Re: [Slightly OT] Router logs

From: Pavel Bykov (slidersv@gmail.com)
Date: Fri Jan 23 2009 - 19:33:45 ARST


Bogdan,
similar, but not exactly same, can be generated using following:
(config)#
archive
 log config
  logging enable
  logging size 200
  notify syslog
  hidekeys
*
And then commands will look like that:

*Jan 23 21:25:39.086: %PARSER-5-CFGLOG_LOGGEDCMD: User:console logged
command:interface lo 10
*Jan 23 21:25:45.974: %PARSER-5-CFGLOG_LOGGEDCMD: User:console logged
command:ip address 10.0.0.1 255.255.255.255

But instead of "parser" facility you have priviledge level...

*On Fri, Jan 23, 2009 at 9:56 PM, Darby Weaver <ccie.weaver@gmail.com>wrote:

> I'd like to see the config on the router that generated these logs.
> Sanitized?
>
> On Fri, Jan 23, 2009 at 3:12 PM, Bogdan Sass <bogdan.sass@catc.ro> wrote:
>
> > I received the following log from a friend, who encountered it on one
> of
> > his routers. Does anyone know how this type of log can be generated?
> >
> > Log Buffer (4096 bytes):
> > 3.425: 15 h323-gateway voip interface
> > Jan 23 12:31:03.425: 15 h323-gateway voip id <string> ipaddr <address>
> > <1-65535> priority <1-127>
> > Jan 23 12:31:03.425: 15 h323-gateway voip id <string> ipaddr <address>
> > <1-65535>
> > Jan 23 12:31:03.425: 15 h323-gateway voip id <string> ipaddr <address>
> > Jan 23 12:31:03.429: 15 h323-gateway voip id <string> multicast priority
> > <1-127>
> > Jan 23 12:31:03.429: 15 h323-gateway voip id <string> multicast
> > Jan 23 12:31:03.429: 15 h323-gateway voip h323-id
> > Jan 23 12:31:03.429: 15 h323-gateway voip tech-prefix <string>
> > Jan 23 12:31:03.429: 15 h323-gateway voip bind srcaddr
> > Jan 23 12:31:03.429: 15 max-reserved-bandwidth <1-100>
> > Jan 23 12:31:03.429: 15 max-reserved-bandwidth
> > Jan 23 12:31:03.429: 15 service-policy input <string>
> > Jan 23 12:31:03.429: 15 service-policy output <string>
> > Jan 23 12:31:03.429: 15 service-policy history
> > Jan 23 12:31:03.429: 15 routing dynamic
> > Jan 23 12:31:03.429: 15 hold-queue Number in
> > Jan 23 12:31:03.429: 15 hold-queue Number out
> > Jan 23 12:31:03.429: 15 hold-queue
> > Jan 23 12:31:03.433: 15 netbios nbf
> > Jan 23 12:31:03.433: 15 netbios input-access-filter host <string>
> > Jan 23 12:31:03.433: 15 netbios input-access-filter bytes
> > Jan 23 12:31:03.433: 15 netbios input-access-filter session-bytes
> > Jan 23 12:31:03.433: 15 netbios output-access-filter
> > Jan 23 12:31:03.433: 15 netbios enable-name-cache
> > Jan 23 12:31:03.433: 15 ip rtp header-compression passive
> periodic-refresh
> > Jan 23 12:31:03.433: 15 ip rtp header-compression passive ignore-id
> > Jan 23 12:31:03.433: 15 ip rtp header-compression passive
> > Jan 23 12:31:03.433: 15 ip rtp header-compression passive
> > Jan 23 12:31:03.433: 15 ip rtp header-compression iphc-format
> > Jan 23 12:31:03.433: 15 ip rtp header-compression ietf-format
> > Jan 23 12:31:03.433: 15 ip rtp header-compression
> > Jan 23 12:31:03.433: 15 ip rtp compression-connections
> > Jan 23 12:31:03.437: 15 ip header-compression max-period
> > Jan 23 12:31:03.437: 15 ip header-compression max-time
> > Jan 23 12:31:03.437: 15 ip header-compression max-header
> > Jan 23 12:31:03.437: 15 ip header-compression disable-feedback
> > Jan 23 12:31:03.437: 15 ip header-compression recoverable-loss
> > Jan 23 12:31:03.437: 15 ip rtp reserve
> > Jan 23 12:31:03.437: 15 ip rtp priority
> > Jan 23 12:31:03.437: 15 ip rsvp bandwidth <1-10000000> <1-10000000>
> > sub-pool <0-10000000>
> > Jan 23 12:31:03.437: 15 ip rsvp bandwidth <1-10000000> <1-10000000>
> > sub-pool
> > Jan 23 12:31:03.437: 15 ip rsvp bandwidth <1-10000000> <1-10000000>
> > Jan 23 12:31:03.437: 15 ip rsvp bandwidth <1-10000000>
> > Jan 23 12:31:03.437: 15 ip rsvp bandwidth
> > Jan 23 12:31:03.437: 15 ip rsvp admission-control compression predict
> > method rtp
> > Jan 23 12:31:03.437: 15 ip rsvp admission-control compression predict
> > method udp
> > Jan 23 12:31:03.441: 15 ip rsvp admission-control compression predict
> > Jan 23 12:31:03.441: 15 ip rsvp udp-multicasts <address>
> >
> > Thank you,
> >
> > --
> > Bogdan Sass
> > CCAI,CCSP,JNCIA-ER,CCIE #22221 (RS)
> > Information Systems Security Professional
> > "Curiosity was framed - ignorance killed the cat"
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

-- 
Pavel Bykov
----------------
Don't forget to help stopping the braindumps, use of which reduces value of
your certifications. Sign the petition at http://www.stopbraindumps.com/

Blogs and organic groups at http://www.ccie.net



This archive was generated by hypermail 2.1.4 : Sun Mar 01 2009 - 09:43:39 ARST