoload_method(fan) [15] Unable to resolve
method.
SNMP::Info::_validate_autoload_method(slots) [16] Unable to resolve
method.
SNMP::Info::_validate_autoload_method(vendor) [17] Unable to
resolve
method.
SNMP::Info::_validate_autoload_method(os) [18] Unable to resolve
method.
SNMP::Info::_validate_autoload_method(os_ver) [19] Unable to
resolve
method.
SNMP::Info::_validate_autoload_method(model) [20] Unable to resolve
method.
SNMP::Info::_validate_autoload_method(serial) [21] Unable to
resolve
method.
[25868] 2017-12-13 15:25:48 debug [10.0.1.2] device - removed 0
aliases
[25868] 2017-12-13 15:25:48 debug [10.0.1.2] device - added 23 new
aliases
SNMP::Info::_load_attr [8] i_type : IF-MIB::ifType :
.1.3.6.1.2.1.2.2.1.3
SNMP::Info::_validate_autoload_method(i_ignore) [22] Unable to
resolve
method.
SNMP::Info::_load_attr [8] i_description : IF-MIB::ifDescr :
.1.3.6.1.2.1.2.2.1.2
SNMP::Info::_load_attr [8] i_mtu : IF-MIB::ifMtu :
.1.3.6.1.2.1.2.2.1.4
SNMP::Info::_load_attr [8] orig_i_speed : IF-MIB::ifSpeed :
.1.3.6.1.2.1.2.2.1.5
SNMP::Info::_load_attr [8] i_mac : IF-MIB::ifPhysAddress :
.1.3.6.1.2.1.2.2.1.6
SNMP::Info::_load_attr [8] i_up : IF-MIB::ifOperStatus :
.1.3.6.1.2.1.2.2.1.8
SNMP::Info::_load_attr [8] i_up_admin : IF-MIB::ifAdminStatus :
.1.3.6.1.2.1.2.2.1.7
SNMP::Info::_load_attr [8] i_name : IF-MIB::ifName :
.1.3.6.1.2.1.31.1.1.1.1
SNMP::Info::_validate_autoload_method(i_duplex) [23] Unable to
resolve
method.
SNMP::Info::_validate_autoload_method(i_duplex_admin) [24] Unable
to
resolve method.
SNMP::Info::_validate_autoload_method(i_stp_state) [25] Unable to
resolve
method.
SNMP::Info::_validate_autoload_method(i_vlan) [26] Unable to
resolve
method.
SNMP::Info::_load_attr [8] i_lastchange : IF-MIB::ifLastChange :
.1.3.6.1.2.1.2.2.1.9
SNMP::Info::_validate_autoload_method(agg_ports) [27] Unable to
resolve
method.
SNMP::Info::_global [3] load_uptime :
DISMAN-EVENT-MIB::sysUpTimeInstance
: .1.3.6.1.2.1.1.3.0
SNMP::Info::_global [3] snmpEngineTime :
SNMP-FRAMEWORK-MIB::snmpEngineTime.0 : .1.3.6.1.6.3.10.2.1.3.0
[25868] 2017-12-13 15:25:48 debug [10.0.1.2] interfaces - removed 0

interfaces
[25868] 2017-12-13 15:25:48 debug [10.0.1.2] interfaces - added 14
new
interfaces
SNMP::Info::_validate_autoload_method(i_ssidlist) [28] Unable to
resolve
method.
SNMP::Info::_validate_autoload_method(v_name) [29] Unable to
resolve
method.
SNMP::Info::_validate_autoload_method(v_index) [30] Unable to
resolve
method.
SNMP::Info::_validate_autoload_method(i_vlan) [26] Unable to
resolve
method.
SNMP::Info::_validate_autoload_method(i_vlan_membership) [31]
Unable to
resolve method.
SNMP::Info::_validate_autoload_method(i_vlan_type) [32] Unable to
resolve
method.
[25868] 2017-12-13 15:25:49 debug [10.0.1.2] vlans - removed 0
device
VLANs
[25868] 2017-12-13 15:25:49 debug [10.0.1.2] vlans - added 0 new
device VLANs
[25868] 2017-12-13 15:25:49 debug [10.0.1.2] vlans - removed 0 port

VLANs
[25868] 2017-12-13 15:25:49 debug [10.0.1.2] vlans - added 0 new
port
VLANs
SNMP::Info::_validate_autoload_method(peth_power_watts) [33] Unable
to
resolve method.
SNMP::Info::_validate_autoload_method(peth_power_status) [34]
Unable to
resolve method.
[25868] 2017-12-13 15:25:49 debug [10.0.1.2] power - 0 power
modules
SNMP::Info::_validate_autoload_method(e_index) [35] Unable to
resolve
method.
[25868] 2017-12-13 15:25:49 debug [10.0.1.2] modules - removed 0
chassis modules
[25868] 2017-12-13 15:25:49 debug [10.0.1.2] modules - 0 chassis
components (added one pseudo for chassis)
[25868] 2017-12-13 15:25:49 debug [10.0.1.2] neigh - setting manual

topology links
SNMP::Info::_validate_autoload_method(hasLLDP) [36] Unable to
resolve
method.
SNMP::Info::_validate_autoload_method(hasCDP) [37] Unable to
resolve
method.
SNMP::Info::_validate_autoload_method(hasSONMP) [38] Unable to
resolve
method.
SNMP::Info::_validate_autoload_method(hasFDP) [39] Unable to
resolve
method.
SNMP::Info::_validate_autoload_method(hasEDP) [40] Unable to
resolve
method.
SNMP::Info::_validate_autoload_method(hasAMAP) [41] Unable to
resolve
method.
SNMP::Info::_validate_autoload_method(hasCDP) [37] Unable to
resolve
method.
[25868] 2017-12-13 15:25:49 debug [10.0.1.2] neigh - CDP/LLDP not
enabled!
[25868] 2017-12-13 15:25:49 info discover: finished at Wed Dec 13
16:25:49 2017
[25868] 2017-12-13 15:25:49 info discover: status done: Ended
discover
for 10.0.1.2
[netdisco@berger2 ~]$

Delaunay Cedric - [email protected]


------------------------------------------------------------------------------


Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot [42]

_______________________________________________
Netdisco mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/netdisco-users [43]



------------------------------------------------------------------------------


Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot [42]
_______________________________________________
Netdisco mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/netdisco-users [43]


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot [42]

_______________________________________________
Netdisco mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/netdisco-users [43]

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot [42]

_______________________________________________
Netdisco mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/netdisco-users [43]

--
Cédric Delaunay Direction des Systèmes d'Informations
Equipe Réseau & Telephonie 263, Avenue du Général Leclerc
Tel: 02 23 23 71 59 CS 74205 - 35042 Rennes Cedex

Pour toute demande utiliser l'aide et assistance via l'ENT à
l'adresse
http://ent.univ-rennes1.fr [44]

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot [42]

_______________________________________________
Netdisco mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/netdisco-users [43]

--
Cédric Delaunay Direction des Systèmes d'Informations
Equipe Réseau & Telephonie 263, Avenue du Général Leclerc
Tel: 02 23 23 71 59 CS 74205 - 35042 Rennes Cedex

Pour toute demande utiliser l'aide et assistance via l'ENT à
l'adresse
http://ent.univ-rennes1.fr [44]



Links:
------
[1] https://metacpan.org/pod/distribution/App-Netdisco/bin/netdisco-sshcollector 
[2]
http://netdisco-users.narkive.com/tTHHPnmv/checkpoint-firewall-no-arp-cache-polling-since-upgrade-from-ipso-to-gaia-os#post3
[3] Info::_global
[4] Info::_validate_autoload_method%28CARP_TRACE%29
[5] Info::_global%28uptime%29
[6] Info::_global%28layers%29
[7] Info::device_type%28%29
[8] Info::_load_attr
[9] Info::_validate_autoload_method%28vtp_d_name%29
[10] Info::_validate_autoload_method%28mac%29
[11] Info::_validate_autoload_method%28ps1_type%29
[12] Info::_validate_autoload_method%28ps2_type%29
[13] Info::_validate_autoload_method%28ps1_status%29
[14] Info::_validate_autoload_method%28ps2_status%29
[15] Info::_validate_autoload_method%28fan%29
[16] Info::_validate_autoload_method%28slots%29
[17] Info::_validate_autoload_method%28vendor%29
[18] Info::_validate_autoload_method%28os%29
[19] Info::_validate_autoload_method%28os_ver%29
[20] Info::_validate_autoload_method%28model%29
[21] Info::_validate_autoload_method%28serial%29
[22] Info::_validate_autoload_method%28i_ignore%29
[23] Info::_validate_autoload_method%28i_duplex%29
[24] Info::_validate_autoload_method%28i_duplex_admin%29
[25] Info::_validate_autoload_method%28i_stp_state%29
[26] Info::_validate_autoload_method%28i_vlan%29
[27] Info::_validate_autoload_method%28agg_ports%29
[28] Info::_validate_autoload_method%28i_ssidlist%29
[29] Info::_validate_autoload_method%28v_name%29
[30] Info::_validate_autoload_method%28v_index%29
[31] Info::_validate_autoload_method%28i_vlan_membership%29
[32] Info::_validate_autoload_method%28i_vlan_type%29
[33] Info::_validate_autoload_method%28peth_power_watts%29
[34] Info::_validate_autoload_method%28peth_power_status%29
[35] Info::_validate_autoload_method%28e_index%29
[36] Info::_validate_autoload_method%28hasLLDP%29
[37] Info::_validate_autoload_method%28hasCDP%29
[38] Info::_validate_autoload_method%28hasSONMP%29
[39] Info::_validate_autoload_method%28hasFDP%29
[40] Info::_validate_autoload_method%28hasEDP%29
[41] Info::_validate_autoload_method%28hasAMAP%29
[42] http://sdm.link/slashdot
[43] https://lists.sourceforge.net/lists/listinfo/netdisco-users
[44] http://ent.univ-rennes1.fr

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

_______________________________________________
Netdisco mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/netdisco-users

--- End Message ---
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list - Digest Mode
[email protected]
https://lists.sourceforge.net/lists/listinfo/netdisco-users

Reply via email to