Menu

FWSM - ARP + Names

Help
Thies
2011-04-15
2013-02-02
  • Thies

    Thies - 2011-04-15

    Hi Guys,

    I just installed netdbtracking 1.9 with FWSM support and everything works like a charm, the only thing was that i didn't find all the arp entries.

    After some research i found out that ARP entries with a names combination aren't adapted into netdb, example:

    - None working combination:

    name 127.0.0.1 test
    test-inteface-lan test 000.0000.1110
    

    - Working combination:

    test-inteface-lan 127.0.0.1 000.0000.1110
    

    Am i doing something wrong here? If i need to provide some more information i would like hear so.

    Thnks!

    Best, Thijs

     
  • Jonathan Yantis

    Jonathan Yantis - 2011-04-18

    Thijs,

    I don't have an ASA to work with at the moment, so I'll need a little help.

    NetDB does expect an IP address to be where "test" is in the non-working line above.  Is there a command to get all the names out of the system in one command?  If I could get a few lines of sample output from a "show name mapping" command, then I should be able to resolve the issue.

    Jonathan

     
  • Thies

    Thies - 2011-04-19

    Hey Yantisj,

    Ik have executed some commands on our test FWSM, using the pipe and i syntax you could reverse look up all the names.

    FWSM/test# show names
    name 213.212.107.227 th01
    name 213.212.107.228 th02
    name 213.212.107.229 th03
    name 213.212.107.230 thmas01
    name 213.212.107.231 thmas02
    name 213.212.107.232 thmas03
    name 213.214.107.234 lder01
    name 213.214.107.235 lder02
    
    FWSM/test#show name | i th01
    name 213.212.107.227 th01
    

    If i can provide you with anything else just give an yell! :)

    Best,
    - Thijs

     
  • Jonathan Yantis

    Jonathan Yantis - 2011-04-20

    Thijs,

    Give this updated copy of netdbscraper.pl a shot.  Put it in /opt/netdb/netdbscraper/ and check the output.  I set the $DEBUG variable in that code to 3, so you should see some "Debug ASA name:" lines in /var/log/netdb/control.log with the name and IP mappings. 

    To run an update manually, do netdbctl -ud and then check the control.log if there are issues.

    If that works, the rest should be good to go.  I can't test it though, so let me know how it goes and send me the debug output if it fails.  If it's good, change $DEBUG = 3 to 0.

    http://dl.dropbox.com/u/73454/netdbscraper.pl

    • Jonathan
     
  • Thies

    Thies - 2011-04-21

    Hi Yantisj,

    I have run the script and it works just fine! Now all the hosts with names are imported into the DB, i will test it further later today, if i find any bugs i will let you know.

    Best,
    - Thijs

     
  • Thies

    Thies - 2011-04-21

    Just confirm the change, everything works just fine now! Thank you for commiting the change to the code.

    Best,
    - Thijs

     
  • Jonathan Yantis

    Jonathan Yantis - 2011-04-21

    Great hear it worked the first time, and I'll add this change to v1.9.1.

     

Log in to post a comment.