Welcome, Guest. Please login or register.

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Messages - rickli

Pages: [1] 2 3 ... 146
Discovery / Re: Issue Configuring and Using netflow
« on: August 31, 2018, 11:57:45 AM »
Make sure you set nfdpath in nedi.conf to /var/cache/ndump

Discovery / Re: Write Nodes: "Loop .. belongs to this device .."
« on: August 31, 2018, 11:17:44 AM »
Ah, like them old Cisco 3500XL switches. You can add |^001f45 to ignoredmacs, which should help...

You need to make sure that the source IP correspond with the IP used for discovery (main IP). Then you should see the correct device and syslog events receive a higher level which is mapped from the syslog severity.

News / DHCP based OS fingerprinting
« on: August 21, 2018, 12:15:48 PM »
Thanks to the ingenious minds over at www.dumplab.ch, you can have DHCP based OS fingerprinting for NeDi nodes. And best of all, it's free!


Discovery / Re: MACFLOOD Treshold Settings
« on: August 21, 2018, 11:42:06 AM »
Look for binoculars in the input form. It's the 3rd number field...

Discovery / Re: Write Nodes: "Loop .. belongs to this device .."
« on: August 21, 2018, 11:40:12 AM »
Is this an interlink on a stack? If so, try adding the MAC to ignoredmacs in nedi.conf...

Definition Files / Re: Def for Cisco C9300-24P
« on: August 21, 2018, 11:32:02 AM »
Try this for Poe:
IFpowr   N

Discovery / Re: Config Backup - "show run" error on IOS-XR Devices?!
« on: July 27, 2018, 01:46:32 PM »
Search for IOS-xr in inc/libcli.pm

Replace the line:
$cmd{'IOS-xr'}{'cfst'} = '^!! IOS XR Configuration';

With this:
$cmd{'IOS-xr'}{'cfst'} = 'version';

Not sure if all IOS-xr use that format now, but if they do I can adjust it for the next release...

Discovery / Re: multiple Errors on Switch Discovery
« on: July 23, 2018, 01:59:20 PM »
Sure, send a mail and I'll include it in the next release, tx!

Definition Files / Re: Definition file for Aruba/HPE JL256A / 2930F
« on: July 11, 2018, 12:59:47 PM »
You could copy the definition of a similar model and change the type. Watch the Defgen tutorial on youtube for more info...

Discovery / Re: multiple Errors on Switch Discovery
« on: July 11, 2018, 12:58:22 PM »
The problem lies here:
IF  :Walking description
ERR :IF Desc The message size exceeded the buffer maxMsgSize of 1472

SNMP is a dated UDP based protocol and unfortunately not very smart about fragmented packets. Edit line 902 of inc/libsnmp.pm and add |other after Netgear...

Discovery / Re: netfilter question
« on: July 05, 2018, 05:21:00 PM »
Yes as the . matches everything

Discovery / Re: Discovery and nedi.conf "useivl" parameter
« on: July 04, 2018, 04:28:38 PM »
This line means, it was found on an access port:
FWDC:001f2903c12d on Gi4/0/27   Vl500   1G-FD   1

So, in Nodes-List you should see that node connected on Gi4/0/27, right? grep the whole output for that MAC address, if not to see how far it comes...

Discovery / Re: Discovery and nedi.conf "useivl" parameter
« on: June 13, 2018, 12:15:08 AM »
ARP entries are matched to MAC no matter the Vlan. Try nedi.pl -v and look for lines beginning with FWD. If you see an M or D at the end of the line, it means the MAC was found on an uplink. Therefore it won't be added as node. Do you see lines without M or D?

Installation / Re: Public-key authentication with ssh
« on: June 13, 2018, 12:10:02 AM »
Use System-Files to edit nedi.conf. Click the padlock to open the "encryption popup". Enter clear PW and copy result back in nedi.conf:
usrsec    admin 41326464

You can increase security by changing the secret in the function XORpass() in libmisc.pm, but don't forget it after the next update...

Pages: [1] 2 3 ... 146