[rancid] Weird commands on Cisco ASA

heasley heas at shrubbery.net
Thu Aug 30 20:20:51 UTC 2018


Thu, Aug 30, 2018 at 08:14:35PM +0000, Michael T. Voity:
> Hello,
> 
> I have a firewall that has not been updated by rancid for a few days.
> 
> Upon investigation I did some testing from the server found this -
> 
> Looks like it is adding the command 'rancid' after it logs in.
> 
> This is my only device that does it,   among the 50+ that rancid is polling.
> 
> [rancid at netwatch bin]$ ./clogin <hostname removed>
> <hostname removed>
> spawn ssh -c aes256-ctr -x -l rancid <hostname removed>
> rancid@<hostname removed>'s password:
> User rancid logged in to <hostname removed>
> Logins over the last 78 days: 6800.  Last login: 16:04:41 EDT Aug 30 2018 from <removed>

please upgrade to rancid 3.8



More information about the Rancid-discuss mailing list