Send netdisco-users mailing list submissions to
[email protected]
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.sourceforge.net/lists/listinfo/netdisco-users
or, via email, send a message with subject or body 'help' to
[email protected]
You can reach the person managing the list at
[email protected]
When replying, please edit your Subject line so it is more specific
than "Re: Contents of netdisco-users digest..."
Today's Topics:
1. NetDisco - ssh-collector issues with Palo Alto (Jonathan Hunt)
2. Re: NetDisco - ssh-collector issues with Palo Alto
(Christian Ramseyer)
3. Create graph (Daniel Salazar Falf?n)
4. Re: Create graph (Oliver Gorwits)
5. Netdisco issue - Search failed! Please contact your site
administrator. (Muris)
--- Begin Message ---
Hello,
I am trying to use the NetDisco ssh-collector to pull the arp and mac table
from the Palo Alto Firewalls I manage.
I am getting the following error message:
netdisco@replicant2070-NetDisco:~/environments$ ~/bin/netdisco-sshcollector
-DQ
You must be expressly authorized in order to access/use this system.
Access/use without authority (or beyond authority) may be prosecuted.
Your access/use of this system may be monitored/recorded.
Your access/use constitutes your express consent to such
monitoring/recording.
Evidence of criminal activity may be provided to law enforcement.
[14722] 2017-03-01 21:11:02 debug 10.128.16.20 14722 arpnip()
[14722] 2017-03-01 21:11:03 warn WARNING: no entries received from
<10.128.16.20>
Can't use string ("1") as an ARRAY ref while "strict refs" in use at
/home/netdisco/bin/netdisco-sshcollector line 114, <__ANONIO__> line 3.
The first 5 lines of output is the message you see when you ssh into the
firewall.
This is the config snippet from /home/netdisco/environments/deployment.yml:
sshcollector:
- ip: '10.128.16.20'
user: user
password: password
platform: PaloAlto
In ~/bin/netdisco-sshcollector, this is the code snippet:
111 foreach my $host (@mce_result) {
112 $stats{host}++;
113 info sprintf ' [%s] arpnip - retrieved %s entries',
114 $host->[0], scalar @{$host->[1]};
115 store_arpentries($host->[1]);
116 }
I have no idea where it is getting string "1" from. I can ssh to the
firewall using the username and password just fine from the NetDisco
server. Does anyone have any idea what I am doing wrong or what I should
look at?
Jon
--- End Message ---
--- Begin Message ---
Hi Jonathan
On 01/03/17 22:30, Jonathan Hunt wrote:
> [14722] 2017-03-01 21:11:03 warn WARNING: no entries received from
> <10.128.16.20>
> Can't use string ("1") as an ARRAY ref while "strict refs" in use at
> /home/netdisco/bin/netdisco-sshcollector line 114, <__ANONIO__> line 3.
>
Apparently the commands sent to the device do not find any arp entires.
The ARRAY error message is probably just triggered by $host->[1] being
empty (in this variable, the Mac/IP pairs would be returned).
In lib/App/Netdisco/SSHCollector/Platform/PaloAlto.pm, the following
commands are executed:
set cli pager off
show arp all
And then there should be output that looks like
<some text, no spaces> ip mac
<some text, no spaces> ip mac
...
Maybe you can try these commands manually and check if they return the
expected output?
For further debugging, you can also add some debug statements* to the
code in PaloAlto.pm, maybe that could show where it goes wrong.
I'm not sure if I have access to any Palo Alto devices to try it myself,
but I'll check next time I'm logged into a network where we might have some.
Cheers
Christian
*Like the one on line 38 here:
https://github.com/netdisco/netdisco/blob/master/Netdisco/lib/App/Netdisco/SSHCollector/Platform/PaloAlto.pm
--- End Message ---
--- Begin Message ---
Hi, I'm trying to create a network topology with lldp / CDP devices,
however when I run ~ / bin / netdisco-do graph I just create in the .png
image the topology of a specific device with about 80 devices , In my
database I have a total of 700 devices. Is there any special command to be
able to discover all that is reflected in the .png file? Also how can I
integrate what is inside the home / netdisco / graph folder to the netdisco
web interface? thank you very much
--- End Message ---
--- Begin Message ---
Hi Daniel
On 2017-03-16 19:45, Daniel Salazar Falfán wrote:
Hi, I'm trying to create a network topology with lldp / CDP devices,
however when I run ~ / bin / netdisco-do graph I just create in the
.png image the topology of a specific device with about 80 devices ,
In my database I have a total of 700 devices.
The code will only draw one physical network of devices, and so it picks
the largest group of connected devices in the Netdisco database. If your
700 devices are not fully connected, and the largest group connected by
LLDP/CDP/etc is 80, then only the group of 80 is shown.
Patches are welcome if you want to prepare the SQL and code to plot
larger sets of devices.
Is there any special
command to be able to discover all that is reflected in the .png file?
Sorry, I'm not sure I understand this question. You can run "discover"
on an IP prefix (e.g. /24) at the command line, and a job will be queued
for each of the devices in the IP range.
Also how can I integrate what is inside the home / netdisco / graph
folder to the netdisco web interface? thank you very much
You would need to write an extension for the web interface (i.e. a
plugin). There is some documentation here, and you probably want to
create a "device page tab":
https://metacpan.org/pod/distribution/App-Netdisco/lib/App/Netdisco/Manual/WritingPlugins.pod
Good luck!
regards,
oliver.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/netdisco-users
--- End Message ---
--- Begin Message ---
Hi all,
I have a install of Netdisco 2, however when i want to view the ports on
big chassis devices like 6500's with a lot of connections, it seems it cant
handle bringing up to display what is connected. Even if i untick the bare
minimum on the menu on the right to display, it still doesnt show anything
and comes up saying "Search failed! Please contact your site administrator."
How can i get it to display ports on these large chassis ? It works on
Netdisco 1, however Netdisco 1 doesnt display Cisco port channels properly
or devices connected, so I am using 2 for this. I have both versions
running concurrently on different boxes.
Any help would be appreciated. Thankyou
Muris
--- End Message ---
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list - Digest Mode
[email protected]
https://lists.sourceforge.net/lists/listinfo/netdisco-users
